School Email Account Deactivation Scam

Scammers send emails pretending to be from a college or university IT department, warning students that their email account will be deactivated unless they “verify” or “update” their information. These messages usually include an urgent tone and a link to a fake website that looks like a real college login page. The true goal is to steal your school email login and password, which can be used to access your personal data, financial accounts, or send more scam emails to others.

I encountered this scam Learn common red flags
Primary example

How this scam works

  1. 1

    Step 1: You receive an email that appears to be from your school’s IT or email team, often saying your account is about to be deactivated.

  2. 2

    Step 2: The message urges you to click or copy-paste a web link to 'keep your account active.'

  3. 3

    Step 3: The link leads to a fake site that asks you to enter your email, password, and sometimes your phone number or name.

  4. 4

    Step 4: If you fill out the form, scammers collect your information and may use it to break into your account or target others.

✓ Do this

  • Always check the sender’s actual email address and watch for strange links.
  • Go directly to your school’s official website if you are ever asked to log in or update information.
  • Contact your school’s IT help desk if you’re unsure about a message.
  • Report suspicious emails to your school’s security office.

✗ Avoid this

  • Don’t click on links or download attachments from emails that create a sense of urgency or threat.
  • Don’t enter your password or personal details on websites you reached by clicking a link in a suspicious email.
  • Don’t reply to suspicious emails or messages, even if they use your school’s name or logo.

Quick tip: Verify independently

Don’t call numbers or click links in unexpected messages. Go directly to the company’s official site or app and contact support from there.

See common red flags