If you’re a school employee and get a lot of work emails, it’s easy to be distracted when you’re in scroll mode. Scammers count on that. They send messages that look urgent, familiar or helpful, so you’ll click before thinking.
The good news is you don’t have to be a cybersecurity expert to protect yourself. A few simple habits can help you recognize the most common scams and how to respond.
Phishing Is the Top Scam
Phishing is an imposter scam where someone pretends to be a trusted person or company to trick you into giving away sensitive information like passwords, credit card numbers or Social Security numbers. Because schools rely on email, shared systems, online forms and quick communications, scammers can drift in and out unnoticed. They try to gain access to payroll information, student records, purchasing systems or classroom accounts.
Email Is Their Key Entry Point
Federal Trade Commission data shows that imposter scams were the most reported type of fraud in 2025, with $3.5 billion in losses. And in 2024, email was the most common way workers said scammers contacted them.
The Top Five School-Year Scams
For school employees who rely on email throughout the day, it’s especially important to pause, verify and use trusted channels before responding.
1. The Fake IT or Password Reset Email
A message says your school account is about to expire, your email storage is full or your password needs to be updated right away. The link takes you to a page that looks like your district login screen, but it’s really designed to steal your username and password.
How to avoid it: Don’t click links in unexpected password or account messages. Go directly to your district’s official site or contact your IT department using a phone number or email address you already know is real.
2. The Payroll or Direct Deposit Change
A scammer may pretend to be from HR, payroll or benefits and ask you to “verify” your direct deposit information. In some versions, the scammer pretends to be an employee and contacts payroll to redirect a paycheck to a different account.
How to avoid it: Treat any payroll change as something worth confirming. Use your district’s official process and don’t provide banking information through an email link, text message or unexpected phone call.
3. The Administrator or Coworker Impersonation
You get an email or text that appears to come from a principal, superintendent, department lead or coworker. The request may sound simple: buy gift cards, send a phone number, share a file, approve a payment or reply quickly because they’re “in a meeting.”
How to avoid it: Slow down when a message asks you to act quickly, keep the request private or uses an unusual payment method. Confirm through another channel before you respond, especially if the request involves money, account access or personal information.
4. The Fake Vendor, Grant or Educator Discount Scam
Scammers know schools often hear from vendors, supply companies, professional development providers and organizations offering grants or educator discounts. A fake offer may promise free supplies, a special school deal or grant money, then ask for payment information, personal details or a login.
How to avoid it: Research the organization before you apply, buy or share information. Look for reviews, confirm the web address and be careful with offers that require an upfront fee or ask for more personal information than seems necessary.
5. The Fake Government or Law Enforcement Message
A caller, email or text claims to be from a government agency, law enforcement office, court or tax authority. They may say you owe money, your identity was stolen or you must act immediately to avoid a penalty. The goal is to pressure you into sending money or sharing sensitive information.
How to avoid it: Don’t rely on caller ID, links or callback numbers provided in the message. If you need to verify something, use an official website or a trusted phone number.
Quick Gut Checks
Pause before you click. Scammers often use urgency to get around your better judgment. If something feels rushed, unexpected or off, take a moment before responding.
Verify requests another way. If a message appears to come from IT, HR, a vendor or a leader at your school, confirm using a known contact method instead of replying directly.
Watch how they ask you to pay. Requests for gift cards, wire transfers, cryptocurrency, payment apps or other payment methods are common scam signs.
Use strong account protection. Multifactor authentication, strong passwords and software updates can make it harder for scammers to access your accounts.
Report it early. If you clicked a link, shared information or sent money, report it right away to your district, financial institution and the appropriate fraud reporting agency. Acting quickly can help limit the damage.
A Little Awareness Goes a Long Way
School employees are used to helping others, solving problems and keeping things moving. Scammers try to take advantage of that helpful instinct, but a pause can make all the difference. When you know the signs, check the source and use trusted channels, you’re not being difficult. You’re protecting your paycheck, your personal information and the school community you support every day.