Foreign students in UK Private Schools Under Siege from Cyber Scammers
Parents of international students attending private schools in the UK are being targeted by sophisticated cyber scammers who aim to intercept their fee payments. The scams often begin with a hack that compromises the email addresses of parents, allowing scammers to send fake emails purporting to come from school bursars.
These phishing attempts typically appear at specific times of year when term fees are due, such as in March and September. Scammers may offer discounts of up to 25% to lure victims into paying early, using tactics commonly employed across various types of scams.
The scam usually involves emails that ask parents to transfer money to a different account than the one they normally use for payments. This ploy takes advantage of schools' multiple communication channels, including email, WhatsApp groups, and telephone calls, as well as their varied methods of payment, such as wire transfers, cheques, cash, debit cards, and credit cards.
Victims can lose significant amounts, with an average loss of Β£3,200. However, some families have been duped into sending money worth over three times this amount.
Simon Freeman, managing director at Iris Education, a software company that conducted the research, attributes the vulnerability to schools' reliance on traditional processes. "Many schools are doing everything right with established procedures, but these very processes have become the vulnerabilities that criminals are trained to exploit," he notes.
The stakes can be particularly high for international students and their families who may not speak English fluently, making them more susceptible to these scams. It is estimated that all 100 schools surveyed had been targeted by at least one cyber-attack per year, with some experiencing multiple attempts over the past five years.
To avoid falling prey to these scams, parents are urged to remain vigilant for unusual messages or those that create a sense of urgency around payment deadlines. They should also verify requests through official channels rather than responding to suspicious emails or phone calls.
Parents of international students attending private schools in the UK are being targeted by sophisticated cyber scammers who aim to intercept their fee payments. The scams often begin with a hack that compromises the email addresses of parents, allowing scammers to send fake emails purporting to come from school bursars.
These phishing attempts typically appear at specific times of year when term fees are due, such as in March and September. Scammers may offer discounts of up to 25% to lure victims into paying early, using tactics commonly employed across various types of scams.
The scam usually involves emails that ask parents to transfer money to a different account than the one they normally use for payments. This ploy takes advantage of schools' multiple communication channels, including email, WhatsApp groups, and telephone calls, as well as their varied methods of payment, such as wire transfers, cheques, cash, debit cards, and credit cards.
Victims can lose significant amounts, with an average loss of Β£3,200. However, some families have been duped into sending money worth over three times this amount.
Simon Freeman, managing director at Iris Education, a software company that conducted the research, attributes the vulnerability to schools' reliance on traditional processes. "Many schools are doing everything right with established procedures, but these very processes have become the vulnerabilities that criminals are trained to exploit," he notes.
The stakes can be particularly high for international students and their families who may not speak English fluently, making them more susceptible to these scams. It is estimated that all 100 schools surveyed had been targeted by at least one cyber-attack per year, with some experiencing multiple attempts over the past five years.
To avoid falling prey to these scams, parents are urged to remain vigilant for unusual messages or those that create a sense of urgency around payment deadlines. They should also verify requests through official channels rather than responding to suspicious emails or phone calls.