The Home Office has issued a warning about a phishing campaign targeting UK companies that sponsor foreign workers and students. 

Scammers are sending fake emails that closely mimic official Home Office messages, prompting users to log into the Sponsorship Management System (SMS). These scams aim to steal login credentials and compromise sponsor accounts.  

How the Scam Works:  

• The emails look urgent and may ask you to act immediately. 

• Common subject lines include: 

• “A new message has been posted to your sponsorship management system.” 

• “Message notification from the SMS” 

• Clicking the link in the email takes you to a fake login page that copies the real SMS portal. 

• Some links may even include a CAPTCHA check before redirecting to the fraudulent site. 

How to Stay Safe:  

• Avoid clicking on links in unexpected emails about your SMS account. 

• Always access the SMS portal by typing the official web address directly into your browser. 

• Double-check the website URL — even minor differences may indicate a fake site. 

• Report any suspicious messages to your IT team or to the Home Office. 

• Never share your SMS login credentials. 

• Regularly review your SMS account for unusual activity or unauthorized changes.  

If you received a phishing email, clicked on a suspicious link, or entered your credentials, change your password right away and contact us.