Fake UK Visa website leaks sensitive data of over 100,000 applicants

A fake “UK Visa Portal” website has reportedly been exposing passport scans and selfie photographs of applicants who signed up and paid the platform to obtain a UK immigration visa. Reports suggest that the security lapse left at least 100,000 documents publicly accessible after users uploaded their passports and selfies as part of the application process.

UK Visa Portal is believed to be the source of the data leak. The authenticity of the exposed data was reportedly verified by contacting affected individuals and asking whether the leaked information matched their records. According to a report by TechCrunch, the website had been leaking passport scans and selfie photographs submitted by users during the sign-up process, with at least 100,000 documents believed to have been accessible online. Several affected individuals confirmed to TechCrunch that the exposed details matched their personal information.

More from Tech

The fake website reportedly mimicked the official service closely, leading many users to believe it was connected to the UK government’s official GOV.UK visa platform. Some affected individuals said the breach left them in a compromised position. Reports further suggest that attempts to alert the operators of the original UK Visa Portal about the security issue immediately ran into obstacles. The site reportedly listed no security disclosure channel, management details, or direct contact information for anyone in authority.

The only publicly available contact method was a general customer support inbox. Given that the exposed data included passports and biometric photographs, sharing additional sensitive details through an unverified support channel carried further risks. As a result, certain details were reportedly withheld pending a response from the site’s actual management.

What users should know

Anyone who submitted documents through the UK Visa Portal should be aware that their passport and biometric data may have been publicly accessible for an unknown period of time. Using a third-party service to apply for UK immigration authorisation is not mandatory. Applications can be submitted directly through the UK government’s official website, which remains the safest and most reliable way to protect personal information and avoid potential scams.