What to Do If a QR Code Asked for Your FAFSA Login

If you did not enter your login

1. Close the QR page and do not submit your account email, username, password, recovery code, or one-time code.
2. Open the official student aid or school financial aid portal from a saved app, bookmark, or independently found address.
3. Compare the domain, account context, school message, requested action, and deadline.
4. Report the QR code to the school financial aid office, campus IT, event organizer, or official support path when the context was unexpected.

For common FAFSA impersonation patterns, read FAFSA QR Code Scam.

If you entered credentials

• Change the password from the official student aid account or school portal, not from the QR page.
• Review recent activity, profile details, recovery methods, and connected devices if the account exposes those controls.
• Sign out other sessions or use the official support path if you cannot find that control.
• If you entered a one-time code, report that detail because it may have approved a sign-in or account change.
• Save the QR code location, URL, screenshots, messages, form fields, and confirmation pages you saw.

General student account steps appear in What to Do If a QR Code Asked for Your Student Login.

FAFSA-login QR red flags

• The code appears on an unofficial flyer, sticker, text, email, social post, or copied event sign.
• The domain, page owner, school name, account context, or requested action does not match the official route.
• The page asks for a password and one-time code together without a clear login you started yourself.
• The form adds payment, bank, document, or identity requests unrelated to the account task.

If a code was requested, read What to Do If a QR Code Asked for a One-Time Code.

Frequently asked questions