A text that says “Your Nelnet / MOHELA / Aidvantage account is locked—verify payment method in 24 hours or enter default” is a servicer-impersonation play. It is different from fake forgiveness and consolidation fee scams and from fake FAFSA / student-aid portal phishing. Here the crook pretends to be your assigned servicer (or the Department of Education) and tries to steal your FSA ID, bank login, or a redirected payment.
Landscape: Credit and debt scams. Real repayment map: Paying off student loans basics. Credential theft patterns: Phishing and account takeover.
Servicer scam vs forgiveness scam
| Pattern | What they sell | What they steal |
|---|---|---|
| Fake forgiveness / consolidation | “Pay $299–$999 and we wipe or restructure your loans” | Upfront fee + often your FSA ID |
| Fake servicer / account update | “Update banking,” “unlock your portal,” “new payment address” | Login, ACH routing, one-time codes, redirected payments |
Forgiveness cons advertise miracles. Servicer cons advertise urgency and continuity—your next autopay, a “system migration,” or a sudden delinquency threat.
Red flags on “servicer” contacts
| Tell | Why it matters |
|---|---|
| Link to a lookalike domain (nelnet-secure[.]com, mohela-aid[.]net, studentaid-login[.]io) | Real portals are StudentAid.gov and the servicer’s official site—bookmark them |
| Caller demands your full FSA ID password or a one-time code read aloud | Official staff do not need your password; codes are for you signing in |
| New ACH, wire, Zelle, Cash App, or gift-card “temporary payment address” | Servicers collect through named portals or published payment instructions—not personal P2P |
| “Your loans moved; ignore emails from your old servicer” | Transfers happen, but you confirm on StudentAid.gov, not a cold call |
| Threat of same-day wage garnishment for federal Direct loans without prior notices | Federal default and collections follow documented steps; panic is the product |
| Remote-desktop “support” to “fix your payment profile” | Classic takeover setup |
IRS / benefit impersonation often rides the same inbox week: Fake IRS and benefit scams.
How to verify a real servicer contact
- Open StudentAid.gov from a bookmark (not the email link). Confirm loan list and current servicer name.
- Find the servicer’s phone and payment URL on that official page or on a statement you already trust—Nelnet, MOHELA, Aidvantage, ECFSA (formerly EdFinancial), and others appear by assignment.
- Call using the number on the statement or StudentAid.gov, not Caller ID.
- Ask only for account status; never give a password, seed phrase, or gift-card code.
- If a transfer notice looks real, wait for matching mail and the StudentAid.gov update before changing autopay.
Worked example
Priya gets a WhatsApp message: “Aidvantage security: unusual login from Texas. Unlock here” plus a shortened link. She almost taps it because she really does have Aidvantage loans.
Instead she opens StudentAid.gov on Chrome from her bookmark, confirms Aidvantage is still the servicer, and logs in through the official button. No unusual login alert appears. She deletes the WhatsApp thread, reports it at ReportFraud.ftc.gov, and turns on a credit freeze because the message already recited the last four of her SSN from a breach list.
If Priya had entered her FSA ID on the fake page, the crook could change her email, siphon a refund, or enroll autopay to a mule account—damage that looks like “servicer error” for weeks.
If you already clicked or paid
- Change your FSA ID password on the real StudentAid.gov site; enable the strongest MFA available.
- Call your real servicer’s fraud line from the official site; ask them to flag the account and review payees.
- If you shared bank credentials, contact that bank (Chase, Bank of America, a credit union, etc.) and monitor ACH.
- Place freezes at Equifax, Experian, and TransUnion; review AnnualCreditReport.com for new accounts.
- Do not pay a second “recovery specialist” to undo the first scam.
Checklist
- Bookmark StudentAid.gov and your named servicer; ignore cold links.
- Treat “update payment method today” texts as phishing until proven on the official portal.
- Never read one-time codes to inbound callers.
- Confirm servicer transfers on StudentAid.gov before changing autopay.
- Refuse gift cards, crypto, Zelle, and personal wires for student-loan payments.
- Report impostor sites and calls to the FTC and Federal Student Aid feedback channels.
Educational only. Not legal, student-aid, or fraud-recovery advice. Servicer assignments and official domains change; confirm on StudentAid.gov and your statements.