The EES Queues Are Probably Shorter Than You Heard, the Loopholes Are Mostly Folklore, and the 90-Day Clock Is Very Real

In March, we briefed you on the Sistema de Entradas y Salidas — the EU's Entry/Exit System: from April 10th, every non-EU visitor's entries and exits would be logged biometrically, the 90-in-180-day arithmetic computed automatically, and the era of the uncounted passport stamp closed (that piece is here). The system is now three months old; your summer guests are inside it, and this is the field report: what we told you to expect, compared with what actually happened.

You have seen the five-hour horror stories. That figure is real, and it is not Málaga's: it comes from Europe-wide peak reporting. The documented worst at Málaga-Costa del Sol Airport since launch is around two hours (Christmas) and ninety minutes (a bank-holiday Sunday in May). A typical arrival runs 10 to 40 minutes at passport control, and Spain now operates a 25-minute rule at Aena airports: when kiosk queues pass 25 minutes, staff divert eligible travellers to manual lanes. Confirmed July 2026.

So our March advice ("budget 30 to 45 minutes") gets its correction: plan 45 minutes as the floor and 90 on peak days, and know the peak-day pattern. Ground-handling strikes still run every Monday, Wednesday and Friday until at least July 31st, which bunches arrivals into the same passport hall, and the heaviest road weekend of the year is July 31st to August 2nd. Two pieces of good news survived contact with reality: repeat visitors really are faster (their second arrival is a match, not an enrolment), and airlines' demand that Brussels suspend the system for the summer was refused on July 8th, so the rules your guests learned in the spring are the rules. Pickup logistics, terminal layout, and parking arithmetic: EES at Málaga Airport, updated this week.

Here is the date nobody marked: visitors who arrived when the system went live on April 10th and stayed on hit their 90th day on July 8th. The first cohort of automatically counted stays has now matured, and the system has flagged roughly 7,000 overstayers across Schengen in six months. Flagged is not fined; we found no documented case yet of a penalty issued at a Spanish exit. But the ledger exists, it is consulted at every crossing, and Spanish law prices an overstay at €501 to €10,000 with a possible entry ban.

Two details worth passing to whoever tracks the family calendar. Days spent in Schengen before April 10th are not in the digital calculator, though the legal 90/180 rule always counted them and an officer can still read old stamps. And the tool for checking remaining days is the EU's official web calculator at travel-europe.europa.eu, not the "Travel to Europe" app, which does not track anyone's status. For tracking the whole family's ledger in one view, the free Euro Visa Calculator handles multiple travellers with a column each, keeps the data on your own device, and needs no account; use it for planning, and the official calculator as the record of truth. Check the ledger before booking the return flight, not after.

We have been hearing the same stories you have: that people who know people arrive by ferry, by private jet, through some border the system forgot. We checked. The ferry route is a myth: Algeciras and Tarifa run full biometric controls, and this summer's Operación Paso del Estrecho launched with EES processing for all 3.5 million expected crossings. Ceuta and Melilla are a myth: biometrically enrolled since spring, with a €4.1M "smart border" at Melilla. The private jet is a myth with better catering: general aviation arrives at designated entry points and registers like everyone else; the infrastructure is thinner, but nobody has documented an actual gap.

One genuine exception exists, and it opens today. Under the treaty signed this week, the fence at La Línea comes down, land checks end, and the Gibraltar crossing becomes the one border in Europe where the Entry/Exit System will never apply. Before anyone's brother-in-law gets excited: the 90/180 clock still runs on days spent there and onward in Spain; the crossing simply stops creating records. Which cuts both ways. Under the system's own rules, a person with no entry record is presumed to be an overstayer the first time a wired-up border does see them, and the burden of proving otherwise is theirs. An unrecorded entry also commits you to an unrecorded exit, and every unrecorded movement in between, forever, because one logged touchpoint anywhere converts the whole arrangement into that presumption. The only thing harder than satisfying the system's memory is maintaining its amnesia, and the people who think they have bought freedom have signed up to do their own border tracking, by hand, with legal downside.

We covered the Costa's actual criminal economy in June: it is paperwork, property vehicles, and patience, not cinematic border runs. The professionals stopped fighting the databases years ago. The dinner-party version is the Costa del Crime romance worn as a lifestyle accessory, and the system it claims to outwit is specifically designed so that the outwitting surfaces later, at a desk, with your name on it.

The half of the system nobody briefed: you. Any non-EU visitor can be asked at the border for proof of accommodation. A hotel booking answers the question; "I'm staying with my daughter in Mijas" does not, on its own. The formal answer is the carta de invitación — invitation letter: issued by the Policía Nacional on the host's application, roughly €75 to €82 per guest, with an appointment wait plus 15 to 30 working days' processing that add up to six to sixteen weeks end to end. If your regulars come every autumn, this is a July job. It also carries a commitment: the host formally undertakes to cover the guest's accommodation, so it is not a favour to sign casually. The honest odds, the alternatives that also work, and the process: our new guide. One thing we will not tell you is that checks are surging, because nobody has published data showing that; what has changed is that your guests' visits are now legible, and legible invites questions.

Three months in, the border's first summer has a shape: the queues are survivable if you plan around Mondays, Wednesdays, Fridays, and the first weekend of August; the clocks matured on July 8th, and the ledger is consulted at every crossing; the loopholes are myths except for one lawful crossing that opens today and quietly runs the meter anyway. The system's checkpoints were never the point. Its memory is, and the households that do well this summer are the ones managing it like a utility: days checked before flights are booked, paper filed a quarter ahead, and nobody's brother-in-law doing his own border control by hand.

Onwards — A. and the WaypointSur team, ledgers balanced, official amnesia unmaintained.