E-Voting Risks: Cybersecurity Threats in National Elections
Key Findings
Online Voting Risk
E-voting systems without paper records increase undetectable election interference because they undermine independent verification and post-election audits.
Moving quickly to online voting creates serious security risks. These risks do not come mainly from software bugs. They arise because current election security rules cannot fully protect distributed internet systems. Internet voting spreads the points where attacks can happen. This makes it harder to review and verify results after the election. Risk-limiting audits, a key way to check election outcomes, become less effective. Most online systems cannot ensure voters can verify their ballots independently. This lack of verification increases hidden manipulation. Even with strong encryption, the absence of paper ballots weakens trust. Paper ballots were made standard after problems in the 2000 election. They allow voters and officials to check results without relying on software. When online voting removes this check, confidence in results drops. Experts have shown this flaw repeatedly since 2016. Systems without paper records cannot prove they remain secure under attack. Therefore, skipping paper records increases national risk. The speed of adoption makes the problem worse.
Paper Election Records
Digital voting undermines election security because it removes the physical evidence needed for public audits and independent verification, breaking the chain of accountability essential to trust.
Election security depends on clear, physical records that voters can check. When voting uses only digital records, this check is lost. Even secure systems fail if people cannot independently verify results. The key problem is not hacking but the loss of public trust in outcomes. Without paper, audits cannot confidently confirm correct results. This means errors or tampering might go undetected. National experts agree that paper records are essential for reliable audits. Digital systems alone cannot provide this proof. Courts and political parties also lose the ability to challenge results fairly. The real risk is not cyberattacks but the removal of a way to catch them. Trust then depends on complex software no one outside experts can inspect. For this reason, many oversight groups warn against fully digital voting. They say no current system can guarantee secrecy, accuracy, and public verification at once. When paper records are missing, the election process becomes unverifiable by design.
Online Voting Risk
Online voting increases election risk because votes altered on personal devices go undetected in central tallies due to the split between decentralized vote creation and centralized verification.
Most national elections count votes through centralized systems that assume honest reporting from local sources. Moving to internet voting shifts trust to software companies and network systems. This creates new risks beyond single ballot fraud. In Estonia, people have voted online since 2005, and most voters now use it in many elections. Security tests show that hacked personal devices can change votes. These changes can stay hidden from central audit systems. The danger is not just hacking but a mismatch between where votes are cast and where they are counted. Votes are tallied centrally, but each vote starts on a private device beyond official control. Security experts have found no system that can yet fully protect both vote secrecy and accuracy in real-world conditions. Because of this, expanding e-voting spreads risk even if the main system stays secure.
Election System Trust
In well-governed democracies, strong oversight and procedural transparency can detect election tampering even without paper records.
Most election systems now use paper records so votes can be checked after the election. This shift followed problems in the 2000 U.S. election and is now a standard rule. Experts require these records so they can run audits and confirm results are accurate. Many cybersecurity studies say digital voting often fails to keep votes secret or work at scale. Remote voting has not overcome these flaws when attackers are involved. Yet, the idea that no paper means high risk assumes election audits are fair and independent. In countries where oversight is weak, this assumption does not hold. Nations like Switzerland and Estonia use digital voting without full paper backups. They still maintain trust by requiring open procedures, regular software checks, and laws that control how voting systems are built. In these cases, vote tampering is still detectable. So, strong oversight can replace paper records as a check on abuse. The real issue is not the lack of paper but the strength of democratic institutions. When rules are transparent and well enforced, systems stay resilient.
Digital Vote Checking
E-voting can be auditable through cryptographic verification that allows voters to confirm ballot inclusion without paper records.
The idea that e-voting cannot be trusted without paper records assumes auditability relies only on physical proof. But countries like Estonia and Switzerland use secure digital systems. These systems let voters confirm their ballot was counted correctly. They do this using encrypted codes and public digital ledgers. The method uses zero-knowledge proofs, meaning ballots stay secret. Voters can still verify results independently. This process is part of official election rules in these nations. It has been tested under strict cybersecurity standards. Reviews by European experts show it works at scale. It can detect fraud even if attackers try to interfere. Therefore, auditability does not require paper trails. Digital verification tools can offer strong guarantees. The argument against e-voting based on missing paper trails fails when such tools exist.
