Protecting Your Sponsorship Management System (SMS) Account from Phishing Scams

As a sponsor licence holder, you are entrusted with sensitive data and critical access to the Home Office’s Sponsorship Management System (SMS). It is therefore essential to remain vigilant against phishing scams targeting these accounts. Recent alerts from the Home Office confirm a rise in fraudulent emails designed to mislead users into revealing their login credentials, placing both personal data and sponsor status at risk.

Cyber criminals have been issuing emails that masquerade as official communications from the Home Office. These messages often claim urgent compliance issues or suggest that your SMS account faces imminent suspension unless immediate action is taken. Typically, they will contain a deceptive link prompting you to log in. Once credentials are submitted, unauthorised access to your SMS account can follow swiftly.

Such emails frequently target generic or publicly listed inboxes (e.g., [email protected]), especially those published on organisational websites.

The Home Office has made it unequivocally clear that they will never request login credentials or send links asking you to verify your SMS details. Genuine communication will only ever come via:

• An email address ending in @homeoffice.gov.uk, @fco.gov.uk, or @fcdo.gov.uk
• The Account Management Portal (AMP)
• The internal message board within your SMS account

If you receive anything outside of these official channels particularly anything with embedded login links treat it with suspicion.

Protecting your SMS account requires a combination of procedural discipline and digital caution. The Home Office recommends the following steps:

• Never click on suspicious links, especially those asking you to verify SMS credentials.
• Do not share your login details including username and password with anyone
• Use a strong and unique password, and change it regularly.
• If you manage multiple SMS accounts, avoid reusing passwords across them.
• Ensure all Level 1 and Level 2 users are up-to-date and remove access for individuals who leave the organisation or change roles.
• Maintain accurate contact details within your SMS profile to ensure timely receipt of official notices.
• Always keep at least one active Level 1 user, preferably two, to ensure uninterrupted access and management capability.
• If you suspect your account has been compromised, change your password immediately and notify other authorised users to do the same.

Always access your SMS account directly through the GOV.UK website rather than via a link. To log in securely:

1. Go to www.gov.uk
2. Search for ‘UK visa sponsorship management system’
3. Click on the corresponding official page
4. Select ‘Start Now’ and proceed to log in

This method ensures you’re directed to the correct portal and not a fraudulent replica.

At Morgan Smith Immigration, we prioritise the security of our clients sponsor licences. Please contact our team if you require assistance from phishing scams!

With over 20 years of experience and a commitment to excellence, Morgan Smith Immigration is your trusted partner for all your immigration needs. Contact us today to learn more about how we can assist you with UK Visa Applications. For any enquiries or assistance, call us at 0203 959 3335 or email [email protected].