It has come to our attention that a sophisticated scam email campaign is currently targeting care providers across the UK. We have received reports of fraudulent emails regarding Home Office sponsorship accounts, and we urge all members to remain vigilant.

These deceptive emails often land in shared mailboxes but can also be sent directly to personal work email addresses. The scammers are attempting to gain access to your Sponsorship Management System (SMS) accounts by impersonating official bodies.

Crucial Reminder:

The Home Office will never contact you to ask for, or to verify, your SMS user ID or password. If you receive a request for this information, it is a scam.

What to do if you have been targeted:

If you have received a suspicious email or telephone call, or if you have any concerns that your SMS account may have been compromised, you must act immediately.

Provide the following details in your report:

  • Your organisation name
  • The user(s) who may have had their account compromised
  • Copies of the correspondence received (e.g., the phishing email)
  • Details of any action taken, such as whether links were clicked or user details were provided, including the date this occurred.

Contact Details for Reporting:

  • Email: businesshelpdesk@homeoffice.gov.uk
  • Phone: Business Helpline – 0300 123 4699

For further information on data security and best practices, we recommend visiting the Digital Care Hub.

Please share this alert with your colleagues and teams to help prevent further incidents.

If you have any concerns or need support, please don’t hesitate to contact the Norfolk Care Association team.