High riskEmail Scams

Student Portal Email Scam

This scam emails students claiming a tuition issue, refund, grant, or portal verification, linking to a fake university login page that captures credentials and, in turn, financial aid or personal data.

Quick verdict

Risk level
High risk
Scam type
Education impersonation phishing
Main red flag
An email pushing you to log in to your student portal or claim a refund via a link.
What to do first
Log in through the university's official portal you normally use.

What this scam usually looks like

This scam emails students claiming a tuition issue, refund, grant, or portal verification, linking to a fake university login page that captures credentials and, in turn, financial aid or personal data.

Example message pattern

Example pattern — not a real report
Example pattern: 'Action required: a tuition refund is pending. Log in to your student portal to confirm your details: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • A tuition, refund, or grant alert with a login link
  • A login page that is not the university's official site
  • Pressure tied to a deadline or enrolment
  • A sender address that is external or slightly off
  • Requests for financial or personal details

What to do

  • Log in through the university's official portal you normally use
  • Verify any notice with the university's IT or finance office
  • Report the email to your university's IT team
  • Enable multi-factor authentication on your student account

If you already clicked or replied

  • If you entered your login, change it immediately and tell IT
  • Enable multi-factor authentication and review activity
  • Watch for misuse of financial aid or personal data
  • Update the password anywhere you reused it

What not to do

  • Do not log in through portal links in emails
  • Do not share financial or personal details via the link
  • Do not let deadline pressure rush you

Similar scams

Frequently asked questions

Does my university email login links about refunds?
Tuition and refunds are handled in the official portal when you log in directly. An email pushing you to log in via a link is a phishing sign.
Why are students targeted?
Student accounts hold financial aid, tuition, and personal data, and busy students may act quickly on deadline-driven emails.
I entered my login. What now?
Change your password, tell your university's IT team, enable multi-factor authentication, and watch for misuse of your aid or data.
How do I access the portal safely?
Use your usual bookmark or the university's official website, and verify notices with the IT or finance office.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.