Scam Alert

There is a scam email targeting care providers. The message appears to be designed to steal login details for the UK Visas and Immigration (UKVI) Sponsor Management System.

Some providers have reported that their SMS login accounts have been compromised, enabling unauthorised individuals to access information about sponsored workers. In some cases, certificates have been improperly assigned to individuals in exchange for significant payments.

This type of fraud can also create significant administrative challenges for providers. They may need to demonstrate to UKVI that they were not involved in or did not benefit from these payments. During the investigation period, providers may be restricted from sponsoring new staff or renewing existing sponsorships until UKVI has completed its enquiries and restored secure access to their accounts.

The Home Office will never contact you to ask you for, or to verify your SMS user ID or password and they will never provide you with a link or password with which to log into SMS. Business helpdesk: guide for employers and sponsors - GOV.UK.

If you have received an email like this, please report it to report@phishing.gov.uk and businesshelpdesk@homeoffice.gov.uk.

• Do not click links or open attachments in unexpected emails claiming to be from UKVI or the Home Office.
• Access the Sponsor Management System directly – not from a link in an email or attachment. https://www.gov.uk/sponsor-management-system
• Check recent account activity, including Certificates of Sponsorship requested, granted, withdrawn or assigned.
• Brief staff who monitor recruitment, HR, sponsorship, finance, IT and general inboxes.
• If login details may have been shared, change passwords immediately and follow your cyber incident process. Report the email to report@phishing.gov.uk and the UKVI helpdesk at the Home Office.