top of page

Back-to-school scams: what to watch out for

With the kids returning to school after the summer holidays, there's more to worry about than just ill-fitting uniform and scuffed shoes...the cyber criminals are here to prey on parental vulnerability at this time of year.


If you’re a parent whose child is going back to school or university after the long summer holidays, look out for these scams. As if we haven’t got enough to think about, right?


1. Fake Online Stores & Shopping Scams


  • Cybercriminals craft fake websites offering steep discounts on school supplies, textbooks, laptops, and dorm essentials. Buyers enter payment details - and often receive nothing in return.

  • Some operate textbook rental scams: you pay but never receive your books.

  • Promotional emails and social media ads may link to phishing sites posing as legitimate retailers.

Tips:


  • Stick to retailers you know, verify URLs (look for HTTPS and padlock), and always do an online reputation check.

  • Use credit cards for purchases - they often offer consumer protection.


2. Phishing: Fake Emails, Texts & Alerts


  • Scammers impersonate schools, bookstores, or student services to trick users into revealing login credentials or financial information.

  • Fake shipment notices or “urgent” alerts may lure recipients into clicking malicious links.


Tips:


  • Always verify the sender’s address and contact the institution directly through official channels before responding.


3. Scholarship, Grant & Financial Aid Scams


  • Offers for scholarships or grants that require application fees or personal details are often fraudulent.

  • Scammers may pose as loan servicers promising student loan forgiveness - for a fee.

Tips:


  • Real scholarships don’t cost money to apply.

  • Always verify via official school or government channels.


4. Tech Support Scams


  • Fraudsters impersonate school technicians or vendors claiming your device has an issue, then ask for remote access or payment.

  • Once they have access, they typically claim to find malware and request payment for bogus fixes.

Tips:


  • Never grant remote access or accept unsolicited tech support. Verify with your institution first.


5. Housing & Roommate Scams


  • Fake rental listings target students seeking accommodation: scamming them for deposits on non-existent properties.

Tips:


  • Always view properties in person or request verifiable documentation. Never send money to unknown landlords.



6. Deepfake, Voice & AI-Based Scams


  • Scammers may use AI to mimic voices of administrators, teachers, or even family to request urgency payments or personal favours.

  • AI can also generate polished phishing content - like fake scholarship offers - tailored with personal details.

Tips:


  • Slow down and think critically when faced with urgent requests. Confirm identity via independent means before acting.


7. Fake Giveaways & Contests


  • Scammers lure people with chances to win gadgets or shopping sprees - but always ask for delivery fees or personal information.

Tips:


  • Legitimate giveaways don’t charge fees. Always verify through official websites.


8. Job & Work-From-Home Scams


  • Fake employment or freelance offers target students earning extra income. Often ask for private details or fees.

Tips:


  • Research the employer, avoid jobs that ask for upfront payments or direct personal data.


9. Identity Theft Risks & Physical Document Safety


  • Scammers may exploit databases with student information to fabricate enrolment forms or bypass school systems.

  • Physical documents (e.g., mail containing SSNs or grades) can also be stolen—especially when students are away.

Tips:


  • Keep personal documents secure and shred any unnecessary sensitive materials.


Official NCSC-Inspired Safety Advice


While the NCSC hasn’t published a dedicated “back-to-school scams” guide, their Cyber Aware campaign and educational resources offer excellent hygiene steps relevant to students, parents, and school staff:


  • Strong, unique passwords using three random words (3RW).

  • Enable two-step verification (2SV) on all critical accounts.

  • Keep devices and software updated, and use backups.

  • Report suspicious emails to the NCSC via report@phishing.gov.uk or text “7726.”


Additionally, the NCSC offers free cybersecurity training for school staff, covering phishing awareness, safe password practices, device security, and encouraging "If in doubt, call it out."


Final Takeaway


Scammers thrive on stress, urgency, and opportunity. The back-to-school season amplifies these factors - but vigilance, verification, and basic cyber hygiene go a long way in keeping you, your kids, and your institution safe.


Reporting

Report all Fraud and Cybercrime to Action Fraud by calling 0300 123 2040 or online. Forward suspicious emails to report@phishing.gov.uk. Report SMS scams by forwarding the original message to 7726 (spells SPAM on the keypad).


 
 

The contents of blog posts on this website are provided for general information only and are not intended to replace specific professional advice relevant to your situation. The intention of East Midlands Cyber Resilience Centre (EMCRC) is to encourage cyber resilience by raising issues and disseminating information on the experiences and initiatives of others. Articles on the website cannot by their nature be comprehensive and may not reflect most recent legislation, practice, or application to your circumstances. EMCRC provides affordable services and Trusted Partners if you need specific support. For specific questions please contact us by email.

 

EMCRC does not accept any responsibility for any loss which may arise from reliance on information or materials published on this blog. EMCRC is not responsible for the content of external internet sites that link to this site or which are linked from it.

bottom of page