Fee payment scams target private school parents

Criminals impersonate school bursars and send fake emails instructing parents to transfer tuition fees to alternative bank accounts.

According to The Guardian, new research shows that some families have lost up to £10,000 after being deceived by these scams. A survey conducted by education software company Iris Education found that all 100 fee-paying independent schools included in the study had experienced at least one attempted or successful cyber-attack in recent years.

The findings indicate that such attacks occur, on average, once a year, with the primary aim of diverting tuition payments to fraudsters’ accounts. The average amount lost was £3,200, although in some cases losses were more than three times higher.

Simon Freeman, managing director of Iris Education, said parents of foreign students are particularly vulnerable, as English is often not their first language and warning signs in scam emails may be overlooked.

Fraudsters commonly lure parents by offering discounts of up to 25% for early payment and provide falsified bank details that closely resemble official school instructions. These attacks are usually timed to coincide with fee payment periods, most often in March, September and December.

All school bursars surveyed reported being targeted, with the average school facing five attacks over a five-year period. Freeman noted that criminals closely monitor school communications, exploit weaknesses across multiple channels, and replicate official payment instructions with remarkable accuracy.

The scam typically begins when criminals gain access to parents’ email addresses, often through hacking third-party companies working with schools. In one case, a company managing visas for international students was targeted and sensitive data was stolen.

Experts advise parents to remain alert to unusual or urgent payment requests, especially those received at unexpected times. If any doubts arise, parents are urged to contact schools only through official and previously verified communication channels.

Anyone who believes they have fallen victim to fraud should immediately contact their bank and then report the incident to Report Fraud, the UK’s central hub for reporting fraud and online crime.