A series of updates by key aviation bodies has brought new clarity to travel procedures for passengers flying to Somaliland. IATA, FlyDubai and Ethiopian Airlines have each revised their guidance to confirm that travellers arriving at Hargeisa Egal International Airport or Berbera Airport can obtain visas on arrival. The updates come as Somalia faces a significant cybersecurity breach affecting its national e-Visa platform.
IATA was the first to update its global travel database. Its notice specifies that visa on arrival is available at Somaliland’s two international airports, distinguishing these entry points from Somalia’s separate e-Visa system. IATA’s database is used widely across the aviation industry, informing airline check-in procedures, travel agencies and immigration authorities worldwide.
Soon after, FlyDubai issued a similar update. The airline clarified that passengers travelling to Somaliland are eligible for visas on arrival at both Hargeisa and Berbera airports. FlyDubai’s advisory also differentiates between Somaliland’s entry procedures and Somalia’s online visa process.
Ethiopian Airlines later released its own bulletin. The carrier stated that Somalia’s e-Visa requirements do not apply to passengers flying into Hargeisa or Berbera. Instead, these travellers are instructed to follow Somaliland’s immigration procedures upon arrival.
These updates reflect the long-standing operational reality that Somaliland administers its own airports and entry procedures, even though it is not internationally recognised as a sovereign state. For many years, passengers arriving at Hargeisa and Berbera have received visas on arrival through local immigration authorities. However, not all aviation databases and airline advisories consistently reflected this arrangement.
The timing of the updates coincides with a significant cyber incident affecting Somalia’s e-Visa system. The United States Embassy in Somalia issued a security alert stating that hackers had breached the platform, potentially exposing personal information belonging to at least thirty five thousand applicants. According to the embassy, the compromised data includes names, passport photos, dates of birth, marital status, email addresses and home addresses. The embassy advised United States citizens who used the system to contact consular services and monitor for possible misuse of their personal information.
The breach has raised concerns among cybersecurity experts regarding the vulnerability of digital visa platforms. Personal identification data collected through e-Visa systems can be used in identity theft, fraud and other forms of cybercrime unless strong protections are in place.
Somaliland’s visa process does not rely on an online application system, and travellers typically complete entry procedures in person at the airport. While this approach has limitations, it also means that passport data collected by Somaliland immigration is not stored in a centralised online database that could be targeted by similar cyberattacks.
For airlines, the updated guidance helps ensure that passengers receive accurate information before travelling. Miscommunication regarding visa requirements can result in travellers being denied boarding or delayed upon arrival.
Although the recent updates do not imply any form of diplomatic recognition, they do establish greater procedural clarity within international aviation systems. By distinguishing Somaliland’s airports and entry procedures from Somalia’s online visa process, airlines and aviation authorities reduce confusion for passengers and streamline compliance with local regulations.
It remains to be seen whether additional airlines or travel platforms will update their systems in response. For now, the changes ensure that passengers heading to Hargeisa or Berbera receive accurate instructions regarding visa on arrival, while travellers to Somalia are made aware of the current security risks associated with the country’s e-Visa platform.