Phishing scams often arrive as emails or text messages that seem urgent or too good to be true. Before clicking any links or opening attachments, take a moment to think it through. If the message feels rushed, alarming or suspicious, it’s safer to pause and investigate further.

Always double-check the sender’s information. All communications from Step Up For Students are sent from a @sufs.org email address. Scammers often use email addresses that look almost right — like swapping a letter or adding an extra character — to trick you into believing the message is legitimate.

And just remember, Step Up For Students will never ask for copies of your debit or credit card for reimbursement processing or via MyScholarShop. If you receive any requests for this information, please forward them to [email protected] or call (877) 735-7837.

Fraudsters may also try to reach you by phone, disguising (or "spoofing") their number to make it look official. They might claim to be from Step Up For Students and may even know a few personal facts to sound convincing. Often, they create a sense of urgency—mentioning sweepstakes wins, overdue accounts or other high-pressure tactics.

When speaking with a Step Up representative, please note that we will ask a few verification questions to confirm we are speaking with the parent or guardian listed on the account. This is solely to protect your privacy and ensure the security of your information.

If you receive a call from us and have a concern or question, you may end the call and call us back directly at (877) 735-7837 to speak with a team member. You may also contact us immediately at [email protected] if you receive any suspicious requests.

Phishing attempts on social media are increasingly common, with scammers impersonating trusted organizations to trick users into sharing personal information or clicking malicious links. Step Up For Students will never initiate direct contact through social media to request sensitive information. However, if you tag Step Up For Students in a post, our team may reach out to offer support. In those cases, we’ll ask to continue the conversation through direct message. Always verify accounts and be cautious of urgent or suspicious messages—even if they appear to come from a familiar source.

If you’re contacted and something feels off, don’t hesitate to reach out to us directly. Call (877) 735-7837 to speak with a trusted team member, or email us at [email protected]—we’re here to help.

Scammers often pretend to be trusted businesses and use text messages to trick you into sharing sensitive information or clicking on fake websites.

Make sure your devices stay protected by keeping your software and apps up to date. These updates often include important security patches that help block new threats.

If you ever receive a suspicious message, report it — even if you’re not completely sure it’s a scam. Step Up For Students will never text you asking for personal details. If something feels off, trust your instincts and call us directly at (877) 735-7837 or email us at [email protected].

Phishing attempts often include links that lead to fake websites or attachments carrying harmful software. Hover over links before clicking — if the address looks odd or unfamiliar, don’t engage. Also, inspect the sender’s email carefully. Even small changes in the address can signal a scam. When in doubt, don’t click.

Scammers use panic to push you into quick decisions. Be skeptical of messages that claim your account will be shut down, you owe money, or you're in trouble with the law unless you act immediately. These scare tactics are designed to bypass your better judgment.

Typos, awkward phrasing, and inconsistent formatting can be red flags. Professional organizations take care with their communication — sloppy emails are often a sign that something isn’t right. Pause, reread, and verify.

If a message asks for passwords, Social Security numbers, or banking info — stop. No legitimate company will request this through email or text. Report suspicious messages to the appropriate source, and never share personal information unless you’re absolutely sure it’s safe.