Instant Answer

A healthcare worker from Lagos paid £9,000 after receiving a CoS bearing a real NHS Trust name, a real address, and a reference number in the correct format.. The trust had no idea its name was being used.

Victim StoryJanuary 2025 · SponsorShield Case File · 3 min read

The forged NHS Trust CoS that passed every check — except the one that matters

Chiamaka had worked as a senior healthcare assistant in Lagos for four years and held a UK-accredited qualification. When an email arrived from what appeared to be an NHS Trust recruitment coordinator in Manchester, she knew exactly what it was: the opportunity she had been preparing for.

The email was professionally written. It referenced her specific qualification and years of experience. It came from a domain that looked legitimate — a hyphenated variation of the NHS trust's name. The Certificate of Sponsorship it included bore the NHS Trust's name, their logo (copied from the public website), the correct SOC code for her occupation, and a salary of £24,000 — above the Health and Care Worker threshold.

The NHS Trust knew nothing about it.

NHS Trusts are real organisations with active UKVI sponsor licences. Fraudsters do not apply for licences in their name — they simply steal the name, the branding, and occasionally the real licence number, and put it on a forged document. The Trust itself had not been contacted, had not posted the role, and had no record of Chiamaka.

What a UKVI register check would have revealed: the Trust is listed, it is active, it holds a sponsor licence. So the register check alone would not have caught this one. What would have caught it: a cross-reference between the CoS reference number and the Trust's actual issued certificates — which UKVI holds and SponsorShield's reference format analysis can flag as structurally inconsistent.

She paid £9,000 across three transfers.

"Biometric appointment booking," "NHS employment screening levy," and "international placement coordination fee" — three charges, each with an official-sounding name, each requesting a bank transfer rather than a card payment. The total came to £9,000. Two weeks after the final transfer, the email address stopped responding.

If you receive a CoS from an NHS Trust or large employer, verify it directly by calling the organisation's official switchboard — not any number provided in the email. NHS Trusts have HR departments. Ask them to confirm the vacancy exists.

Chiamaka reported the fraud to Action Fraud. As of the time of writing, no arrests have been made. She has not recovered any money. She is saving again.

Warning: NHS Trusts, major care groups, and well-known employers are frequently impersonated. A real NHS name on a CoS does not mean the NHS issued it.

Some fake CoS documents pass basic surface checks — correct reference format, real-looking employer name. SponsorShield's CoreFlux™ Engine checks the signals that matter: UKVI register status, salary threshold compliance, and PDF metadata forensics that fraudsters cannot fake.

Not sure if your CoS is real?

25+ fraud signals checked automatically — free.

Run a free check now.

Upload your CoS and get a full fraud-risk report in under 60 seconds.

Check My CoS Free
Check My CoS Free