NEW Read our new report – The Verification Gap – showing a 38% increase in the suspected fraud rate this cycle in UK universities. Access report
The Data Cube 2025/26 Recruitment Cycle
Sector Report · Mid cycle fraud report

The
Verification
Gap

What a representative sample of 17,663 qualification checks reveals about where fraud risk is actually sitting in UK higher education this cycle, and how admissions, compliance and recruitment teams can respond without penalising genuine applicants.

17,663
Checks in this representative sample
3.95%
Fraud signal rate, up from 2.86%
+38%
Rise in the fraud signal rate year on year
Scroll to read the findings
00 · Foreword

International recruitment is under closer scrutiny from regulators, government and the media. This report uses verification data to show where the risk actually sits this cycle, and where it does not.

Across this representative sample, more qualifications carried a fraud signal than at the same point last cycle: 3.95% against 2.86%. The more useful story sits underneath that headline. Risk is not spread evenly. It concentrates in particular qualification origins, document types, and parts of the sector.

Throughout, a cycle means the 2026 intake: checks completed between October 2025 and June 2026. Both years are read at the same point in their cycle, so the comparison is like for like.

With UKVI tightening thresholds around the Basic Compliance Assessment, universities are trying to avoid two bad outcomes at once: adding needless friction for genuine applicants, and missing issues that later surface as compliance or reputational problems. Deciding where to tighten, and where not to, needs something firmer than instinct.

That is what this briefing is for. Every figure comes from QC's Data Cube. Where a number rests on a small sample, we say so. Where a gap looks alarming but reflects qualification mix rather than performance, we show the like-for-like comparison. The aim is evidence you could put in front of a registrar or an auditor.

Before you read on

Use our new free qualification and risk self-assessment tool to see how exposed your institution is to admissions fraud and verification risk — with recommendations and actions on what to do next.

Check your institution's risk
Meet the Data Cube

The insight centre behind this sample

The Data Cube is Qualification Check's insight centre which hosts hundreds of thousands of annual checks. It sits behind the scenes and brings together checks from across our institutional customers, so patterns that no single institution could see on its own become clear at sector scale. Every figure in this report is drawn from a representative sample of 17,663 checks across 40 institutions.

75%
of the fraud signal
Non-completion is now the largest part of the fraud signal, up from 57% last cycle.
3.95%
2.86% to 3.95%
The fraud signal rate, which combines checks that could not be confirmed and applicants who did not complete, rose by over a percentage point.
190%
increase in the non-completion rate, year on year
Applicants who start but do not complete their check nearly doubled as a share. Rigorous verification acts as a strong deterrent, and consistent checking encourages those without genuine credentials to disengage before enrolment.
01 · The Data

What we measured, and what stands out

The analysis uses a representative sample of 17,663 qualification checks from 40 university customers, drawn from the Data Cube. Each check resolves to one of three outcomes: Verified, Not Verified (the issuing body could not confirm the qualification) or Rejected (withdrawn, abandoned, or unresolved). To compare cycles fairly, each year is read as a live snapshot at the same point in time.

How to read the fraud signal

A Rejected case is not confirmed fraud. It can be an honest error, a poor scan, or a missing document. We only treat a rejection as a fraud signal once it has stayed unresolved for 45 days (we call this "matured"). The fraud signal is therefore Not Verified plus matured Rejected, a conservative measure of genuine integrity risk rather than a count of confirmed fraud.

Metric, as a share of checks2025/26 to Jun2024/25 to JunChange
Verified96.05%97.14%-1.09 pts
Not Verified0.99%1.23%-0.24 pts
Matured Rejected2.96%1.63%+1.33 pts
Fraud signal rate3.95%2.86%+1.09 pts

Coverage: a representative sample from 40 university customers this cycle, spanning Russell Group and post-92 universities and specialist providers, with several of the largest UK institutions newly included. This report covers university degree verifications only, excluding identity and school-level checks, so the figures are a clean read of qualification fraud. Qualifications were checked from more than 60 origin countries. Applicant country means country of residence. Institute country means where the qualification itself was issued, which is the lens that matters for fraud and the one this report uses throughout.

Four things that stand out in 2025/26
STANDOUT 01

The origins growing fastest are also the riskiest

Within the sample, checks on Nigerian, Bangladeshi and Kenyan qualifications grew fastest year on year, and the same three origins carry some of the highest fraud signal rates: 8.0%, 9.5% and 10.3%. Whatever is driving that growth deserves as much attention as the growth itself.

STANDOUT 02

The signal shifted from "cannot verify" to "did not resolve"

Last cycle, Not Verified and matured Rejected cases were close to balanced. This cycle, matured Rejections nearly doubled as a share and now make up 75% of the fraud signal. More applicants are walking away part-way through a check, which is a different problem from a document that fails verification.

STANDOUT 03

India is a document-authenticity story of its own

India alone accounts for 52% of all Not Verified outcomes this cycle. This is a different pattern from West Africa, where the risk shows up as checks that start but never resolve, rather than a failed verification.

STANDOUT 04

A few origins rose sharply on small numbers

Kenya climbed to 10.3% (from 2.9%) and Bangladesh to 9.5% (from 2.6%). These rest on smaller samples, so treat the sharpest movers as an early watchlist rather than a settled trend. The direction is consistent though.

Fraud signal rate by month, 2025/26

Verified check volume (grey bars) against the fraud signal rate (orange line). The last two months are greyed out because, under the 45-day maturity rule, recent rejections have not yet had time to mature. Their low rate is a timing effect, not a genuine fall in fraud.
Admissions02

For admissions teams

Admissions teams sit at the front line. They decide which qualifications to trust, and how much friction to add. The findings below show where that judgement matters most, and where extra checking adds cost without adding protection. But this cycle points to a second, arguably bigger job for admissions: conversion. With matured Rejections rising, the applicants being lost are increasingly ones who simply did not finish the process, not confirmed fraudsters. Getting them through is where much of the value now sits. The findings are split into two views: principles that apply across all origins, and findings tied to specific qualification origins.

Cross-cuttingApplies across all qualification origins
01

Use the qualification's origin, not the applicant's address, as your risk signal

The better predictor of fraud is where the qualification was issued, not where the applicant lives now.

What to doRoute verification priority by where the qualification was issued. An applicant's current location should not determine the level of scrutiny. Verification should follow the risk associated with the qualification itself.
02

Recover applicants who stop responding before you reject them

A meaningful share of failed checks are not fraud at all. They are genuine applicants who stopped responding when asked for something extra, then ran out of time. Treat these the same as document fraud and you lose real offer-holders.

In practiceGive applicants who have gone quiet a clear, well-timed prompt to finish their check before the deadline passes. Many will complete once reminded.
03

Match the level of checking to the qualification origin

Qualifications from China (1.3%), the US (1.1%) and the UK (2.2%) come back clean at high volume. These still need verifying, but they rarely need heavy manual review, and adding it slows genuine applicants without catching more fraud.

Where to focusKeep manual review effort for higher-risk qualification origins, and let automated verification handle the ones that come back clean cycle after cycle. Verify everywhere, but do not add friction where the evidence does not call for it.
04

Verify earlier in the cycle

The fraud signal runs highest from October to December, the window when early and deferred applicants come through. Verifying late leaves less time to resolve genuine issues. Our previous analysis has also shown that fraudsters may target later in the cycle, when teams are under pressure and checks are more likely to be rushed.

What to doStart checks at offer stage rather than enrolment. Earlier checks give applicants time to fix genuine problems, and give you time to act on real ones.
By qualification originTied to where the qualification was issued
INDIA

Build a dedicated India document-verification track

India is the single largest source of Not Verified outcomes, at 52%, and its fraud signal rate rose to 4.2%. The problem with Indian checks is document authenticity at source, not late dropout.52% of all Not Verified cases

What to doConfirm Indian transcripts and mark sheets directly with the issuing institution. Do not rely on applicant-supplied documents alone.
SOUTH ASIA

Get ahead of the fastest-rising qualification origins

Pakistan rose to 7.3%, and Bangladesh jumped to 9.5% from 2.6% as its volume more than tripled. These are fast-growing qualification origins that are becoming higher risk.

What to doApply the same close checking you use for India, and review your Bangladesh applicants now, before their numbers peak later in the cycle.

Fraud signal rate by qualification origin, year on year

By institute country, showing only origins with enough checks in the sample to be reliable. Bars show 2025/26, and the tick marks show 2024/25, ordered by current fraud rate.

Watchlist origins such as Kenya and Saudi Arabia should be read with caution, since each rests on a smaller sample.

Compliance03

For compliance teams

Compliance owns the institution's standing with UKVI and the OfS. Read correctly, the Data Cube works as an early warning system for the Basic Compliance Assessment.

Cross-cuttingApplies across all qualification origins
01

Watch unresolved checks as your early warning sign

Checks that start but never complete rose sharply this cycle. These unresolved cases are the same group that, further down the line, becomes refused CAS, withdrawn enrolments and visa curtailment risk. They move before your refusal rates do.

What to doTrack the share of checks left unresolved as a monthly board metric, not an annual one. A rise here is your earliest sign of trouble ahead in the compliance data.
02

Report the conservative number, and explain it

Our method deliberately leaves out very recent rejections that may still resolve, waiting 45 days before counting them. This protects you from overstating fraud, but only if the people you report to understand why recent months look lower.

In practiceWhen reporting to UKVI or leadership, use the settled fraud signal rather than raw rejection counts, and add a line explaining that the most recent weeks are still resolving.
03

Do not let a blended rate hide concentration

An institution-wide rate of 3.95% can hide qualification origins running above 10%. Regulators increasingly look at the spread, not just the average.

Where to startReport your fraud signal broken down by qualification origin and by intake. Surface where risk concentrates before an auditor does.
04

Differentiate by qualification, not by nationality

Risk attaches to the qualification and the body that issued it, not to the person holding it. Blanket rules based on nationality are unfair to genuine applicants, and hard to defend if a regulator asks you to justify them.

What to doFrame every rule around document type and issuing body, and keep the evidence that links each control to your verification results.
By qualification originTied to where the qualification was issued
INDIA

India is your document-authenticity exposure

With 52% of Not Verified cases, India is where the "we could not confirm this qualification" risk sits. That is a different audit conversation from an applicant who simply dropped out.

What to doKeep records showing you confirmed Indian qualifications directly with the issuer. These are the cases most likely to be examined.
WEST AFRICA

Track West African applicants through to a final outcome

Nigerian and Ghanaian checks are weighted towards cases that start but never resolve, the group most visible to UKVI in refusal and curtailment data.

What to doFollow West African applicants through to CAS issuance. Where an early rejection later resolves, log it as resolved rather than leaving it unclear in your records.

How the fraud signal has changed in shape

The split between documents that could not be confirmed (amber) and applicants who did not complete (orange). Last cycle the two were close to balanced. This cycle, non-completion leads, a shift compliance teams should be ready to explain.
See your own early-warning signal

Rising non-completion is the metric to watch. Our free self-assessment shows how exposed your institution is to risk, so you can spot trouble before it reaches your BCA.

Check how at risk your institution is to fraud
Recruitment04

For recruitment teams

Recruitment carries a hard tension right now: hitting international targets while making sure the applicants behind them are credible. The data suggests these goals can work together, as long as growth is steered rather than simply chased.

Cross-cuttingApplies across all qualification origins
01

Where you grew this year shaped your risk this year

In this sample, the qualification origins that grew fastest in volume, Nigeria, Bangladesh and Kenya, were also among those with the highest fraud signal rates. That makes this a recruitment-channel question as much as an admissions one.

What to doReview which agents and campaigns drove growth in higher-risk origins, and weigh the quality of who converts alongside the volume.
02

Do not let growth lean on a handful of higher-risk origins

An intake built around a small number of higher-risk qualification origins concentrates both compliance and financial exposure, and leaves little room to move if visa policy tightens mid-cycle.

What to doAvoid letting growth depend too heavily on one or two origins. The right mix differs by institution, so spread recruitment effort in a way that fits your position and your applicant demand.
03

Clean verification results are a better method of risk management than pre-CAS non-refundable deposits

Some institutions have turned to pre-CAS non-refundable deposits as a way to manage risk. The trouble is that deposits can push away genuine applicants, feed into visa refusal rates, and generate negative PR without addressing the underlying risk. Better pre-CAS risk and readiness checks target the actual problem: whether an applicant and their qualifications stand up to scrutiny.

In practiceUse verification and pre-CAS readiness checks to screen risk before issuing a CAS, rather than relying on deposits. Share your aggregate verification performance with your strongest agents as a quality benchmark and a sign of trust.
04

Applicants who drop out can point to recruitment quality

When applicants disengage as soon as they are asked to verify, it often traces back to how they were recruited and what they were promised.

What to doTrack how often applicants from each source and agent fail to complete their check. Persistent dropout from one channel is a quality flag worth acting on.
By qualification originTied to where the qualification was issued
WEST AFRICA & SOUTH ASIA

Grow these high-volume markets with eyes open

Nigeria, Bangladesh and Pakistan are among the biggest sources of growth, but they carry signal rates of 7.3% to 9.5%. The answer is not to stop recruiting, but to recruit and verify together.

What to doMatch your growth targets in these markets with the capacity to check the applicants they bring in, so volume does not outrun your ability to verify it.
INDIA

India is high-volume, high-value and high-scrutiny

India's document-authenticity issue means recruitment quality feeds straight into compliance. The market is too important to mishandle in either direction.

What to doSet clear expectations with applicants and agents up front about the documents India requires, so genuine applicants are ready for the checks that follow.
05 · A Closer Look

Russell Group vs non-Russell Group

The same pattern repeats, even more clearly, and with one extra twist that matters for how each part of the sector should respond.

Fraud signal rate, Russell Group vs non-Russell Group

Headline rates first, then the like-for-like overseas-only comparison.
Fraud signal rate
Non-Russell Group
7.40%
Russell Group
3.22%
Like for like, overseas qualifications only
Non-Russell Group
7.75%
Russell Group
3.47%

Non-Russell Group providers run a 7.40% fraud signal rate, more than double the Russell Group's 3.22%. Part of this is mix: Russell Group institutions verify a higher share of UK-issued qualifications (17%) than non-Russell Group providers (8%).

Like for like, the difference remains. Comparing overseas qualifications only, non-Russell Group sits at 7.75% against the Russell Group's 3.47%. The easy explanation is that the two tiers recruit from different pools, and that is partly true. But the more useful finding is what happens when both tiers check the same origin.

!
The document-authenticity twist

The two tiers face different kinds of risk. On Indian qualifications, non-Russell Group providers see a 7.1% Not Verified rate, meaning documents that could not be authenticated. Russell Group institutions checking the same origin see just 0.7%. Non-Russell Group providers are carrying much of the sector's document-fraud exposure, while Russell Group risk leans more towards applicant dropout.

The insight worth acting on

Non-Russell Group providers are carrying more of the sector's document-fraud exposure, and that exposure is something UKVI use in a Basic Compliance Assessment. By having a more vigorous and defendable verification record it can become a genuine recruitment asset, a signal of quality that reassures agents and partners. For institutions under budget pressure, the challenge is do you stop recruiting from some countries altogether (not data driven), or invest in long term scalable verification that provides reassurance to your teams and auditors?

06 · A Different Check

Identity checks stand on their own

Alongside qualification verification, the Data Cube now holds a growing volume of identity checks, where the applicant's identity is confirmed rather than a qualification. These behave very differently, so we report them separately rather than blending them into the fraud figures above. This is a 2025/26 view, since identity checks were not run at meaningful volume last cycle.

Scale
Growing
Identity checks are a substantial and fast-growing new stream this cycle
Clean rate
98.7%
Verified first time, far cleaner than qualification checks
Signal rate
1.3%
A low signal rate, and almost entirely non-completion rather than fraud
TAKEAWAY 01

Identity checks are low-risk and high-volume

At a 1.3% signal rate against 3.9% for qualification checks, identity verification resolves cleanly. Almost none were genuine document-authenticity failures, and the small signal that exists is non-completion, not fraud. Adoption is still early, so read the 1.3% as a first indication rather than a settled sector benchmark.

What this meansTreat identity verification as a fast, reliable step. It does not need the same scrutiny budget as qualification checks and rarely creates friction for genuine applicants.
TAKEAWAY 02

It is a natural companion to qualification verification

Identity and qualification checks answer different questions: who the applicant is, and what they have achieved. Together they close a gap that either one alone leaves open. Identity checks are also a great mechanism for supporting enrolment, giving teams a fast, reliable confirmation of who is turning up.

What this meansWhere compliance pressure is rising, pairing identity with qualification verification gives a fuller due-diligence record without adding meaningful risk or delay.
See your own data

Sector benchmarks are useful. Your own data is where decisions get made.

This report shows the sector view from the Data Cube. Our free self-assessment shows where your own institution stands: your qualification origins, your unresolved cases, your trend across the cycle.

For press and PR, please contact: [email protected]