August 26, 2026
As millions of Americans prepare for a new school year, cybercriminals are launching their own seasonal scam campaigns.
Researchers at Bitdefender Labs have identified multiple SMS and email campaigns targeting students, parents, teachers, and others preparing for the school year. From fake education grants and Pell Grants to free laptop offers, discounted AI subscriptions, and delivery notifications, scammers are seeking to take advantage of the approaching new school year.
The largest SMS campaigns we’ve observed promise recipients between $6,500 and nearly $8,000 in education grants. Nearly every message follows the same formula: you’ve supposedly been selected, the money is waiting, and you must act immediately before the opportunity disappears.
Some examples include:
“Rick, Your $7,395 edu grant is set to expire on Thursday. No payback. Get your funds now. [Redacted Phishing Link] STOP to end.”
“Patty, Your $7945.00 edu grant is expiring tonight. No payback. Get yours today before it expires 7/30. [Redacted Phishing Link] STOP to end.”
Bitdefender Labs telemetry shows these campaigns primarily target Florida, Texas, and Georgia, although similar messages have been delivered to recipients across many other US states.
The goal isn’t to award financial aid. Instead, victims are directed to phishing pages designed to collect personal information or persuade them to engage with fraudulent offers.
Another variation abuses the name of the US Federal Pell Grant program to make scam messages sound more credible.
One example reads:
“Denelle, your $6,850 Pell Grant is close to expiring. No repayment required. Confirm by Sunday before it closes. [Redacted Phishing Link] STOP to end.”
These messages again heavily targeted Texas, Georgia, and Florida, while similar scams were also observed elsewhere across the country.
The mention of a well-known government education program may encourage recipients to let their guard down, especially if they’re actively seeking financial aid before the semester begins.
Not every campaign pretends to be a government agency.
Some simply promise money for education without explaining where it comes from.
For example:
“Hi Tx, up to 7,395 is available for school and it’s yours to keep. Check now: [Redacted Phishing Link] Reply Stop to Quit.”
These messages were most commonly seen targeting California, Florida, and Georgia, although recipients in other states also reported receiving similar texts.
The vague wording is intentional. Rather than impersonating a specific organization, scammers simply tempt recipients with the promise of easy money.
Back-to-school shopping means many families are looking for affordable technology, making laptops another popular lure.
One campaign tells recipients:
“HURRY! This New Laptop Opportunity Won’t Last Long. Get One Delivered Right To You. Click Here: [Redacted Phishing Link] Text stop to end.”
Instead of receiving a free device, victims are directed to phishing websites or pages requesting personal information under the guise of verifying eligibility.
It’s not just SMS campaigns that are evolving.
Bitdefender’s antispam telemetry shows scammers increasingly exploiting the popularity of AI tools among students.
One campaign spotted by researcher Viorel Zavoiu impersonates Google and advertises what appears to be a discounted Google AI Premium subscription. The emails promote 18 months of premium access for a one-time payment, encouraging recipients to believe they can unlock premium AI services at a heavily discounted price.
The emails rely on urgency and the promise of long-term premium access to persuade recipients to click embedded links before the offer supposedly expires.
As students prepare for classes, interest in AI assistants for research, writing, note-taking, coding, and other schoolwork creates an ideal opportunity for scammers to disguise fraudulent offers as useful educational tools.
Not every email promoting AI tools is malicious. However, these themes are increasingly being used by scammers, spam operators, and affiliate marketers to attract clicks from students eager to prepare for the school year.
Back-to-school season also means millions of online purchases.
Families order laptops, backpacks, clothing, school supplies, textbooks and dorm essentials. Scammers know this all too well.
Bitdefender researchers also see seasonal spikes in fake delivery notifications and Amazon-themed scams that claim there’s a problem with an order or package.
These messages often urge recipients to:
In reality, the links typically lead to phishing websites designed to steal login credentials or payment information.
Back-to-school season creates the perfect environment for social engineering.
Parents are trying to reduce expenses. College students are searching for scholarships and grants. Adults returning to school may be looking for financial aid or discounts. At the same time, many people are buying new devices and experimenting with AI tools to prepare for classes.
Scammers simply insert themselves into those everyday activities.
By combining urgency, personalization, and promises of financial relief, they make fraudulent messages appear both timely and believable.
Whether a message arrives by SMS or email, watch for these warning signs:
Although the United States is currently experiencing the largest wave of back-to-school SMS scams in our telemetry, similar education-themed campaigns are appearing worldwide.
Bitdefender Labs has also observed:
In Malta: we’re also seeing a resurgence of the WhatsApp “Vote for My Child” scam previously documented by Bitdefender Labs. While the original campaign spread rapidly across Europe by asking victims to vote for a friend’s child in a dance competition, the current variants increasingly use scholarship and education-related themes, asking recipients to support a student competing for tuition assistance or an educational prize. Once victims click the link, they’re tricked into sharing their WhatsApp verification code, allowing attackers to hijack their account and continue spreading the scam through trusted contacts.
Example: “Hi! Could you please vote for Sonya? She’s the daughter of my close friends, and this is her only chance to receive a scholarship for tuition‑free education. Thank you [Phishing Link]”
While the names of the programs change from country to country, the tactics remain remarkably similar: exploit the cost of education, create urgency, promise financial assistance, and lure victims into handing over personal information.
Before clicking any education-related offer, take a few moments to verify it.
Disclaimer: This article is published for informational and educational purposes only. The information presented is based on technical research conducted by Bitdefender Labs and publicly available sources. Bitdefender does not make any legal determination regarding the activities described herein. The mention of any company, brand, domain, or individual does not constitute an accusation of illegal activity. The technical indicators and behavioral patterns described reflect observations made at the time of research and may change over time. Readers should exercise their own judgment and consult appropriate authorities or legal counsel if they believe they have been affected by any of the activities described. Domain names and URLs listed in this article are provided solely to help consumers and security professionals identify potentially harmful infrastructure. Bitdefender disclaims any liability for actions taken based on the information in this article.
tags
Alina is a history buff passionate about cybersecurity and anything sci-fi, advocating Bitdefender technologies and solutions. She spends most of her time between her two feline friends and traveling.

source