Deadlines for absentee ballot requests range from 21 days before the election for Rhode Island to noon of the day before for 7 states .
This was one of the main concerns of security researchers regarding Maryland’s decision on September 14, 2016 to move to a new online ballot system , , .
Changes to voter records made by an attacker can have long-term consequences in many states.
At least one voter reported seeing his party affiliation changed online when he checked on April 11, almost two months before the June 7 primary .
However, complaints did not become prominent until the Republican primary on June 7, reportedly when voters found themselves receiving unexpected provisional ballots at the polling place.
If the attacker chooses a new address in a different Congressional district, then the voter would likely receive a provisional ballot at her old precinct on Election Day, but provisional ballots are often not counted, depending on the state and circumstances. Idaho, Minnesota, and New Hampshire do not issue provisional ballots since they offer same-day registration.
The National Conference of State Legislators (NCSL) in the United States conducted a survey in June 2015 of the nation and found 24 states (updated to exclude Illinois) do not count provisional ballots that were cast in the wrong precinct . North Dakota does not have voter registration and only issues provisional ballots when poll hours are extended .In order for a falsified absentee ballot attack to succeed, an attacker needs to request the ballots on behalf of voters before the absentee ballot request deadline of each state.After the deadline passes, voters filing absentee ballot requests may be required to vote in person.An attack can combine the first two methods by first changing a voter’s address to an attacker-preferred address and then requesting that an absentee ballot be sent to the new address.In this case, the attacker might submit a false absentee ballot on behalf of the voter.Y'all Vote makes voter updates and registration easy.