A text or ad that says “Your FAFSA is incomplete—log in here to unlock aid” or “Pay $79 and we will submit StudentAid.gov for you” is usually a student-aid portal scam. Crooks clone Federal Student Aid branding, harvest FSA IDs, or charge fees for a free federal application. This is adjacent to fake servicer unlock phishing and fake forgiveness fee pitches, but the target is the aid application / StudentAid.gov login, not an existing repayment account.
Landscape: Credit and debt scams. Credential theft patterns: Phishing and account takeover.
Portal phishing vs “paid FAFSA helper”
| Pattern | What they sell | What they steal |
|---|---|---|
| Lookalike StudentAid / FAFSA login | “Verify identity,” “release your award,” “fix a hold” | FSA ID, SSN, tax data, bank login |
| Paid “FAFSA expedite” service | $50–$400+ to “submit,” “priority process,” or “guarantee more Pell” | Upfront fee; often your credentials too |
| School portal clone | “Accept your award package today” | Direct deposit change + login |
Filing the Free Application for Federal Student Aid on StudentAid.gov (or the official FAFSA form linked from that site) does not require a private company’s processing fee. Schools and counselors may help for free; paid preparers who charge for typing your form are a consumer choice—not a federal requirement.
Red flags on “aid portal” contacts
| Tell | Why it matters |
|---|---|
| Domain like fafsa-aid[.]com, studentaid-secure[.]net, ed-gov-login[.]io | Bookmark StudentAid.gov; hover before you type |
| Fee payable by gift card, crypto, Zelle, or Cash App | Federal aid applications are not gift-card checkouts (Gift cards and prepaid debit risks) |
| Caller needs your full FSA ID password or one-time code read aloud | Official help desks do not need your password |
| “Guaranteed maximum Pell / SEOG if you pay today” | Award formulas are not unlocked by a stranger’s invoice |
| Remote-desktop “we’ll finish FAFSA on your laptop” | Classic takeover setup |
| Pressure timed to May 1 deposits or school priority deadlines | Urgency is the product |
How to file or check aid safely
- Open StudentAid.gov from a bookmark or typed URL—not an email, SMS, or Instagram ad.
- Create or use your own FSA ID; enable the strongest MFA available.
- If a school awards portal looks wrong, navigate from the school’s official .edu site, not a paid search ad alone.
- For repayment after loans disburse, confirm servicer on StudentAid.gov—then use that servicer’s official site (Paying off student loans basics).
- Never pay to “release,” “unfreeze,” or “priority-submit” a federal FAFSA.
Worked example
Marcus gets an Instagram DM: “Pell Grant hold on your 2026–27 FAFSA—pay $129 via Cash App to student.aid.help and we unlock StudentAid.gov.” The profile uses Education Department blues and a fake seal.
Marcus closes the app, opens StudentAid.gov on Chrome from his bookmark, and sees his FAFSA already submitted with no “hold fee.” He reports the account, does not pay, and tells his roommate the same script. If he had shared his FSA ID on a lookalike page, the thief could change his email, redirect a refund, or open other credit in his name—damage that looks like “aid office error” for weeks.
If you already clicked or paid
- Change your FSA ID password on the real StudentAid.gov site; review email and phone on file.
- Contact your school’s financial aid office with a phone number from the official .edu directory—not the scammer’s callback.
- If you shared bank credentials, call that bank (Chase, Bank of America, a credit union, etc.) and monitor ACH.
- Place freezes at Equifax, Experian, and TransUnion; review AnnualCreditReport.com.
- Report at ReportFraud.ftc.gov and Federal Student Aid feedback channels. Do not hire a second “recovery” firm that demands more fees.
Checklist
- Bookmark StudentAid.gov; ignore cold FAFSA / Pell links.
- Treat any fee to “submit” or “unlock” federal aid as a scam until proven otherwise.
- Never read one-time codes to inbound “aid officers.”
- Verify school award portals from the official .edu site.
- Refuse gift cards, crypto, and personal P2P for aid filing.
- Report lookalike portals to the FTC and your school aid office.
Educational only. Not student-aid, legal, or fraud-recovery advice. Official domains and FAFSA cycles change; confirm on StudentAid.gov and your school’s published aid pages.