Fake University Acceptance / Enrollment Deposit Scam
Fraudsters send fake or spoofed acceptance letters demanding an urgent enrollment deposit to secure a place, targeting students and parents excited about a college offer.
Last reviewed: 5 July 2026
What this scam is
This scam exploits the excitement and time pressure around university admissions by sending a fake acceptance letter, or by impersonating a real institution's admissions office, and demanding an enrollment or seat-confirmation deposit paid urgently to a bank account or payment app controlled by the scammer.
It can take two forms. In one, a student who never actually applied, or who applied but was not accepted, receives a fabricated acceptance email claiming they have been admitted and must pay a deposit within days to 'hold their place'. In the other, more damaging form, a genuinely accepted student receives a spoofed email or call that appears to come from the real university's admissions or bursar's office, redirecting a legitimate deposit payment to a fraudulent account — often timed to intercept students right when they are expecting exactly this kind of communication.
International students are especially targeted, since they are less able to walk into a campus office to verify a letter in person, and are often relying on the acceptance to also process visa paperwork, adding urgency.
How it works
In the fabricated-acceptance version, the scam begins with an email that mimics a university's branding, congratulating the recipient on admission to a programme, sometimes one they never applied to. The message includes a short deadline — often 48 to 72 hours — to pay a 'confirmation' or 'seat deposit' by wire transfer, gift card, or payment app to guarantee the place. Victims who are especially eager for a specific school, or who applied broadly and lost track of where, are the most likely to fall for this version.
In the business-email-compromise version, scammers monitor or spoof real admissions or bursar communications, sometimes after a data breach or a compromised university email account. Just as a genuine deposit deadline approaches, the student receives an email that looks identical to prior official correspondence, but with updated 'new' bank details for the deposit, citing a supposed change in processing systems. The student, trusting the familiar thread, sends the deposit to the fraudulent account.
In both versions, once the transfer is made, the scammer disappears, the account is closed, and the student discovers — often only when contacting the university directly to confirm enrollment — that no payment was ever received and no place was ever secured or held.
Why this scam works
Being accepted into a desired university is an emotionally significant moment, and the excitement can override normal caution, especially for first-time applicants who do not yet know what a real acceptance and deposit process looks like. Tight deadlines discourage the extra step of picking up the phone to call the admissions office directly.
For the spoofed-communication version, the scam works because it arrives at exactly the moment the student is expecting a legitimate deposit request, using matching branding and referencing real details (programme name, term, sometimes even a genuine application ID), making it very difficult to distinguish from the real thing without independently verifying payment details.
A typical pattern
A student who applied to several universities receives an email congratulating them on acceptance to one they had not heard back from yet, with a 72-hour deadline to wire a deposit to secure their place. Excited, they transfer the funds. Weeks later, checking their applicant portal, they discover no acceptance was ever issued and the university has no record of the deposit or the email address that contacted them.
Common red flags
- An acceptance notification with a very short payment deadline
- A deposit request by wire transfer, gift card, or payment app rather than the university's standard portal
- An email announcing 'new' bank details for a deposit you were already expecting
- Acceptance to a programme you do not recall applying to
- Sender domain that is slightly different from the university's real domain
- Pressure to keep the offer or payment 'confidential' or act without contacting the school directly
- No corresponding notice in your official applicant portal
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Congratulations! You have been accepted to [programme]. Pay your [amount] deposit within 48 hours to confirm your place: [fake link]
Admissions Office Update: Our deposit account has changed. Please send your enrollment deposit to the new account details below.
Your seat is not guaranteed until payment is received. Wire [amount] today to avoid losing your place.
This is the Bursar's Office confirming your deposit deadline is tomorrow. Reply with your card details to pay by phone.
Common variations
- Fabricated acceptance to a programme never applied to
- Spoofed 'new bank details' email intercepting a genuine deposit deadline
- Phone impersonation of the bursar's office requesting card payment
- Fake letter by post mimicking official university stationery
- Compromised real university email account used to send fraudulent instructions
How to verify before you act
Never pay any university deposit based solely on an email or letter. Call the admissions office using a phone number found independently — from the university's official website, not from the email or letter itself — and confirm both that you have been accepted and the exact bank details or payment portal to use.
Check your applicant portal directly by logging into the university's own online system, where genuine acceptance decisions and deposit instructions are typically posted, rather than relying on email alone. If a deposit request cites a 'change in bank details' or 'new processing system', treat this as a strong signal to verify by phone before paying anything.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
Who is usually targeted
- International students awaiting visa-linked acceptances
- First-generation and first-time university applicants
- Students who applied to many schools and may be uncertain of status
- Parents handling deposit payments on a student's behalf
What to do immediately
- Do not pay any deposit until you verify acceptance directly through the university's official applicant portal
- Call the admissions or bursar's office using a number from the official university website, not the email
- If you already paid, contact your bank immediately to attempt a recall or dispute
- Report the email or letter to the real university so they can warn other applicants
- Report the incident to your national fraud reporting body
- Check whether your application account credentials may have been compromised and change your password
How to prevent it
- Always confirm acceptance status through the university's own applicant portal, not just email
- Call the admissions office directly using an independently sourced phone number before paying any deposit
- Be suspicious of any communication announcing changed bank details for a payment you expect
- Never pay a deposit by wire transfer, gift card, or payment app if the university's normal process uses a portal or cheque
- Keep a record of every school you applied to, so an unexpected acceptance is easy to flag
- Ask parents or guardians to independently verify large payments before sending them
Evidence to preserve
- The full email including headers, or the physical letter and envelope
- Screenshots of your applicant portal status at the time
- Payment confirmation or wire transfer details
- Any phone numbers or names used by the caller or sender
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
How can I tell a real acceptance letter from a fake one?
Always check your official applicant portal on the university's website. Genuine decisions and deposit instructions are posted there. An email alone, especially one demanding urgent payment, should never be treated as proof of acceptance.
The email came from what looks like the real university address — could it still be fake?
Yes. Scammers can spoof sender addresses or use a compromised real account. If a deposit request includes changed bank details or unusual urgency, verify by phone before paying, regardless of how authentic the sender address looks.
I already wired my deposit to a fraudulent account — can I get it back?
Contact your bank immediately; wire transfers can sometimes be recalled if caught within hours. File a report with your national fraud authority and notify the real university so they can alert other students.
Why do international students get targeted more?
International students often cannot easily visit campus in person to verify a letter, and their acceptance is frequently tied to time-sensitive visa paperwork, which scammers use to create urgency and discourage careful verification.