A website called “UK visa portal” has been quietly collecting passport scans, selfies, and personal data from thousands of travellers who thought they were applying through official channels.

Matthew Goslett’s storied career began with IRC, dial-up Internet, and a fascination with how messages travelled between ...