SIA Prosecutions & Fake References (2026): How UK Security Companies Verify BS 7858 Vetting Files & Prevent Criminal Liability

Written for directors, Nominated Individuals, and vetting officers at UK guarding, door supervision, close protection, and keyholding firms, this guide explains how an sia prosecution fake references bs 7858 investigation impacts your business and how to protect your SIA ACS accreditation. Preparing for an audit? Visit our SIA ACS consultancy page for pre-assessment file reviews.

What do the October 2026 SIA fake reference prosecutions mean for UK security firms?

On 15 October 2026, the SIA published enforcement outcomes and updated its Active SIA prosecution cases register, highlighting two enforcement routes: prosecuting managers who falsify internal BS 7858 files and prosecuting applicants who supply forged references.

1. Regional security manager sentenced at Shrewsbury Crown Court (Fraud Act 2006 Section 2)

In GOV.UK: Former regional manager sentenced for producing fake references, a former regional security manager was sentenced at Shrewsbury Crown Court under Section 2 of the Fraud Act 2006 (fraud by false representation). Investigators found the manager fabricated employment references in operative files to make unvetted guards appear compliant with BS 7858 security screening. Instead of chasing genuine employers or standing down conditional starters at Week 12, the manager falsified reference replies—proving that fabricating a vetting record carries custodial risk, fines, and a criminal record.

2. North London applicant prosecuted under the Private Security Industry Act 2001

On 15 October 2026, the SIA also reported (GOV.UK: North London man prosecuted for providing fake references to SIA) that Marius Serban was convicted of two offences under the Private Security Industry Act 2001 (PSIA 2001) for supplying forged references. Under Section 22 of the PSIA 2001, knowingly or recklessly providing false information to the SIA is a criminal offence. Deploying an operative whose licence is invalid or revoked also exposes directors to prosecution under Section 5 (using an unlicensed operative) and breaches Section 9 conditions.

Why SIA Criminal Investigation Teams cross-check vetting files during ACS inspections

SIA investigators and UKAS assessors (NSI, SSAIB, Amtivo) share intelligence when anomalies appear. Sampling files under SIA ACS Criterion 6 (Indicators 6.1.1 and 6.1.2), assessors check email headers, call logs, Companies House statuses, and HMRC PAYE start dates, escalating suspected forgery to the SIA Criminal Investigation Team.

What does BS 7858:2019 require for 5-year career history and the 31-day gap rule?

Under BS 7858:2019 (Screening of individuals working in a secure environment), employers must verify identity, right to work, address history, criminality declarations, financial checks (CCJs, IVAs, bankruptcy), SIA licence status, and continuous career history. Conforming to BS 7858:2019 is mandatory for SIA Approved Contractors (GOV.UK: British standards that apply to private security).

5-year continuous history, Clause 7 screening verification, and the 31-day gap rule

While NPSA guidance notes a three-year minimum where risk-assessed, five years of continuous career verification is standard across SIA ACS contracts. BS 7858:2019 removed the old BS 7858:2012 standalone character reference requirement because character letters were easily abused. Instead, Clause 7 require objective verification of employment, education, self-employment, unemployment, and time abroad, plus independent corroboration of every continuous gap of 31 calendar days or more.

Accepting an employer reference from a personal webmail domain (@gmail.com, @yahoo.com, @hotmail.com, @outlook.com) or verifying dates solely via a candidate-supplied mobile number (07...) without independent corporate validation fails BS 7858.

What are the 12-week provisional screening limits under BS 7858:2019 Clause 7?

Under BS 7858:2019 Clause 7 (Screening process), a security firm may deploy an operative on conditional (provisional) employment for up to 12 weeks (for 5-year screening, or 16 weeks where checks exceed 5 years) while awaiting historic references:

What are the 5 red flags of fabricated security references and how do you verify them?

During pre-audit file reviews, almost all bs 7858 fake employment references are caught by five independent verification checks:

1. Landline switchboard and corporate domain vs candidate-supplied mobile numbers: Fake references usually list a 07... mobile number and a @gmail.com or @yahoo.com address given by the applicant. Independently look up the employer’s head-office switchboard and corporate domain (@company.co.uk), call the switchboard to confirm the referee, and log the call.
2. Cross-checking company numbers and dissolved dates on Companies House: Candidates often cite security firms dissolved before the claimed dates or incorporated afterwards. Check every UK employer on Companies House for company number, incorporation/dissolution dates, active status, and SIC code (80100), filing the PDF.
3. Cross-matching HMRC PAYE, P45/P60, and Personal Tax Account records: Under the 2026 updates to SIA ACS payroll compliance (Indicator 4.2.1), all deployed operatives must be paid via PAYE with Real Time Information (RTI) filings. Ask candidates for their 5-year HMRC Personal Tax Account employment history PDF via the GOV.UK HMRC app, which is generated directly from employer RTI submissions and cannot be forged.
4. Checking the SIA Register of Licence Holders and ACS Register: Verify every operative and licensed referee on the SIA Register of Licence Holders, and check whether former employers claiming ACS approval appear on the SIA Register of Approved Contractors (see how to check an SIA Approved Contractor).
5. Statutory declarations and corroborating evidence for liquidated employers: When a former employer is in liquidation, require the Companies House insolvency printout plus HMRC PAYE history/P45/P60 records and redacted bank statements showing BACS pay. For non-working gaps over 31 days not covered by DWP or Council Tax records, obtain a solicitor-witnessed Statutory Declaration with residency proof.

Table 1: BS 7858 reference verification matrix (acceptable audit evidence vs rejectable red flags)

Use this matrix to see what NSI, SSAIB, and Amtivo assessors accept during SIA ACS and BS 10119:2026 file audits.

How do outsourced vetting agencies and labour providers expose your ACS status?

Under SIA ACS Criterion 2 (Service Delivery), BS 7858:2019 Clause 8 (Sub-contractors), Criterion 6 (People), and BS 10119:2026 Clause 8.1, the contracting ACS firm remains 100% accountable to NSI, SSAIB, or Amtivo assessors even when using a third-party screening house or labour provider.

GOV.UK guidance (SIA approved contractors and outsourced pre-employment screening) warns: “Outsourcing your screening does not outsource your responsibility.” A 1-page “Vetting Pass Certificate” fails an ACS audit (see our SIA ACS Self-Assessment Workbook guide). When sourcing temporary guards under BS 10119:2026 (which replaced COP 119 on 30 June 2026; see our BS 10119 consultancy and COP 119 guide), you must run quarterly 10–20% sample audits of raw reference emails, Companies House checks, and call logs.

Table 2: Criminal and regulatory consequences of defective BS 7858 vetting files

Defective vetting files or bs 7858 fake employment references trigger severe criminal, regulatory, and commercial penalties:

10-point BS 7858 reference fraud prevention checklist for vetting officers

• 1. Reject personal webmail references: Never accept employer references from @gmail.com, @yahoo.com, @hotmail.com, or @outlook.com without switchboard verification and HMRC PAYE proof.
• 2. Check every UK employer on Companies House: Verify company numbers, incorporation/dissolution dates, and SIC codes on Companies House and file the PDF.
• 3. Independently source landline switchboard numbers: Never verify an employer solely via a candidate-supplied 07... mobile; call the corporate switchboard and log the call.
• 4. Collect HMRC Personal Tax Account PAYE history PDFs: Have candidates download their 5-year HMRC PAYE history to confirm employer names and dates.
• 5. Enforce the 31-day gap rule with objective proof: Corroborate every 31+ day gap with DWP statements, academic records, border stamps, or a solicitor-witnessed Statutory Declaration.
• 6. Verify SIA licences and ACS status on GOV.UK registers: Check operatives on the SIA Register of Licence Holders and check claimed ACS employers on the SIA Approved Contractor register.
• 7. Control 12-week conditional starts (Clause 7): Complete ID, Right to Work, SIA licence, criminal/financial checks, 2-year history, and risk sign-off before start, with an automatic Day 84 roster block.
• 8. Separate vetting sign-off from scheduling managers: Prevent operational managers who need shift cover from signing off their own BS 7858 files.
• 9. Audit outsourced vetting agencies and BS 10119 suppliers quarterly: Inspect 10–20% of full raw screening packs—never accept 1-page pass certificates.
• 10. Maintain a Fraud Escalation Policy: Document steps for withdrawing offers, terminating non-compliant conditional starters, and reporting suspected fraud to the SIA.

Frequently asked questions

What are the maximum penalties for providing false information or fake references in the security industry?

Supplying false information to the SIA under Section 22 of the Private Security Industry Act 2001 carries up to 6 months’ imprisonment and/or an unlimited fine. Under Section 2 of the Fraud Act 2006 (as in the 15 October 2026 Shrewsbury Crown Court case), fabricating BS 7858 references carries up to 10 years’ imprisonment and an unlimited fine.

Does BS 7858:2019 require security companies to verify the authenticity of the referee?

Yes. Under BS 7858:2019 Clause 7, employers must confirm references come from an authentic, independent source. Accepting personal webmail replies or calling a candidate-supplied mobile without checking Companies House and an independent corporate switchboard fails the standard.

How should a security firm handle a candidate whose former security employer has gone into liquidation?

File the Companies House dissolution printout and corroborate employment dates using two objective records: the applicant’s HMRC Personal Tax Account PAYE history PDF (or P45/P60s) and redacted bank statements showing BACS wage credits.

Can an SIA Approved Contractor lose their ACS status due to fake or incomplete BS 7858 vetting files?

Yes. BS 7858:2019 screening is mandatory under SIA ACS Indicators 6.1.1 and 6.1.2, Criterion 2, and BS 7858 Clause 8. Unverified gaps, expired 12-week conditional starts, or fabricated references can trigger ACS withdrawal and criminal referral.

What is the difference between a character reference and an employment reference under BS 7858:2019?

BS 7858:2019 removed the old BS 7858:2012 routine character reference requirement because character letters were easily falsified, replacing it with verified activity/employment history and independent evidence for every 31+ day gap.

How often should BS 7858 vetting files be re-audited for SIA ACS and BS 10119:2026 compliance?

Review 12-week conditional trackers weekly, re-check SIA licences on the public register monthly, and audit a 10–20% sample of internal, outsourced, and BS 10119 supplier vetting files quarterly.

Sources: GOV.UK / SIA: Former regional manager sentenced for producing fake references (15 October 2026); GOV.UK / SIA: North London man prosecuted for providing fake references to SIA (15 October 2026); GOV.UK / SIA: Active SIA prosecution cases transparency data (15 October 2026); Fraud Act 2006 Section 2 (legislation.gov.uk); Private Security Industry Act 2001 (legislation.gov.uk); BSI: BS 7858:2019 Screening of individuals working in a secure environment; GOV.UK: British standards that apply to private security; GOV.UK: SIA approved contractors and outsourced pre-employment screening; GOV.UK: Check the register of SIA licence holders; GOV.UK: Find an SIA approved contractor; Companies House: Find and update company information. Last checked: October 2026.