Student Loan QR Code Scam: What It Is and What to Do

The Department of Education does not send loan QR codes

This is the most important thing to know: the U.S. Department of Education and its official loan servicers — MOHELA, Nelnet, Aidvantage, and others — do not contact borrowers via unsolicited QR codes. They do not send QR codes in mailers about forgiveness programs, in texts about your balance, or in social media ads prompting you to "apply now."

Legitimate communications about your federal student loans will direct you to studentaid.gov or your servicer's official site — addresses you should type in yourself. Any QR code that claims to offer loan forgiveness, income-driven repayment enrollment, or refinancing is a scam, regardless of how official it looks.

The two main variants of the scam

Attackers run student loan QR code fraud through two well-established channels.

The federal forgiveness variant surges during periods of news coverage about loan relief programs. Scammers send mailers, texts, or robocalls claiming that the recipient qualifies for forgiveness under the SAVE plan, PSLF, or a new executive order. The message includes a QR code to "complete your application before the deadline." The code leads to a phishing page that mimics the studentaid.gov login portal and captures your FSA ID username and password — the credentials that control your entire federal student aid account. Some variants also collect your Social Security number and bank account information under the pretense of setting up a refund.

The private refinancing variant arrives via email or social media ads and impersonates a legitimate private lender or a fake company with a name that sounds official. The pitch is a dramatically lower interest rate — "refinance your $40,000 balance at 2.9% — scan to see your rate in 30 seconds." The QR code leads to a fake loan application that collects your SSN, date of birth, employment details, and bank account information for what it claims is a credit check and direct-deposit setup. There is no loan. The attacker now has everything needed for identity theft or unauthorized bank transfers.

Both variants exploit the financial pressure that student borrowers are under — and the genuine complexity of the federal loan system, which makes a convincing-looking offer feel plausible. This is the same playbook used in IRS QR code scams and Social Security QR code scams: impersonate a trusted government institution, create urgency, and direct victims to a QR code that bypasses spam filters and lands on a convincing fake page.

What to do if you submitted information

Your response depends on what information you provided.

If you only scanned and didn't enter anything: Your risk is low. Close the page, do not return to it, and report it to the FTC.

If you entered your FSA ID credentials, SSN, or bank information, act immediately:

1. Change your FSA ID password immediately. Go directly to studentaid.gov, log in, change your password, and enable two-factor authentication. Check that your bank account, address, and repayment plan on file have not been changed.
2. Place a fraud alert or credit freeze. If you entered your SSN, contact Equifax, Experian, or TransUnion — one call triggers a fraud alert at all three. A credit freeze prevents new accounts from being opened in your name.
3. Contact your bank. If you provided bank account or routing numbers, notify your bank so they can monitor for unauthorized withdrawals or ACH transfers. Ask about closing and reopening the account if necessary.
4. Report to the FTC and Federal Student Aid. File a report at reportfraud.ftc.gov. For FSA-specific fraud, use the feedback form at StudentAid.gov/feedback or call 1-800-433-3243.
5. Dispute any unauthorized charges. If you paid an "application fee" or "processing fee," contact your card issuer immediately to dispute the charge.

How to protect yourself going forward

The key rule: any unsolicited QR code promising student loan relief is a scam. Here is how to protect yourself more broadly:

• Go directly to studentaid.gov. For anything related to your federal loans — forgiveness programs, repayment plan changes, servicer updates — always navigate to studentaid.gov directly. Never follow a QR code or link to reach it.
• Know that loan forgiveness is always free. Legitimate federal forgiveness programs, income-driven repayment enrollment, and PSLF applications are free. Any service that charges a fee to apply is either a scam or a debt-relief company that will charge you for something you could do yourself.
• Scan QR codes with QRsafer before opening them. QRsafer checks the destination URL against threat intelligence databases and shows you whether the page is Safe, Risky, or Dangerous before your browser loads anything. A fake studentaid.gov login page will not pass that check.

Frequently asked questions