Back-to-School Scams 2026: Fake FAFSA and Scholarship Texts Are Draining Parents' Bank Accounts
As tuition deadlines hit, scammers are blasting fake FAFSA and scholarship texts that steal bank logins in seconds — here's how families can spot them.
Draining Parents' Bank Accounts Right Before Tuition Is Due
School's starting back up, tuition bills are landing, and financial aid offices are sending real texts and emails about FAFSA verification, scholarship disbursements, and payment deadlines. Scammers know this. Every August, they flood parents and students with fake "urgent" messages timed to arrive right when a real one might — and the confusion is costing families thousands of dollars per incident.
Here's what's happening and exactly how to shut it down.
The Scam: What It Looks Like Right Now
Fake FAFSA/financial aid texts. A message claims your FAFSA application has an "error," is "under review," or needs "immediate verification" to release funds. It includes a link to a site that looks like studentaid.gov or your school's portal.
Scholarship "you've won" texts. Out of nowhere, a text says your student won a scholarship — but you need to "confirm eligibility" or pay a small "processing fee" to release it. Real scholarships never ask for money to release money.
Tuition payment redirect scams. A message impersonating the bursar's office says your payment failed or your account is "on hold" and asks you to click a link to re-enter your bank or card details.
School impersonation calls (vishing). A caller claims to be from financial aid, sometimes spoofing the school's real phone number, pressuring you to verify your Social Security number, FSA ID, or bank routing number "before the deadline."
What makes these effective isn't sophistication — it's timing and urgency. You're already juggling real deadlines, so a fake one blends right in.
Why These Messages Work
- They spoof real institutions' names and even phone numbers.
- They create a ticking clock ("respond within 24 hours or lose funding").
- They target the FSA ID and Social Security number — the two credentials that unlock everything: federal aid, tax records, and often bank accounts tied to auto-pay.
- Parents are often CC'd or contacted directly, and many aren't familiar with what their student's school communications normally look like.
How to Tell Real From Fake
- Financial aid offices and studentaid.gov do not send links via text asking you to log in. The federal government does not text you about FAFSA status. Legitimate updates appear when you log in directly to studentaid.gov or your school's official portal — typed in yourself, never tapped from a text.
- Real scholarships never require payment to receive money. Any "fee to unlock your award" is a scam, full stop.
- Legitimate schools don't ask for your full Social Security number or bank password by text, email, or phone call. They already have your SSN on file from enrollment.
- Check the sender, not just the name. A text claiming to be "Financial Aid Office" from a random 10-digit number, or an email from a domain that's almost-but-not-quite your school's (e.g., ".net" instead of ".edu") is a red flag.
- When in doubt, hang up and call back using the number printed on your official tuition bill or the school's official website — never a number provided in the suspicious message itself.
Lock This Down Today
1. Verify directly, every time. Don't click. Open a new browser tab, type studentaid.gov or your school's portal URL yourself, and log in there to check real status.
2. Turn on 2FA (or better, passkeys) on every account tied to money or identity. This includes your student's school portal, studentaid.gov account, email, and banking apps. If a scammer gets a password, 2FA/passkeys stop them from getting in anyway. Passkeys are stronger than SMS codes because there's no code to phish in the first place.
3. Freeze your student's credit — and yours. Scammers targeting FAFSA info are often after Social Security numbers to open credit in your student's name (a favorite target because their credit files are "clean" and unmonitored). A credit freeze with each of the three bureaus is free, takes a few minutes online, and can be lifted temporarily whenever you need to apply for something real.
4. Set up account alerts. Turn on text/email alerts for any withdrawal or new payee on the bank account you use for tuition. Catching a fraudulent transfer within minutes, not days, is often the difference between recovering the money and losing it.
5. Opt out of data broker listings. Scammers buy parent and student contact lists from data brokers to build these targeted August campaigns. A data-removal service (or manually opting out of major broker sites) reduces how easily your phone number and family details get packaged and sold to scammers.
6. Talk to your student before the scam call, not after. Tell them plainly: real financial aid offices don't ask for passwords or SSNs by text or phone. Agree in advance that any "urgent aid" message gets verified by calling the school directly, together, before anyone clicks or replies.
7. Report it. Forward suspicious texts to your carrier (7726 / "SPAM"), report scholarship scams to the FTC, and alert your school's actual financial aid office — they can warn other families and may already be tracking a campaign impersonating them.
Do This Now
- Don't click links in FAFSA, scholarship, or tuition texts — go to the site directly instead.
- Turn on 2FA or passkeys on your school portal, studentaid.gov, email, and banking apps.
- Freeze your student's credit (and yours) for free with all three bureaus.
- Set bank alerts for any withdrawal or new payee before tuition season hits.
- Verify by calling the number on your official bill — never the number in the suspicious message.
- Talk to your student today about the "always verify first" rule.
Back-to-school season is exactly the window scammers wait for. A five-minute setup now — freeze, 2FA, alerts — closes the door before the first fake "urgent" text ever arrives.
Common Questions About Scam
How do I know if a call is really from a government agency?
Legitimate government agencies never call demanding immediate payment, threatening arrest, or asking for gift cards, wire transfers, or cryptocurrency. Hang up and call the agency directly using their official number from usa.gov.
What is a pig butchering scam?
Pig butchering is a long-con investment fraud where scammers build fake friendships or romances over weeks before introducing a fake crypto investment platform. Losses average $120,000 per victim. Any unsolicited investment tip is a red flag.
What should I do if I have already been scammed?
Report to the FTC at ReportFraud.ftc.gov, the FBI at IC3.gov, and your state attorney general. If a bank transfer was involved, call your bank immediately — you may have a window to reverse it. Document everything: screenshots, phone numbers, transaction records.
More in scam
Stay invisible. Follow @hack_decoded