Sponsor Alert: Phishing Emails Targeting Sponsor Management System (SMS) Users

Do not click these links or provide any login credentials.

Key Reminders

• The Home Office will never send links for logging into the SMS.
• The Home Office will never ask for your SMS User ID, password, or other login details by email.
• Always access the SMS directly through the official GOV.UK website.

Practical Impact for Sponsor Licence Holders

Unauthorised access to your SMS account could compromise sponsor records, expose sensitive data, and create compliance risks for your organisation. Ensure all SMS users remain vigilant and report suspicious emails immediately.

If you are unsure whether a communication is genuine, contact the Home Office Business Helpdesk at BusinessHelpdesk@homeoffice.gov.uk.

If you have any concerns about your sponsor licence compliance or require assistance in reviewing suspicious communications, please contact our team for advice and support.

Reminder for SMS updates:

Please ensure the personal details held on your SMS account are accurate and up to date, particularly your Date of Birth and email addresses.

Please also remember that Level 1 users must be deactivated when they no longer occupy a relevant user role.

If you need to make any changes to your Sponsor Licence details, please contact us for assistance.

Failure to maintain accurate SMS records and user access may result in compliance issues with your sponsor duties.

This update is intended as a general guide and does not replace tailored legal advice. If you have questions on any of the topics above, please do not hesitate to contact us.