Tens of thousands of university students are being targeted by sophisticated scam operations aiming to intercept their maintenance loan payments, with criminals attempting to siphon off a portion of the £2.6 billion disbursed this month.
The Students Loans Company (SLC), the government body responsible for administering student finance, has issued a fresh warning as a new academic year begins and the first instalments of student loans are paid into accounts across England and Wales.
Criminals are employing various phishing techniques, including text messages, emails, and phone calls, to trick students into divulging their personal banking details. The scams are often timed to coincide with the scheduled payment dates in September, January, and April, creating a sense of urgency and anxiety among students.
A common scenario involves a student receiving a text message, appearing to be from the SLC, stating that their bank details have been altered. The message might read: “Our records indicate that your bank details on your student finance account were changed on Friday 16th. If you did not do this please contact us immediately.”
Clicking on the embedded web link directs students to a convincing, but fraudulent, clone of the official SLC website. Believing they are accessing their legitimate account, students are prompted to log in and re-enter their bank details to verify or confirm information. Once submitted, the screen often displays a reassuring message such as: “Thanks for confirming.”
However, by this point, the students have inadvertently supplied their sensitive financial information directly to the scammers. Alan Balanowski, the risk director at SLC, explained the urgency with which these operations are conducted.
“It’s a race against time because the criminals then use those details to log into our genuine site to change the bank account on the genuine student account to divert the maintenance loan payment before we spot it,” Mr Balanowski stated.
This rapid exploitation of stolen credentials allows fraudsters to quickly redirect student loan payments into their own accounts. In the last academic year, figures from the SLC show that £519,000 was lost to these scams, affecting 168 students. While more than 1,100 people had their details compromised, the SLC was able to intervene and prevent financial loss in the majority of cases.
The scammers exploit the knowledge that billions of pounds are being processed, deliberately timing their attacks to coincide with payment dates. This creates pressure on students, particularly those anxious about receiving their much-needed funds, to act impulsively without verifying the authenticity of the communication.
Messages may also claim that a payment is at risk unless bank details are immediately updated, or that an account will be closed if a student fails to act swiftly by logging into a provided link.
The SLC has reiterated crucial advice for students to protect themselves against these fraudulent attempts:
The SLC will never ask you to confirm personal or financial information by email, text message, or via social media.
Students should avoid clicking on any links provided in suspicious messages. Instead, they should log in to their student finance account directly through the official Gov.uk website.
Be aware of the payment schedule: September, January, and April are the primary months for student loan instalments in England and Wales. Students from Northern Ireland and Scotland receive their loan instalments monthly.
Do not publicise details of your payment dates on social media, as this information can be used by scammers to tailor their attacks.
The SLC does not offer services through WhatsApp and will never initiate contact on social media platforms. Any such contact should be treated with immediate suspicion.
Students who receive suspicious emails are encouraged to forward them to [email protected]. Scam text messages can be forwarded to 7726, a free service that helps mobile network providers investigate and block malicious numbers.
If a student suspects their account has been compromised, they should change their password immediately and contact the SLC directly. The SLC has confirmed that victims of fraud should be able to receive a replacement payment, ensuring they do not suffer financial loss as a result of these scams.
