False UKVI email scams
UKVI have seen an increase in licenced sponsors receiving phishing emails from criminal groups and individuals. These emails take various forms but typically alert recipients to new messages or updates within the SMS system and threaten compliance action if users don’t log in via the link in the phishing email.
The Home Office take any incidents of attempted, or actual, account compromise very seriously and we are in the process of rolling out Multi Factor Authentication to SMS users as a measure to prevent future phishing attacks. We work closely with law enforcement colleagues to prevent these attacks and to identify those responsible.
We would also like to remind you of our SMS Best Practice:
Always log into SMS from.gov.uk
Never share your SMS password or user ID with anyone
Never share your personal information such as your date of birth with anyone
One user = One ID
Never click on links in emails
Regularly review Level 1 and Level 2 users and deactivate where appropriate
Contact us if you receive an email you don’t believe is genuine –
businesshelpdesk@homeoffice.gov.uk
Level 1 and Level 2 users are reminded that UKVI will never send a link to the SMS to use to log in or ask for your user ID, password or personal information by e-mail. The SMS message board is always active for users to view, they will never alert you to new messages.
Additional Support: