Ongoing Phishing Scams Affecting Sponsor Licence Holders

Phishing scams targeting sponsor licence holders remain a significant and ongoing risk. Despite earlier warnings, we continue to see fraudulent emails designed to imitate official Home Office communications, with the aim of gaining unauthorised access to Sponsorship Management System (SMS) accounts.

In July 2025, we published our blog “Protecting Your Sponsorship Management System (SMS) Account from Phishing Scams”, highlighting an increase in these deceptive practices. Unfortunately, this issue has not subsided and sponsor licence holders must remain alert to protect both their data and their sponsor status.

Fraudulent emails are becoming increasingly sophisticated and are often difficult to distinguish from genuine Home Office correspondence. These messages may contain urgent language, warnings of compliance action, or requests for immediate verification. In many cases, they include links or attachments that, if accessed, can compromise your SMS account.

We are therefore writing again to raise concerns regarding sponsor licence security and to remind all sponsor licence holders of the importance of exercising extreme caution when receiving emails claiming to be from the Home Office.

To reduce the risk of falling victim to phishing attempts, sponsor licence holders should observe the following precautions:

• Do not click on any links or download attachments unless you are certain the email is genuine and has been sent by the Home Office.
• Always check the sender’s email address carefully. Fraudulent emails may closely resemble official Home Office addresses but often contain subtle inaccuracies.
• If you receive an email and are unsure of its authenticity, you should contact the Home Office directly or contact us so that we can verify the communication on your behalf.

Remaining cautious and taking time to verify communications can prevent serious compliance issues.

Sponsor licence holders should also be aware of the Home Office’s process for Certificate of Sponsorship (CoS) notifications. The Home Office will send an email to confirm whether a CoS has been issued.

If you receive an email stating that a CoS has been issued and this action was not taken by you or an authorised user within your organisation, you must contact the Home Office immediately. You should also inform us without delay so that appropriate steps can be taken to protect your licence.

Unauthorised CoS activity is a serious matter and requires prompt investigation.

Failure to identify fraudulent communications, or taking inappropriate action in response to them, may place your sponsor licence at risk and could result in a breach of your sponsor compliance duties. The Home Office expects sponsors to maintain effective systems and controls to safeguard access to the SMS and to act swiftly when concerns arise.

We strongly advise all sponsor licence holders to remain diligent when reviewing emails and to take immediate action if anything appears suspicious.

At Morgan Smith Immigration, we take sponsor licence security seriously and continue to support our clients in managing compliance risks. If you receive a communication you are unsure about, or if you would like us to verify an email on your behalf, please do not hesitate to contact our team.

Staying informed and vigilant is essential to protecting your sponsor licence and ensuring ongoing compliance with Home Office requirements.

With over 20 years of experience and a commitment to excellence, Morgan Smith Immigration is your trusted partner for all your immigration needs. Contact us today to learn more about how we can assist you with UK Visa Applications. For any enquiries or assistance, call us at 0203 959 3335 or email [email protected].