International Student Tuition Deposit Scam
Fraudsters impersonate universities or education agents to intercept large international tuition deposits from overseas students, leaving them without a university place or their money.
Last reviewed: 1 June 2026
What this scam is
International student tuition deposit scams target students who are applying to study abroad and who must transfer a large confirmation deposit — often several thousand pounds, dollars, or euros — to secure their place at a university. Fraudsters either compromise or impersonate university email communications, intercept legitimate payment instructions, and redirect the funds to accounts they control.
The harm is severe. A student who loses their tuition deposit may lose their university place if they cannot replace the funds in time. They may also have taken on debt or used family savings to make the payment. The discovery typically happens weeks or months after the transfer, when the university follows up about an outstanding deposit, by which point recovery through the banking system is much harder.
This is a form of business email compromise (BEC) applied to the education sector. Fraudsters monitor or impersonate institutional email domains, time their approach to coincide with known payment deadlines, and use the reference numbers and course details from genuine correspondence to make their fraudulent instructions appear authentic.
A related variant involves fake education agents who promise to manage the entire application and payment process on behalf of the student, collecting fees that are never forwarded to the institution and providing fabricated offer letters and visa support documents.
How it works
The scammer monitors email communications from a student's inbox — either through phishing that has compromised the student's account, or by closely mimicking the university's email domain — and intercepts the moment when a genuine payment instruction is expected.
At the critical point — after an offer has been accepted and a payment deadline is approaching — the fraudster sends an email appearing to come from the university's admissions or finance department, providing updated bank account details for the deposit. The email references the student's name, course, and offer reference number, which have been taken from genuine correspondence.
The student transfers the deposit to what appears to be the university's account. They may receive a confirmation from the fraudster. Weeks later, the university contacts them to say the deposit has not been received and the place is at risk. The student discovers the bank account in the payment instructions was not the university's.
Agent fraud operates differently: an individual claiming to be an accredited education consultant handles applications on behalf of a family, collecting tuition fees and accommodation deposits. Fabricated offer letters and visa support documents are provided. The family only discovers the fraud when the student attempts to begin their course.
Why this scam works
The BEC component of this scam is effective because email from an institution's exact domain looks identical to a real communication. Students who have been receiving genuine correspondence from a university for weeks or months will have no baseline awareness that a single fraudulent email has entered the chain. The timing is precise: the email arrives at exactly the moment a payment is due, when the student is mentally prepared to act.
The high emotional stakes — the beginning of an academic career, often representing enormous investment from the student's family — create urgency that compresses the verification process that would normally catch the fraud.
Common red flags
- Email providing changed bank account details for a deposit payment
- Payment instructions arriving by email without confirmation in the student portal
- Agent asking to receive tuition fees on behalf of the institution
- University email domain slightly different from the official domain
- Pressure to pay before an imminent deadline following a change in details
- Offer letter that cannot be verified by calling the institution directly
- Request to transfer to a personal bank account rather than an institutional one
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Important: our bank details have changed for this admissions cycle. Please use the following account for your tuition deposit. [account details]
Your offer will lapse unless your deposit is received by [date]. Please use our updated payment details to avoid losing your place. [fake details]
As your agent, I will forward your deposit to the university once received. Please transfer [amount] to confirm your enrolment. [account details]
Your registration deposit for [course] is now due. Transfer [amount] via [fake link] to secure your place before the deadline.
Common variations
- BEC tuition redirect — compromised or spoofed institutional email redirecting deposit
- Agent fee diversion — agent collects deposit and never forwards it to the institution
- Fake university portal — fraudulent payment page mimicking the institution's official site
- Accommodation deposit fraud — targeting international students seeking student housing
How to verify before you act
Verify any payment instructions by calling the university's official admissions or finance office using a number found independently on their official website — never a number from the email containing the payment details.
For large international payments, use your bank's confirmation of payee service to check that the account holder name matches the university. A mismatch is a reliable fraud indicator.
Verify any agent through your country's national education agent accreditation scheme. In Australia, agents must be registered with QEAC or equivalent bodies. In the UK, the British Council's Education Agent Approval scheme provides verification. Confirm with the institution directly that the agent is authorised to act on its behalf.
Before transferring any large sum, access the university's payment portal directly through their official website — type the address yourself, do not follow links in emails.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
Who is usually targeted
- International students transferring deposits from abroad
- Students making their first tuition payment to an overseas institution
- Students using education agents to manage their application
- Families in countries where agent use is culturally common
What to do immediately
- Contact your bank immediately to attempt a payment recall — timing is critical
- Call the university's official admissions office using a number from their website to report the fraud
- Report to your national fraud authority and bank fraud team
- Alert the university so they can warn other students who may have received the same instructions
- If an agent was involved, report to the relevant accreditation body
- Preserve all correspondence and payment records as evidence
How to prevent it
- Verify payment details by calling the institution directly using a number from their official website
- Access the institution's payment portal by typing the address yourself, not via email links
- Use your bank's confirmation of payee service for large international transfers
- Verify education agents through official national accreditation schemes
- Confirm receipt of any large payment with the institution before considering it complete
- Enable two-factor authentication on your email account to reduce phishing risk
Evidence to preserve
- The fraudulent email in full including sender headers
- Bank transfer confirmation and reference number
- Any communications with the agent
- Genuine correspondence from the university for comparison
- Screenshots of any fake websites
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
How can I tell a fraudulent email from a real one?
You cannot rely on the email alone. Always verify payment instructions by calling the institution's finance or admissions office using a number found on their official website — independently, not from the email. Even if the email address looks correct, call to confirm before transferring.
My deposit is gone and the university deadline is tomorrow — what can I do?
Contact your bank immediately about an emergency recall and explain the timeline. Call the university to explain the situation — most institutions will offer a brief extension in genuine fraud cases while they investigate. Report to your national fraud authority in parallel.