Fraudster Who Posed as Medical Student to Access Aberdeen Hospital Wards and Files Admits Guilt

A 22-year-old man has pleaded guilty to fraud after spending weeks masquerading as a medical student at one of Scotland's largest hospitals, gaining access to restricted wards, staff-only areas and confidential medical files. Stephen Simpson, from Aberdeen, appeared at Aberdeen Sheriff Court where he admitted the deception, which prosecutors say allowed him to move freely through Aberdeen Royal Infirmary (ARI) while dressed in medical scrubs and NHS-branded clothing.

The court heard that Simpson equipped himself with the tools of a genuine clinician, carrying a stethoscope and a pager as he presented himself to hospital employees as a student doctor with legitimate reasons to be on the premises. His presence at the hospital was not a brief or opportunistic intrusion; according to the charge he admitted, the fraudulent activity spanned a period of several weeks between 9 December 2023 and 26 January 2024.

Simpson had originally faced a total of six charges — one of fraud and five separate allegations of theft. The fraud charge as first framed by the Crown alleged that his deception began even earlier, on 22 September 2023, and continued until 26 January 2024, a period of around four months. However, his solicitor, Laura Gracie, told the court that her client was entering guilty pleas to two amended charges rather than the original indictment.

Those amended charges state that Simpson pretended to employees at the hospital that he was a medical student who was authorised to be at ARI. By wearing medical scrubs and NHS-branded clothing and by carrying a stethoscope and pager, he persuaded staff to let him remain inside the hospital, to enter restricted areas and to view files that were not meant for public eyes. The court accepted that his conduct gave him access to staff-only areas, hospital wards and medical records.

In addition to the fraud charge, Simpson admitted stealing a number of items during his time at the hospital. These included articles of NHS-branded clothing, a pager and perfume. The amended pleas were accepted by fiscal Dylan Middleton, who was representing the Crown in the case.

Sheriff Morag McLaughlin deferred sentencing so that background reports could be prepared. She ordered a criminal justice social work report as well as an assessment for a restriction of liberty order, a community-based disposal that can require an offender to remain at a specified address during certain hours, often monitored electronically. Sentence was deferred until later this month, meaning Simpson will learn his fate once the reports have been considered by the court.

The case raises uncomfortable questions about security and access controls at Aberdeen Royal Infirmary, the main acute hospital serving the north east of Scotland and a major teaching site linked to medical education in the region. Hospitals routinely host students, trainees and locum staff, and staff may be accustomed to seeing unfamiliar faces in clinical areas. That environment can make it easier for an impostor to blend in, particularly when the person is wearing correct-looking scrubs, NHS livery and clinical accessories such as a stethoscope and pager.

Access to medical files is a particularly sensitive issue. Hospital records contain deeply private information about patients' diagnoses, treatments and personal circumstances, and unauthorised viewing can constitute a serious breach of confidentiality with legal and ethical consequences. The fact that Simpson admitted gaining access to medical files will be of concern both to NHS Grampian, the health board responsible for the hospital, and to the patients whose records may have been exposed.

NHS Grampian has been asked for comment on the case. The health board has not yet responded publicly to the details that emerged in court, and it remains unclear whether an internal review of security arrangements at ARI will follow. The BBC has also approached the health board for a statement.

Simpson's deception is unusual in its duration and in the level of access he is said to have achieved. While there have been previous cases in the UK of people posing as doctors or other clinical staff, they are relatively rare, and hospitals have in recent years tightened procedures around identity checks, swipe-card access and the wearing of uniforms. The fact that Simpson was able to move through wards and staff-only areas over a number of weeks will likely prompt scrutiny of how thoroughly those procedures are enforced on a day-to-day basis.

The case also highlights the role that ordinary hospital employees play in gatekeeping. According to the charge, it was employees who were induced to allow Simpson to remain in the hospital and to enter restricted areas. That suggests his deception relied not on defeating electronic security systems but on convincing individual members of staff that he belonged there, a form of social engineering that can be difficult to guard against.

Simpson, who is 22, now faces sentencing later this month. The court's decision to defer sentence for reports indicates that Sheriff McLaughlin is considering the full range of disposal options, from a community-based order to a custodial sentence. A restriction of liberty order assessment in particular suggests the court is examining whether a structured, monitored community penalty might be appropriate, though no indication has been given as to which way the sentencing decision will go.

For NHS Grampian, the case is likely to feed into wider discussions about how hospitals balance openness and accessibility with the need to protect patients, staff and confidential information. Teaching hospitals in particular must accommodate a constant flow of learners, visitors and temporary staff, and the line between a legitimate newcomer and an intruder can sometimes be blurred in busy clinical environments.

The court hearing in Aberdeen brings the criminal proceedings against Simpson to a significant milestone, with his admissions of guilt marking the end of the fact-finding phase and the beginning of the sentencing process. What remains to be established is how the health board will respond to the security implications of a man who, for several weeks, walked the corridors of Aberdeen Royal Infirmary dressed as a doctor and was trusted enough to be shown its wards and its records.