TLDR
Student loan forgiveness phishing emails surged 36% in 2026, with the CFPB recording a record 22,900 complaints. ScamVerify™ has identified campaigns charging illegal upfront fees of $500 to $1,500, impersonating the Department of Education, and stealing Federal Student Aid (FSA) IDs. With 44 million borrowers navigating policy changes and repayment restarts, scammers have a massive target pool and the perfect cover story.
The Scale of Student Loan Scams in 2026
The Consumer Financial Protection Bureau (CFPB) data paints a clear picture of how rapidly this fraud category is growing:
| Year | CFPB Complaints | Year-over-Year Change |
|---|---|---|
| 2023 | 12,400 | Baseline |
| 2024 | 16,800 | +35.5% |
| 2025 | 22,900 | +36.3% |
The 36% increase coincides with three factors: federal repayment restarts after pandemic-era pauses, ongoing policy uncertainty around broad forgiveness programs, and the Supreme Court's 2024 decision blocking the Biden-era SAVE plan. Each policy change generates confusion, and confusion is the raw material for phishing campaigns.
How These Phishing Emails Work
Stage 1: The Initial Contact
Scammers send emails impersonating the Department of Education, specific loan servicers (Nelnet, MOHELA, Aidvantage), or fake "Student Loan Forgiveness Centers." Common subject lines include:
- "Your Student Loan Forgiveness Application Has Been Pre-Approved"
- "Action Required: Complete Your SAVE Plan Enrollment"
- "Final Notice: Student Loan Forgiveness Deadline Approaching"
- "Department of Education: Your Account Requires Verification"
The emails use official Department of Education logos, reference real programs by name, and include fake confirmation numbers.
Stage 2: The Fake Application
Recipients who click the link land on a convincing portal that mimics StudentAid.gov. The fake site requests:
- Full legal name and date of birth
- Social Security number
- FSA ID and password (gives the scammer full access to your federal loan account)
- Bank account or credit card details for "processing fees"
Stage 3: The Illegal Fee
After collecting personal information, the scammer charges an upfront fee ranging from $500 to $1,500, claiming it covers "application processing," "legal review," or "expedited forgiveness review." Under federal law, no company can legally charge upfront fees for student loan assistance. This is the single most reliable red flag.
Stage 4: The Ongoing Extraction
Many scammers do not stop at the initial fee. With the victim's FSA ID, they can:
- Change the borrower's contact information, cutting off real servicer communications
- Switch repayment plans without the borrower's knowledge
- Redirect correspondence to the scammer's address
- Charge recurring monthly "monitoring" fees of $29 to $99
Red Flags: Fake vs. Real Student Loan Communications
| Indicator | Legitimate Servicer | Scam Email |
|---|---|---|
| Sender domain | @mohela.com, @nelnet.com, @ed.gov | @student-relief.com, @loan-forgiveness.org |
| Upfront fees | Never charges fees for federal programs | $500 to $1,500 "processing fee" |
| FSA ID request | Never asks for password via email | Requests full FSA ID and password |
| Urgency | Provides reasonable timelines | "48-hour deadline" or "limited spots" |
| Contact method | Uses your StudentAid.gov dashboard | Cold email with no prior relationship |
| Program names | References real, current programs | References expired or non-existent programs |
| Phone number | Published toll-free servicer number | Unverifiable number or no number at all |
Why Policy Changes Create the Perfect Cover
Every time student loan policy shifts, scammers update their templates. The timeline of confusion works in their favor:
- 2023: SAVE plan announced as replacement for REPAYE, generating confusion about enrollment.
- 2024: Supreme Court blocks broad forgiveness. Scammers pivot to "alternative forgiveness programs."
- 2025: Repayment restarts with new income-driven plans. Scammers impersonate servicers requesting "re-enrollment."
- 2026: Ongoing legislative proposals create uncertainty. Scammers reference bills that have not passed as "newly approved programs."
Each policy change generates search traffic, news coverage, and borrower anxiety. Scammers monitor these events and launch campaigns within days of major announcements.
Who Is Most at Risk
The 44 million Americans with federal student loan debt are all potential targets, but certain groups face higher risk:
- Recent graduates unfamiliar with servicer communication patterns
- Borrowers in default who are desperate for forgiveness options
- Parents with PLUS loans who may be less familiar with the federal student aid system
- Borrowers who recently changed servicers and are unsure which company now holds their loans
How Real Student Loan Servicers Contact You
Understanding legitimate communication channels eliminates most scam risk:
- StudentAid.gov is the only official federal student aid website. Bookmark it directly.
- Real servicers send correspondence through your StudentAid.gov inbox first.
- The Department of Education sends official letters via postal mail for major policy changes.
- Your servicer will never ask for your FSA password by email or phone.
- All federal student loan programs are free to apply for. No legitimate program charges a fee.
If you receive a suspicious email claiming to be from a student loan servicer, you can verify the sender domain using our guide on how to spot phishing emails. For emails that have already compromised your information, our guide on what to do after clicking a phishing link covers immediate response steps.
How to Verify Your Actual Student Loan Status
Instead of trusting any email, verify your loans directly:
- Log in to StudentAid.gov using your FSA ID (type the URL yourself, never click a link).
- Check the "My Aid" section for your current loans, servicer, and balance.
- Contact your servicer using the phone number listed on StudentAid.gov, not any number from an email.
- If you want to explore forgiveness programs, use the Department of Education's official Loan Simulator at StudentAid.gov/loan-simulator.
How to Report Student Loan Scams
If you have received a student loan phishing email:
- FTC: File a report at reportfraud.ftc.gov
- CFPB: Submit a complaint at consumerfinance.gov/complaint
- Department of Education OIG: Report at ed.gov/misused
- Anti-Phishing Working Group: Forward the email to reportphishing@apwg.org
- Your email provider: Use the built-in "Report phishing" feature
FAQ
Can any company legally help me with student loan forgiveness?
Yes, legitimate nonprofit credit counselors and legal aid organizations can help you navigate federal programs for free or at low cost. However, no company can legally charge you an upfront fee before providing services. If a company asks for payment before doing anything, it is violating federal law.
I already paid a company for student loan help. What do I do?
Contact your bank or credit card company immediately to dispute the charge. File complaints with the FTC and CFPB. Change your FSA ID password at StudentAid.gov. Check your loan account for unauthorized changes to your repayment plan or contact information.
Is the SAVE plan still available?
The status of income-driven repayment plans changes frequently due to ongoing litigation and policy decisions. Always check StudentAid.gov directly for the current status. Never rely on an email claiming a plan has been approved, reinstated, or expanded.
How do scammers know I have student loans?
Student loan status is not public information, but scammers do not need to know who has loans. They send millions of emails to broad demographic groups (ages 22 to 45, college-educated) knowing that a significant percentage will have federal loans. Data breaches and data broker lists also provide targeting data.
What is an FSA ID and why is it dangerous to share?
Your Federal Student Aid ID is a username and password that gives full access to your federal student aid account. With it, a scammer can view your loan details, change your repayment plan, update your contact information, and apply for programs in your name. Never share your FSA ID with anyone.
Think you received a student loan phishing email? Analyze it with ScamVerify's email checker to verify sender domains and detect fraud indicators.
