Biometric Residence Permit Check: Landlord Guide 2026
A tenant walks into the branch, hands over a Biometric Residence Permit, and waits for the keys. The card looks clean. The photo matches. Your negotiator thinks the job is done.
It isn't.
For landlords and letting agents, a biometric residence permit check used to feel straightforward. Look at the card, copy it, file it. That habit is now one of the fastest ways to build compliance risk into an otherwise good tenancy file. The awkward part is that many applicants still carry BRPs, still refer to them as their visa, and still expect agents to treat the card as the answer.
You need a different workflow now. The safe approach is digital-first, evidence-led, and boringly consistent. That's what protects the tenancy, the landlord, and your branch when someone asks how you verified status.
The End of the BRP and the Rise of the EVisa
If a prospective tenant gives you a BRP today, don't treat it as final proof of status.
The government's position changed the ground rules. GOV.UK says BRPs were “used to prove immigration status,” but “all BRPs have now expired and have been replaced by eVisas” according to the current BRP guidance on GOV.UK. That is the practical line letting agents need to work from.
What this means in branch
The old routine was physical-document heavy. A negotiator saw the BRP, checked the name and photo, took a copy, and moved on.
That's no longer enough because the physical card is no longer the core evidence of immigration status. The status now sits in the eVisa system, which means your right to rent process depends on getting the applicant to access and share their digital status correctly.
There is a transition wrinkle that confuses agents. The same GOV.UK guidance says someone who still holds an expired BRP may be able to use it for up to 24 months after the printed expiry date, or until 31 December 2026, whichever comes first, but only for limited tasks such as signing in to view an eVisa, creating a UKVI account, or applying to extend permission to stay. That doesn't turn the old card back into full right to rent proof. It means the card may still help the holder access the digital system.
Practical rule: If the tenant produces a BRP, treat it as a stepping stone to the online check, not the end of the check.
Why agents need to tighten the process
This isn't just a UK admin change happening in isolation. Residence-status systems operate at scale. Eurostat reports the EU issued 3.5 million first residence permits in 2024, after 3,741,015 in 2023, a decline of 8.3% year on year, according to Eurostat's residence permits statistics. For UK agents, the lesson isn't the EU figure itself. It's that status verification is part of a high-volume digital immigration environment, and paper-style habits don't fit it well.
What works now is simple. Ask for the digital evidence route early, explain it clearly, and don't let a physical card create false confidence.
How to Inspect a Physical Biometric Residence Permit
You'll still see BRPs at application stage. Some tenants bring them out of habit. Others need the card details to get into their UKVI account. So a biometric residence permit check still has a physical stage, but it's a screening stage, not your final decision point.
The Home Office guidance supports a two-stage control. First inspect the card for tampering, permit-number format, grayscale holder image, tactile feature, and consistency between the document and the person. If doubt remains, use the online service. The same guidance says the Home Office online right-to-work check returns a certificate within 6 working hours on weekdays, as set out in the Home Office BRP guidance notes.
What to look at first
Don't start with the expiry date. Start with the card itself.
The quickest useful check is whether the document behaves like a genuine card in your hand and whether the person in front of you is plainly the same person shown on it. If either part feels wrong, slow the file down.
| Feature | What to Check For |
|---|---|
| Permit number format | Check that the permit number appears consistent and properly presented, not crudely altered or unevenly printed |
| Holder image | Look for the expected grayscale image and make sure it matches the applicant's facial features |
| Tactile feature | Run a finger lightly across the card and check for the tactile element rather than a flat, cheap surface |
| Tampering signs | Watch for lifted laminate, cut edges, surface bubbling, scratches over text, or mismatched fonts |
| Personal details | Compare name, date of birth, and other visible details against the application and other ID |
| Card-to-person consistency | Check height, age appearance, face shape, and general presentation against the document photo |
A sensible desk-level routine
Use the same order every time so junior staff don't miss basics:
- Hold the card properly: Tilt it under the light and look for surface inconsistency, not just obvious damage.
- Read every line: Fraud often shows up in spelling, spacing, alignment, or details that don't match the application form.
- Check the person, not just the plastic: If the applicant avoids eye contact during the comparison or seems coached, note it.
- Record concerns immediately: Don't rely on memory after a busy afternoon.
If you need a wider refresher on document handling standards, this guide to identity verification documents is a useful baseline for training newer staff.
A genuine-looking card can still sit behind an invalid process. The mistake isn't missing a scratch. The mistake is treating the card as final proof.
What doesn't work
What fails in practice is the lazy middle ground. Staff glance at the BRP, feel reassured, and never push the applicant into the digital route. That creates a file that looks checked but isn't built on the right evidence.
Another common error is escalating only when the card looks fake. You should escalate because the workflow requires it, not only because fraud is suspected.
Using the Home Office Online Checking Service
This is the part that matters most in live lettings work. If the applicant has immigration status held digitally, you need the digital result in the file.
The easiest way to keep this on track is to make the share code request part of your standard onboarding script. Don't wait until move-in day. Ask for it as soon as the application reaches compliance review.
The working sequence agents should follow
For many, a reliable process looks like this:
-
Tell the applicant what you need
Ask them for a right to rent share code and their date of birth. Keep the wording plain. Many applicants don't know the difference between a visa, a BRP, and an eVisa. -
Wait for the actual share code
Screenshots from a phone gallery aren't enough on their own. You need the data that lets you access the official online result. -
Run the check yourself
Use the official Home Office online service with the share code and date of birth. Don't outsource your judgement to whatever the applicant says the result shows. -
Review the returned profile carefully
Check the identity shown, the permission displayed, and whether the result supports the tenancy you're about to agree. -
Save the output properly
Keep a secure copy of the result page or notice in the tenancy file.
How to guide a tenant without making it messy
Most delays happen because the applicant is confused, not because they're being difficult.
Use short instructions. Tell them they need to sign in to their UKVI account, generate the right share code for property checks, and send it with their date of birth. If they send a code for a different purpose, don't try to force it through your own process. Ask them to generate the correct one again.
Some agents overcomplicate this by giving a long legal explanation. That usually backfires. A one-line request works better: please send your right to rent share code and date of birth so we can complete the Home Office check.
If you want a broader read on how digital verification rules are being handled operationally, Home Office rules for digital checks offers a useful comparison point for teams building digital-first processes.
What the result should do for you
The online result should resolve uncertainty, not create more of it.
If the profile clearly matches the applicant and supports the tenancy, save it and move on. If the result is incomplete, inconsistent, or inaccessible, stop and resolve that issue before the tenancy progresses. Don't patch over a missing result by relying on the BRP copy already in the file.
Branch discipline: No keys, no agreement for occupation, and no “we'll sort it later” if the digital right to rent evidence isn't in place.
When the tenant struggles to get the code
This happens a lot with perfectly legitimate applicants. They've forgotten login details, they're using an old email address, or they don't understand the UKVI account process.
Your job isn't to improvise a substitute check because they seem genuine. Your job is to help them complete the required route. That may mean pausing the tenancy timeline while they regain access, create the account correctly, or use the limited functions still available through an expired BRP to reach their eVisa.
What works is calm repetition. Tell them exactly what you need, send the instruction once in writing, and give the file a clear hold status until it arrives.
Recognising Red Flags and Potential Forgery
Most suspect cases don't arrive looking dramatic. They arrive looking nearly right.
That's why a biometric residence permit check needs judgement as well as process. You're not trying to become a document examiner. You're trying to spot when the story, the document, and the digital trail don't line up.
The red flags that matter in practice
Start with mismatch. Mismatch is what agents see most often.
- Details that drift: The application says one thing, the BRP shows another, and the applicant's verbal explanation keeps changing.
- Poor document quality: Uploaded scans are blurred, cropped too tightly, or oddly edited around text and edges.
- Pressure tactics: The applicant pushes for immediate approval and acts irritated when you insist on the standard check.
- No workable share code: They say they have status but can't provide a usable route for you to verify it.
- Payment offers to speed things up: Any suggestion that extra money should smooth compliance checks is a serious warning sign.
Behaviour tells you a lot
Fraud risk isn't only on the page. It shows up in conduct.
Applicants with genuine status can still be disorganised, but they usually try to solve the problem with you. Risk rises when someone avoids direct answers, keeps changing contact details, won't attend with originals when asked, or insists that another agent accepted the same evidence without question.
I also pay attention when a tenant becomes highly specific about what we don't need to check. Genuine applicants rarely try to design your compliance process for you.
If the applicant is doing everything possible to stop you reaching the official digital result, treat that as part of the evidence.
Digital inconsistency is often the deciding factor
The online and physical records should support each other. If the BRP details, identity presentation, and digital result don't fit together cleanly, don't rationalise it away.
That doesn't always mean criminal fraud. It can mean an old account, a misunderstood immigration category, or a genuine admin problem. But from a lettings compliance view, the effect is the same. The file isn't ready.
For agencies reviewing wider fraud exposure, especially where identity data may circulate after breaches, this report on dark web monitoring for this leak is a reminder that compromised personal data can fuel more convincing application packs than many agents expect.
Build suspicion into screening, not personality
Good agents don't “trust their gut” in isolation. They build checkpoints.
A stronger model is to treat right to rent as one part of a wider application risk review. If the identity evidence is shaky, look harder at income evidence, landlord history, and general application consistency. This broader guide to tenant screening for landlords is useful if you want staff to think in joined-up risk signals rather than one document at a time.
What doesn't work is making the process personal. A polished applicant can still present bad evidence. A nervous applicant can still be completely genuine. You want documented concerns, not instincts without notes.
Right to Rent Compliance and Secure Recordkeeping
A correct check that isn't recorded properly is a weak defence.
When documentation is insufficient, a lot of agents lose the protection they thought they had. They did the work, but they can't show exactly what was checked, when it was checked, and what result they relied on. If your file can't tell that story cleanly, it won't help much under scrutiny.
What should sit in the file
Keep the evidence that proves the check happened and shows what you saw.
That usually means retaining the relevant output from the online check, saving it in a stable format, and storing it against the correct applicant record. The file should also make it obvious which member of staff completed the review and on what date. If there was any issue during the process, note that too.
A practical file normally includes:
- The digital result: Save the right to rent profile or notice in a format your branch can retrieve later.
- The audit note: Record who completed the check and any follow-up action taken.
- Supporting identity context: Keep only what is necessary to support the compliance decision and later review.
- Tenancy linkage: Make sure the evidence is attached to the correct applicant and property file, not left in a general inbox.
Security matters as much as completeness
These files contain sensitive personal data. That means sloppy storage creates a second risk even if the immigration check itself was done properly.
Don't leave screenshots in personal phones, unmanaged desktops, or shared chat threads. Keep them in your agency's controlled document system with sensible access limits. If staff need signatures or acknowledgements tied into the same workflow, tools such as BoloSign for real estate can help structure document handling, but the key point is consistency and controlled storage.
Audit mindset: Store records as if someone else will need to understand the file months later, without asking the original negotiator what happened.
The easiest way to stay consistent
Use a checklist and make it mandatory for every tenancy involving immigration-status verification.
That checklist should cover the check itself, the saved evidence, any time-limited follow-up requirement, and the file location. Agencies that improvise recordkeeping branch by branch usually end up with gaps. Agencies that standardise it are easier to audit and easier to train.
If your team needs a clean reference point on acceptable evidence routes, keep this guide to right to rent check documents in your internal training library.
How Passref Streamlines Your BRP and EVisa Checks
Manual right to rent handling tends to fail in the same places. Staff forget to ask for the share code early enough. Applicants send the wrong thing. Someone runs the check but forgets to save the result. A negotiator stores evidence in the wrong place and the branch manager has to reconstruct the file later.
That's why many agencies now fold compliance into the referencing workflow rather than running it as a separate admin chase.
Where the manual process breaks
The risk isn't just fraud. It's inconsistency.
One team member asks the right question. Another accepts a screenshot. A third saves the result but doesn't label it properly. Across a busy lettings office, those small differences create avoidable exposure. The stronger model is a guided process where the applicant is prompted correctly, the check result is captured in the file, and the branch can see status without chasing emails.
Why integrated referencing helps
A platform built for lettings can reduce the amount of back-and-forth your team has to manage. Instead of relying on every negotiator to remember every step, the system can collect applicant information, request documents through secure links, and keep the record trail tied to the case.
For landlords who want a service designed around UK lettings workflows, Passref for landlords brings right to rent checks into the wider referencing process alongside identity, affordability, landlord references, and applicant progress tracking.
That matters because compliance isn't usually lost in one big dramatic failure. It's lost in five small admin shortcuts that nobody notices until there's a problem.
If you want a faster way to handle right to rent checks, applicant referencing, and the paperwork that goes with them, passref is built for UK lettings teams that need a cleaner audit trail without the usual chasing and file gaps.