It is 8am on a Wednesday in a suburban semi in Solihull. Margaret, 84, is expecting her morning carer. The agency called yesterday to say her regular carer, Priya, is on holiday and someone else will be coming. The doorbell rings. A woman in a blue tabard with a lanyard introduces herself as "Claire" and says she is from the agency.
Margaret opens the door. She has no way to verify that Claire is who she says she is, that she works for the agency, that she has a current DBS check, or that she has the right to work in the UK. Margaret's daughter, who arranged the care, is forty miles away. The agency confirmed a name — not a face, not an identity, not a credential.
Claire spends two hours in Margaret's home, alone with her. She helps with personal care, prepares breakfast, and administers medication. She signs a paper timesheet and leaves. If Claire is exactly who she says she is, this is a routine Tuesday. If she is not, nobody will know until something goes wrong.
This is the verification blind spot in domiciliary care. And it is open in hundreds of thousands of homes across the UK every single day.
The scale of domiciliary care
Domiciliary care — also called home care — is the fastest-growing segment of adult social care in the UK. According to Skills for Care, approximately 700,000 care workers in England provide care in people's own homes, compared to around 570,000 working in residential settings. The number of people receiving domiciliary care has grown steadily as policy has shifted towards supporting people to remain in their homes for as long as possible — the "ageing in place" model.
This policy makes sense from both a cost and a quality-of-life perspective. But it creates a fundamental verification challenge that residential care does not face.
In a care home, there is a building with a front door, a manager on site, colleagues on shift, and — in theory — systems for checking who comes and goes. The worker operates within a supervised environment. If something seems wrong, there are other people present who can intervene.
In domiciliary care, the worker operates alone. They arrive at a private home. The only person present is the service user — often an elderly or disabled adult, frequently living alone, sometimes with cognitive impairment. There is no supervisor. There is no colleague. There is no controlled environment. There is just a person at a door.
What the CQC requires
The Care Quality Commission regulates domiciliary care providers under the same fundamental standards as residential care. Regulation 19: Fit and Proper Persons Employed requires providers to ensure that care workers are of good character, have the qualifications and skills needed for the role, and have been subject to appropriate recruitment checks including DBS, right to work, and identity verification.
These requirements are met at the point of recruitment. The provider checks documents, obtains DBS clearance, verifies right to work, and takes up references. This process is paper-intensive but generally well-understood.
The gap is not in recruitment. The gap is in deployment.
Regulation 19 requires the provider to ensure workers are "fit and proper." It does not specify how the provider should verify that the person who was recruited and checked is the same person who arrives at Margaret's door three months later. There is no requirement for real-time identity verification at the point of care delivery. There is no mandated technology for matching the worker at the door to the worker in the HR file.
The assumption built into the regulatory framework is that the person who was checked at recruitment is the person who shows up for every shift thereafter. That assumption holds most of the time. When it does not, the consequences land on the most vulnerable people in the system.
The safeguarding risk
Domiciliary care safeguarding concerns are not rare. NHS Digital data consistently shows that a significant proportion of safeguarding referrals in adult social care relate to care provided in the person's own home. The risks include financial abuse, neglect, physical abuse, and theft.
The safeguarding gap in care settings is well documented in residential care, where agency staff rotate through facilities with minimal identity verification. In domiciliary care, the gap is wider because there is no facility, no colleague, and no controlled point of entry.
Consider the specific risks:
Substitution without notification. An agency or provider sends a different worker than planned. The service user cannot verify whether this person has been checked. In residential care, a manager might notice an unfamiliar face. In a private home, there is no manager.
Credential expiry. A worker's DBS status changes, their right to work expires, or their training certification lapses. The provider's HR system may or may not catch this. The service user has no visibility at all.
Identity fraud. A person presents themselves as a care worker — whether from the actual agency or not — and gains access to a vulnerable adult's home. The service user has no independent means of verification beyond the word of the person at the door.
Lack of audit trail. If an incident occurs, the only record of who attended may be a paper timesheet signed by the care worker themselves. There is often no independent, verifiable record linking a specific, identified individual to a specific visit at a specific time.
Families cannot verify independently
For the millions of families who arrange domiciliary care for elderly relatives, the verification question is a source of constant, low-grade anxiety. They chose a CQC-registered provider. They reviewed the paperwork. They met the care coordinator. But when the carer arrives at mum's door at 8am, they have no way to confirm — from forty miles away — that the person entering the house is the person who was vetted.
Most families rely on their relative to tell them if something seems wrong. But many service users have conditions — dementia, sensory impairment, communication difficulties — that make this unreliable. A person with moderate dementia may not notice that today's carer is different from yesterday's. A person with visual impairment cannot check a lanyard photograph. A person with anxiety may feel unable to challenge someone who presents themselves with authority.
The current system places the verification burden on the person least able to carry it: the vulnerable adult receiving care. This is not a failure of regulation or of individual care providers. It is a structural gap in how domiciliary care is delivered — a gap created by the physical absence of any supervisory infrastructure at the point of care.
What happens when things go wrong
CQC inspection reports for domiciliary care providers rated Requires Improvement or Inadequate frequently cite the same themes: incomplete records of staff attendance, inability to confirm which worker attended which visit, inadequate systems for monitoring lone workers, and gaps in the audit trail between planned and actual care delivery.
In serious safeguarding cases, the inability to identify which worker was present at a specific time becomes a critical barrier to investigation. If the only record is a paper timesheet completed by the worker, and the worker denies being present, there is no independent evidence to resolve the question.
For care providers, this creates liability risk. For families, it creates distress and loss of trust. For the vulnerable adult, it creates ongoing, unmitigated risk.
The doorstep fraud problem affects a similar population — elderly adults who cannot independently verify the identity of someone at their door. In the case of domiciliary care, the person at the door has been invited, is expected, and has a legitimate reason to be there. This makes verification harder, not easier, because the default assumption is that everything is normal.
Bridging the gap with technology
The solution is not to place care workers under suspicion. The vast majority of domiciliary care workers are dedicated professionals doing demanding work in difficult conditions. The solution is to create a verification layer that protects everyone — the worker (from false allegations), the service user (from unverified visitors), the family (from uncertainty), and the provider (from compliance gaps).
What this looks like in practice:
Verified check-in at the point of care. When the care worker arrives, they verify their identity through a digital mechanism — a QR code scan, a mobile verification, or similar. This confirms that the specific individual at the door is the person assigned to this visit, with current credentials.
Real-time visibility for families. The service user's designated contacts — family members, social workers — receive confirmation that the verified care worker has arrived. Not a text message saying "someone turned up," but a verified record showing who arrived and that their identity and credentials were confirmed.
Automated credential monitoring. DBS status, right to work permissions, training certifications — all checked continuously rather than at the point of recruitment alone. If a worker's visa expires or their DBS status changes, the system flags it before the next visit, not six months later at an audit.
Audit-ready records. Every visit generates a timestamped, tamper-proof record linking the verified worker to the specific visit. When CQC asks "who attended Mrs. Johnson on 14 March?", the answer is immediate, verifiable, and independent of the worker's own records.
The regulatory direction
The direction of travel in adult social care regulation is towards greater transparency, better data, and more robust accountability. The CQC's evolving assessment framework places increasing emphasis on governance, data quality, and the ability to demonstrate that systems are working — not just that policies exist on paper.
For domiciliary care providers, this means the gap between office-based compliance and doorstep reality will come under increasing scrutiny. Providers who can demonstrate verified, real-time records of care delivery will be better positioned — not just for inspections, but for commissioning decisions by local authorities who are increasingly demanding digital evidence of service delivery.
The technology to close this gap exists now. The question is whether the sector adopts it proactively or waits for a serious safeguarding failure to force the issue.
Certifyd's verification platform brings identity confirmation to the point of care — verified check-in for domiciliary workers, real-time family notifications, and audit-ready records for every visit. Compliance that works at the front door, not just in the office. Learn more about Certifyd for care.