Phishing season
Criminals clone portals during results; teach citizens to type official domains or use bookmarklets.
Status clarity
Push notifications plus SMS fallback prevent refresh storms that DDoS public sites accidentally.
Refund transparency
Ledger each payment stage; dispute workflows should cite transaction IDs users can screenshot.