Fake Health and Care Worker sponsorship, GBP 4,000 gone

Anonymous for obvious reasons. My cousin lost this money and I am posting so nobody else does. The setup: a WhatsApp contact claiming to represent a care home group in the Midlands. Professional-looking CoS document, a real care home name lifted from Companies House, and an invoice for GBP 4,000 described as a "sponsorship processing fee". Two things were wrong and we only saw them afterwards: 1. It is illegal for a sponsor to charge a worker the sponsor licence fee or the Immigration Skills Charge. If somebody asks you to pay those, it is not a real sponsorship. 2. The CoS number did not exist. You can check a certificate number, and a genuine sponsor will not mind you checking. The real care home had no idea their name was being used.