A third-party website called UK Visa Portal has been publicly exposing the passports and selfie photos of visa applicants — and as of publication in May 2026, the security lapse remains unresolved.
An anonymous tipster alerted TechCrunch to the breach, reporting that at least 100,000 documents uploaded by applicants were accessible online. TechCrunch confirmed the leak and verified the authenticity of the exposed data by contacting affected individuals directly.
UK Visa Portal is not affiliated with the U.K. government. Some applicants have complained that they mistakenly paid a fee to the site rather than using the official GOV.UK website to apply for a U.K. immigration visa.
TechCrunch attempted to notify the company through its listed email address, noting that it could not share specific details with a general customer support inbox given the sensitivity of the exposed data. The company responded through purported attorneys and a public relations firm rather than connecting TechCrunch with management. No further response from the company’s management has been received, and the leak has not been fixed.
UK Visa Portal’s website does not include a dedicated security reporting channel, nor does it list names or contact information for company management.
The ongoing exposure of passport scans and biometric selfies could leave affected applicants vulnerable to identity theft or fraud. TechCrunch has withheld precise technical details about the leak to limit further risk to those affected.
Anyone who has used UK Visa Portal’s services may want to monitor their identity documents for signs of misuse. It is not necessary to use a third-party service to apply for a U.K. electronic travel authorization unless retaining an immigration attorney — applicants can apply directly through the U.K. government’s official website.
Source: TechCrunch