University and School Account Phishing
Students and staff are targeted with fake portal logins, grant and payroll emails, and job offers. How education phishing works and how students and schools can protect accounts.
Universities, colleges and schools run large email systems with thousands of new users every year, many of them new to the institution's tools. Phishers target students and staff with fake portal logins, financial aid messages and job offers.
Common education lures
- "Your student account will be deactivated. Re-verify now."
- "Your financial aid or bursary requires action."
- "Updated grades or timetable available." with a login link.
- Part-time remote job offers for students. See fake chat interviews and money mule recruitment.
- Payroll or pension messages aimed at staff. See HR phishing.
- Fake research collaboration or conference invitations.
How to check
- Log in through your institution's official portal, bookmarked.
- Check the sender's domain matches your institution.
- Contact the relevant office (IT, finance, registry) through known contacts.
Compromised student accounts are used to phish other students. An email from a real classmate's address can still be phishing.
Protect your account
- Turn on two-step verification.
- Use a unique password.
- Report suspicious emails to your IT service.
Got a university email you are unsure about? Paste it into CyberWatch AI Scan for a free check.
Related: scams targeting students. For more, see how to spot phishing in our complete guide.
Frequently asked questions
Why are student accounts targeted?
They give access to email, cloud storage, grades, financial aid and sometimes library and research systems, and they can be used to phish other students and staff.
What are common education lures?
Fake portal login pages, financial aid or bursary updates, job offers for students, and IT notices about account deactivation.
How do I check a university email?
Log in to your university portal through its official address, and contact the relevant office directly if unsure.
Sources
- How To Avoid Scholarship and Financial Aid Scams, US Federal Trade Commission
- Job Scams, US Federal Trade Commission
- Suspicious email actions, UK National Cyber Security Centre
