High riskEmail

Student Portal Email Scam

This scam emails students claiming a tuition issue, refund, grant, or portal verification, linking to a fake university login page that captures credentials and, in turn, financial aid or personal data.

Quick verdict

Risk level
High risk
Scam type
Education impersonation phishing
Main red flag
An email pushing you to log in to your student portal or claim a refund via a link.
What to do first
Log in through the university's official portal you normally use.

What this scam usually looks like

This scam emails students claiming a tuition issue, refund, grant, or portal verification, linking to a fake university login page that captures credentials and, in turn, financial aid or personal data.

Email scams, or phishing, remain one of the most common ways criminals steal logins, payment details, and money. A convincing message imitates a brand or contact and steers you toward a fake login page, a malicious attachment, or a fraudulent payment.

The single clearest warning sign to remember is this: An email pushing you to log in to your student portal or claim a refund via a link. Log in through the university's official portal you normally use.

Not sure this matches what you received? Compare it with the Student Loan Forgiveness Scam or the Microsoft Account Email Scam, browse the Email Scams guides, or paste the exact message into our free scam checker.

By the numbers

Most reported
phishing was the most common type of cybercrime complaint reported to the FBI in 2023
Source: FBI Internet Crime Complaint Center
$12.5B
total reported internet-crime losses in the US in 2023
Source: FBI Internet Crime Complaint Center

Example message pattern

Example pattern, not a real report
Example pattern: 'Action required: a tuition refund is pending. Log in to your student portal to confirm your details: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Why this is a red flag: An email pushing you to log in to your student portal or claim a refund via a link.

Red flags to watch for

  • A tuition, refund, or grant alert with a login link
  • A login page that is not the university's official site
  • Pressure tied to a deadline or enrolment
  • A sender address that is external or slightly off
  • Requests for financial or personal details

What to do

  • Log in through the university's official portal you normally use
  • Verify any notice with the university's IT or finance office
  • Report the email to your university's IT team
  • Enable multi-factor authentication on your student account

If you already clicked or replied

  • If you entered your login, change it immediately and tell IT
  • Enable multi-factor authentication and review activity
  • Watch for misuse of financial aid or personal data
  • Update the password anywhere you reused it

What not to do

  • Do not log in through portal links in emails
  • Do not share financial or personal details via the link
  • Do not let deadline pressure rush you

Similar scams

High risk Government & Tax

Student Loan Forgiveness Scam

This scam promises student loan forgiveness, cancellation, or reduced payments in exchange for an upfront fee or your loan account login, taking your money or hijacking your account while real programs remain free.

Created by Scam or Safe Editorial Team
High risk Email

Microsoft Account Email Scam

This scam sends a fake Microsoft or Outlook email about an unusual sign-in or an account about to be closed, linking to a fake Microsoft login page that captures your email and password.

Created by Scam or Safe Editorial Team
High risk Email

HR Portal Email Scam

This scam emails employees pretending to be the HR or staff portal, asking them to log in to review a policy, payslip, or benefits update, leading to a fake page that captures work credentials for further fraud.

Created by Scam or Safe Editorial Team

Frequently asked questions

Does my university email login links about refunds?
Tuition and refunds are handled in the official portal when you log in directly. An email pushing you to log in via a link is a phishing sign.
Why are students targeted?
Student accounts hold financial aid, tuition, and personal data, and busy students may act quickly on deadline-driven emails.
I entered my login. What now?
Change your password, tell your university's IT team, enable multi-factor authentication, and watch for misuse of your aid or data.
How do I access the portal safely?
Use your usual bookmark or the university's official website, and verify notices with the IT or finance office.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.