Education

International Student Recruitment Compliance: ESOS, CRICOS, DLI, and SEVP

The regulatory backbone for international recruitment across Australia, Canada, the US, Singapore, and Malaysia. What each framework requires of providers, what agent commission disclosure means in each market, and where misleading outcome claims create enforcement exposure.

International student recruitment compliance with ESOS, CRICOS, DLI, and SEVP: duotone print of a border checkpoint arch with raised barrier, a dotted travel path passing through, and a small solid orange arrow on the path.

Bottom line

International student recruitment operates inside education law, immigration law, and consumer protection law simultaneously. The compliance gates that matter for marketing:

  • Australia: CRICOS registration required before marketing; National Code Standard 4 governs agents
  • Canada: DLI designation required; since January 2024, Provincial Attestation Letters are needed for most new study permit applications
  • US: SEVP certification required to issue I-20s; commission for international agents permitted under 20 USC 1094 exception
  • Singapore/Malaysia: CPE/EduTrust and MQA accreditation respectively; consumer protection law covers misleading outcome claims in both markets
  • All five markets: fabricated or unsubstantiated outcome claims are enforceable; agent representations that obscure the commercial relationship are the provider's exposure

Why compliance is the baseline, not the differentiator

International student recruitment sits at the intersection of education law, immigration law, and consumer protection law simultaneously. The recruiter who treats compliance as a legal minimum to be managed at the edges will eventually have an incident. The institution or consultancy that builds compliance into its recruitment marketing system will avoid the incident and, more usefully, will be able to tell that story credibly to prospective students and to the agents who place them.

This post is the regulatory backbone for the education batch. The other level-ladder posts (pre-school through to adult professional education) link here for the rules that govern international recruitment across Australia, Canada, Singapore, Malaysia, and the United States. Each section names the framework, what it requires, and what the marketing implication is. Where a specific provision was not reachable at primary source during this build, it is flagged as method-level with the appropriate hedging. No invented section numbers appear here.

The adjacent post covers universities specifically, including domestic recruitment and the AI discovery shift: university marketing guide. The student storytelling layer that sits on top of this compliance foundation is at storytelling for student recruitment. The industry overview is at leapbuzz for education.

One structural point before the market-by-market detail: compliance is not a story that scales in paid media. It works in agent briefings, on a provider's website, and in materials for sophisticated buyers (parents, counsellors, agents), not in awareness-stage ads. Where to deploy each signal matters as much as what the signal is.

Agent commission: who pays, what must be disclosed, and why it matters to students

International student recruitment agents are paid by the receiving institution, not the student, in almost every market. The institution pays a commission upon confirmed enrolment, typically as a percentage of the first-year tuition fee. The student does not pay the agent directly for recruitment services. This structure is the global norm and is not inherently problematic. The compliance issue arises at two points: what the agent tells (or does not tell) the student about the commercial arrangement, and whether the agent's incentive to earn commission is driving recommendations that are not in the student's best interest.

Agent disclosure requirements vary by market:

  • Australia: The National Code 2018 Standard 4 requires written agreements with each agent, public listing of agents on the institution's website, and active monitoring. Providers bear responsibility for their agents' conduct. An agent who presents a recommendation as impartial advice without acknowledging the commission relationship is creating a misleading impression; the prohibition on misleading students is embedded in Standard 4's general conduct obligations.
  • Canada: No national statutory agent register exists; institutions set their own agent management policies. Some provinces are moving toward stronger oversight. The absence of a national code does not remove Competition Act obligations; misleading representations by agents acting on the institution's behalf are the institution's legal exposure.
  • United States: The Higher Education Act (20 USC 1094(a)(20)) bans commission for domestic student recruitment but explicitly exempts "the recruitment of foreign students residing in foreign countries who are not eligible to receive Federal student assistance." US institutions can pay commission to international agents. They cannot extend that structure to domestic recruitment. Mixing the two creates HEA exposure.
  • Singapore and Malaysia: Agent management is institution-led in both markets. Singapore's CPE includes agent management criteria within EduTrust certification. Malaysia operates under MQA and institutional policy. Both markets' consumer protection legislation (CPFTA in Singapore; Consumer Protection Act 1999 in Malaysia) covers misleading agent-to-student representations.

Any document that positions an agent recommendation as impartial advice, without acknowledging the commercial relationship, is a compliance risk across all five markets. Agent briefing packs, co-branded landing pages, and agent-sourced testimonials all require human review for this specific signal before publication.

International student agent commission flow diagram: institution pays commission to agent upon student enrolment, with disclosure and monitoring obligations shown
Agent commission flows from the institution to the agent upon confirmed enrolment. The student does not pay the agent. Disclosure and monitoring obligations sit with the institution in markets with formal codes of practice.

ESOS and CRICOS: Australia's registration framework and what it means for your marketing

The Education Services for Overseas Students Act 2000 (ESOS Act) is the central statute governing international student education in Australia. Every institution that wants to enrol international students studying on a student visa (Subclass 500) must be registered on the Commonwealth Register of Institutions and Courses for Overseas Students (CRICOS). CRICOS is the public database that allows a prospective student to verify that an institution and specific course are authorised to deliver education to international students. Marketing to international students without CRICOS registration, or marketing a course that is not on CRICOS, is misleading because it implies an enrolment capacity that does not legally exist.

The ESOS framework has four components that all registered providers must satisfy:

  1. The ESOS Act 2000: The base statute. Sets the legal obligations, including refund obligations, student support requirements, and the consequences of provider non-compliance (deregistration, financial penalties). Regulatory oversight sits with TEQSA for higher education providers and ASQA (Australian Skills Quality Authority) for VET providers.
  2. The National Code of Practice 2018: A legislative instrument under the ESOS Act. The operational rulebook: student welfare, course progress monitoring, transfer between providers, and education agent management (Standard 4). Provider compliance with the National Code is assessed at CRICOS registration and renewal audits.
  3. The ESOS (TPS) Act: Governs the Tuition Protection Service, which protects student fees if a provider closes or is unable to deliver the enrolled course. This is a student-facing protection with direct marketing implication: providers can represent the tuition protection system as a trust signal to prospective international students.
  4. Visa conditions: The student visa framework (Department of Home Affairs) sets attendance and course-progress requirements that providers must monitor and report on. Failure to monitor creates compliance exposure independent of marketing claims.

The marketing implication of the ESOS framework is straightforward: CRICOS registration is the licence to operate, and it carries ongoing obligations that affect what an institution can say. A provider whose CRICOS registration is at risk of suspension cannot truthfully continue to market courses for future intakes without disclosure. A provider whose refund policy does not meet ESOS Act requirements cannot accurately represent student financial protections in its materials. The ESOS framework creates a direct connection between operational compliance and marketing integrity.

One persistent gap: agents are briefed on courses but not on CRICOS status, compliance standing, or the refund and transfer conditions that apply to international students. The National Code Standard 4 training obligation is not a formality; it closes exactly that gap. An agent who cannot accurately represent these conditions to a student is creating the provider's next complaint, not the provider's next enrolment.

Australia moved to tighten international student enrolment policy with cap-related legislation through 2024-2025; the legislative path was contested. Verify current enrolment limit specifics at education.gov.au before including volume claims in marketing or agent briefings.

ESOS framework components diagram: ESOS Act, National Code 2018, Tuition Protection Service, and visa conditions shown as four pillars of Australia's international student registration system
The four components of Australia's ESOS framework: the ESOS Act, the National Code of Practice, the Tuition Protection Service, and visa conditions. Each carries compliance obligations with direct marketing implications.

Designated Learning Institutions in Canada: what DLI status requires from your recruitment

In Canada, an institution must be designated as a Designated Learning Institution (DLI) by its provincial or territorial government for international students to obtain a study permit to study there. DLI designation is a prerequisite for international enrolment, not an optional quality mark. Students who enrol at a non-DLI institution cannot maintain a valid Canadian study permit for that program. The marketing implication is binary: an institution is either a DLI and can enrol international students, or it is not and must not market itself to international students as accepting study permit holders.

Since January 22, 2024, most new study permit applicants have also been required to obtain a Provincial Attestation Letter (PAL) from the destination province or territory before applying for their study permit. PALs reflect a province's allocation of international student capacity, and provinces have set their own allocation rules. The practical effect on recruitment marketing:

  • Advertising that implies open enrolment without acknowledging PAL requirements could mislead prospective students about the realistic timeline and complexity of their application.
  • Agent briefings must be updated to reflect PAL requirements by province; agents who are advising students on study permit timelines without this information are operating on outdated information.
  • DLI institutions with high volumes of study-permit students should verify current provincial allocation levels at ircc.canada.ca before making capacity claims in marketing materials.

DLI institutions have enrolment-reporting obligations to IRCC. Students who do not enrol at the designated institution trigger reporting. Marketing claims about the enrolment experience must match the actual journey; a gap between marketed promise and reporting-driven reality generates the complaints that reach regulators.

Canada's agent market runs on institutional rather than national rules. There is no national agent register. The institution remains responsible for its agents' representations; the Competition Act's prohibition on misleading advertising applies to those representations regardless.

International student recruitment compliance by market

The table below summarises the key compliance frameworks across the five markets. Verify any item against the current primary source before use in recruitment materials; this sector has been changing faster than most publication cycles.

Regulatory frameworks for international student recruitment by market
Market Registration requirement Agent framework Misleading conduct authority Key compliance gate for marketing
Australia CRICOS registration (ESOS Act 2000) required for student visa enrolments National Code 2018, Standard 4: written agreement, listing, training, monitoring ACCC (Australian Consumer Law); TEQSA/ASQA for provider-specific oversight CRICOS status must be current; outcome claims must match stated graduate data
Canada DLI designation (provincial/federal) required for study permit holders Institution-led; no national register; Competition Act applies to agent representations Competition Bureau (Competition Act) PAL requirements must be reflected in marketing; enrolment-reporting obligations exist
United States SEVP certification (Department of Homeland Security) required for F-1/M-1 enrollment Commission permitted for international agents (20 USC 1094 exception); prohibited for domestic FTC (FTC Act); DoEd program integrity for Title IV schools SEVP status required; agent commission structures must separate international from domestic
Singapore CPE registration under Private Education Act (for PEIs); public universities under MOE EduTrust certification includes agent management criteria (method-level for specifics) Consumer Protection (Fair Trading) Act (CPFTA) Student fee protection insurance required for PEIs; outcome claims must be substantiated
Malaysia MQA accreditation required for Student Pass eligibility; MOHE approval for PHEIs Institution-led; no national agent register; Consumer Protection Act 1999 applies Consumer Protection Act 1999; KPDNHEP for false trade descriptions Programme MQA status must match marketing; approved intakes only can be advertised as open

International student recruitment compliance in Australia

CRICOS status is the licence to operate; a clean record is also a trust signal to agents and students. The 2024-2025 enrolment policy changes created uncertainty; synchronise with compliance and international-office teams before making any claims about available places or entry requirements, as policy settings were contested and subject to revision.

International student recruitment compliance in Canada

The January 2024 PAL requirement created a two-stage compliance obligation: DLI designation (standing prerequisite) plus a student's provincial attestation letter before the study permit application. Marketing that implies a straightforward application pathway without acknowledging PAL requirements will generate complaints when the reality proves more complex. Universities face less acute disruption than colleges under most provincial PAL systems, but agent briefings must be updated regardless.

International student recruitment compliance in the United States

SEVP certification is binary: hold it and issue I-20 forms, or do not enrol F-1 and M-1 students. The 20 USC 1094 international student exception is genuine relief from the domestic incentive-compensation ban, but requires operational discipline: the commission structure for international recruitment must be clearly separated from any incentive arrangement touching domestic recruitment. Conflating the two creates HEA compliance exposure regardless of intent.

International student recruitment compliance in Singapore

Singapore's PEI framework layers CPE registration, EduTrust certification, and the Private Education Act. Student fee protection is mandatory before fees are collected and must be disclosed in writing. Marketing that implies enrolment availability without the fee protection obligation in place is a compliance gap. Public universities operate under MOE with different frameworks, but the CPFTA's prohibition on misleading claims applies equally.

International student recruitment compliance in Malaysia

Malaysia's Student Pass is issued on the basis of enrolment in an MQA-accredited programme at an approved PHEI. Marketing a programme before MQA accreditation is granted, or continuing to market one whose accreditation has lapsed, is a direct compliance failure. Agent briefings must be updated when accreditation status changes; a student misled about the visa-eligibility of a course has a clear claim under consumer protection law.

Misleading outcome claims: the fastest path to regulatory action and reputational damage

Across all five markets, the advertising claim that generates the most enforcement attention in education is the fabricated or unsubstantiated outcome claim: employment rates, average graduate salaries, visa success rates, pass rates, or progression statistics that are invented, cherry-picked, or presented without the context that would make them honest. The enforcement mechanism varies by market; the underlying prohibition does not. The enforcement mechanism varies, but the outcome (regulatory action, reputational damage, student complaints, potential deregistration) is similar enough to treat the prohibition as a single principle: if you cannot substantiate it from your own verifiable data, do not publish it.

The common failure modes for outcome claims in education marketing:

  • Unverified graduate employment rates: Citing "90% employment within six months" without a disclosure of the survey methodology, sample size, response rate, or definition of "employment." In most markets this is misleading by omission even if the underlying figure is real.
  • Cherry-picked cohort data: Selecting the best-performing intake, campus, or programme stream and presenting it as the institution-wide outcome. This is explicitly prohibited under Australia's ACCC enforcement precedents and the equivalent consumer-law principles in other markets.
  • Implied visa-success guarantees: Language that implies a student who enrols will receive a visa, or that a provider's relationship with immigration authorities improves visa outcomes. Visa decisions are made by the relevant immigration authority, not the institution; implying influence over that decision is misleading.
  • Salary claims without cohort context: "Our graduates earn an average of X" without disclosing that X is median, not mean; is sector-specific, not institution-wide; or was collected from a subset of graduates who responded to a voluntary survey.
  • AI-generated copy without human review: Copy produced by AI tools that makes implied outcome promises based on training data about similar institutions. AI does not have access to the institution's actual graduate outcome data and will hallucinate plausible-sounding but unverifiable figures if given free rein. The pre-approved matrix approach (a cleared library of outcome statements referenced to actual data, with AI selecting from the library rather than generating new claims) is the governance architecture that makes AI-assisted content production safe in this context.

Enforcement risk maps to: ACCC in Australia; Competition Bureau in Canada; FTC in the US; CPFTA in Singapore; Consumer Protection Act 1999 and Trade Descriptions Act 2011 in Malaysia. None of these are theoretical; each authority has acted against educational advertising in the past. Case-level sourcing requires current primary fetch; method-level framing applies here.

For AI-assisted copy: outcome claims require a human reviewer with access to the institution's actual graduate outcome data before any claim publishes. The AI writes variants; a compliance-aware reviewer certifies the data reference. No exceptions for social formats, digital channels, or agent co-branded materials.

Building a compliant agent programme: what the agreement needs to cover

Most international student recruitment incidents that reach regulators or generate student complaints have a common upstream cause: the agent agreement did not clearly define the obligations, or the institution did not enforce them. The checklist below captures what a thorough agent agreement and oversight programme covers. This interactive version is designed as a self-assessment for recruitment marketing teams; it is not legal advice, and it does not substitute for a review by a lawyer familiar with the relevant jurisdiction's education law.

Agent agreement compliance checklist

Agent agreement structure

Disclosure and transparency

Training and monitoring

Registration and market-specific requirements

0 of 17 items checked
Work through the checklist above to assess your programme's compliance posture.

Frequently asked questions

What is CRICOS and why do Australian institutions need it to recruit international students?

CRICOS (Commonwealth Register of Institutions and Courses for Overseas Students) is the official Australian government register of providers authorised to enrol international students on student visas (Subclass 500). A provider must be CRICOS-registered, and each course must be listed on CRICOS, before marketing to international students. Marketing courses to international students without CRICOS registration is misleading because it implies an enrolment capacity the provider does not legally hold. Registration also brings the provider under the ESOS Act 2000 and the National Code of Practice 2018, including the agent management obligations in National Code Standard 4.

What does the National Code 2018 Standard 4 require for education agent management in Australia?

Standard 4 of the National Code of Practice for Providers of Education and Training to Overseas Students 2018 requires CRICOS-registered providers to have a written agreement with each education agent they use, to list those agents on the institution's website, to train agents on their obligations, and to monitor and act on agent non-compliance. The provider bears responsibility for the conduct of its agents toward prospective students. An agent who presents recommendations as impartial advice without acknowledging the commission relationship creates a misleading impression that traces back to the provider's compliance record.

What is a Designated Learning Institution (DLI) in Canada?

A Designated Learning Institution is a Canadian school or university formally designated by its provincial or territorial government for international students to obtain a study permit to study there. DLI designation is a prerequisite for international student enrolment, not an optional quality mark. Since January 22, 2024, most new study permit applicants must also obtain a Provincial Attestation Letter (PAL) from the destination province before applying for their study permit. Marketing materials that imply a straightforward application pathway without acknowledging PAL requirements risk misleading prospective students about the realistic timeline and process.

Can US universities pay commission to international student recruitment agents?

Yes. The Higher Education Act (20 USC 1094(a)(20)) bans Title IV-eligible institutions from paying commission for student recruitment. However, the statute explicitly exempts the recruitment of foreign students residing in foreign countries who are not eligible to receive federal student assistance. In practice: US institutions can pay commission to agents recruiting international students who cannot access US federal financial aid. They cannot pay commission for domestic student recruitment. The commission structures must be clearly separated operationally; conflating international and domestic recruitment incentive arrangements creates Higher Education Act compliance exposure.

What must a US school do to legally enrol international F-1 students?

A US school must be certified by the Student and Exchange Visitor Program (SEVP), administered by the Department of Homeland Security, to enrol F-1 or M-1 visa students. Only SEVP-certified schools can issue the I-20 (Certificate of Eligibility for Nonimmigrant Student Status) that international students need to apply for and maintain their student visa. Schools without SEVP certification cannot legally enrol F-1 or M-1 students; marketing to these students without SEVP certification is misleading about enrolment capacity.

What counts as a misleading outcome claim in education marketing?

An outcome claim is misleading if it cannot be substantiated from verifiable institutional data. Common failure modes include: employment rates cited without disclosing the survey methodology, sample size, or definition of employment used; cherry-picked cohort data presented as institution-wide results; visa success rate language that implies the institution influences immigration decisions; and salary claims without a clear statement of whether the figure is mean or median, what population it covers, and the data collection method. All five markets in our coverage (Australia, Canada, US, Singapore, Malaysia) have consumer protection or competition law that treats fabricated or unsubstantiated educational outcome claims as an enforceable matter.

What is the Singapore CPE/EduTrust framework for private education institutions?

Singapore's Committee for Private Education (CPE, operating under SkillsFuture Singapore) regulates private education institutions (PEIs) under the Private Education Act. CPE registration is the base requirement; EduTrust certification is the quality mark that indicates higher standards of governance, financial management, and student protection. PEIs must have student fee protection in place before collecting fees from international students, disclosed in writing as part of the student contract. Marketing that implies enrolment availability without the fee protection obligation being met is a compliance gap under Singapore's regulatory framework.

Does Malaysia have a national education agent register for international student recruitment?

No. Malaysia does not have a national statutory agent register comparable to Australia's National Code Standard 4. Agent management for Private Higher Education Institutions (PHEIs) is governed by institutional policy and general consumer protection law. The critical compliance gate in Malaysia is MQA (Malaysian Qualifications Agency) accreditation: the programme being marketed must have current MQA accreditation for the student's visa (Student Pass) to be valid for that course. Marketing a programme before accreditation is granted, or after it lapses, creates direct compliance exposure under the Consumer Protection Act 1999.

What are the compliance obligations for education agent marketing materials?

Agent-facing marketing materials carry the same compliance obligations as institution-facing materials. Specifically: outcome statistics must be verified against actual graduate data; course descriptions must match CRICOS, DLI, or SEVP-approved programme details; visa eligibility framing must not imply outcomes the institution cannot guarantee; and the commercial nature of the agent relationship must not be obscured in materials the agent uses to recruit students. In Australia, National Code Standard 4 requires the provider to train agents on these obligations. In other markets, the same principles apply under general consumer protection law even without a statutory agent training requirement.

Related

Work with leapbuzz

Running international student recruitment across multiple markets and need the compliance layer built into your marketing system?

leapbuzz builds compliant international recruitment marketing for education providers across Singapore, Australia, Canada, the US, and Malaysia. Agent programmes, outcome-claim governance, and multi-market digital infrastructure designed to pass audit scrutiny, not just look good in a pitch deck.

Talk to us