The attachment unfortunately, was opened by some recipients; its aim to collect login details from the online UK Visas and Immigration (UKVI) Sponsor Management System.

In one case, the provider’s International Recruitment certificates were accessed and then assigned to desperate workers in return for large payments.

You can read more about this incident and find out what action(s) you should take here SCAM ALERT: Home Office, UK Visas and Immigration - Digital Care Hub

Scammers will try to quickly gain your trust . They aim to pressure you into acting without thinking. This scam is exploiting busy care workers but also causes a huge headache for providers who then need to attempt to prove to UKVI that they did not accept the payments themselves and are unable to sponsor new staff or renew existing sponsorships until UKVI have completed their investigation and reset the login details.

✅ Why it’s phishing

• Generic greeting : “Dear Sponsor” (not personalised to a specific person)
• No specific details : Doesn’t mention your organisation, licence number, or named contact
• Mass-style wording : Written as if it could be sent to many organisations at once
• Attachment prompt : Urges you to open a PDF (a common phishing tactic)

These are all signs of a broad, non-targeted attempt .

However, in this case, it’s potentially dangerous because:

• It impersonates a trusted authority (Home Office)
• It creates a sense of urgency (“timely action”)
• It pushes you to open an attachment , which could contain malware