Phish: Tuition scam

Published: September 3, 2025

This phishing attempt pretends to be from the University of Toronto, warning students that tuition fees are overdue and access to academic services will be restricted. It urges students to send an Interac e-transfer to a suspicious account, using urgency, fraudulent authority and misleading details to pressure the recipient into paying quickly.

Email details

Subject:

Final Reminder: Tuition Deposit Due Today or Academic Access Will Be Restricted

Dear Student,

We are writing to remind you that our records indicate your Fall 2025 tuition fees remain unpaid. As per the University of Toronto’s Financial Aid & Registration Policy, an initial deposit of $2,000-$5,000 is required by today, August 31, 2025, in order to secure your course registration and maintain uninterrupted access to academic services.

To complete your payment, please send an Interac e-Transfer to the University’s BACPURSE account using the following details:

Email: kellyvander9@outlook.com
Message/Memo: Please include your student
number

This initial deposit is mandatory, even if you have applied for OSAP or are awaiting external funding. OSAP disbursements are typically processed after the term begins and therefore do not exempt students from the upfront deposit requirement.

Failure to submit the initial deposit today may result in:

Removal from registered courses
Holds on academic records (transcripts, graduation eligibility)
Loss of access to academic platforms and online systems
Potential administrative withdrawal

To help us update your file, please reply to this email today to:

Confirm that your payment has been submitted (and attach the Interac e-Transfer confirmation email)
Notify us of any issues or delays
Request financial assistance, if needed

We are committed to supporting you and ensuring your academic progress is not interrupted.

NB: Before proceeding with the initial deposit, please send me a message to reconfirm the official University BACPRDSE Interac e-Transfer account email address. This is to ensure the accuracy of the payment details before the transfer is completed.

Sincerely,
Chun Li
Office of the Bursar
Financial Aid & Awards
University of Toronto

University of Toronto

Phishing cues

Requests for sensitive information

The email asks for personal information and student number, a common tactic used in phishing emails. It also instructs the recipient to send an Interac e-Transfer confirmation email, which is another attempt to collect sensitive information.
Poses as a trusted or legitimate source

The sender poses as University of Toronto staff to influence the recipient into acting.
Sense of urgency

The email clearly states that it’s urgent and mandatory, warning the reader that they may lose course registration and academic records. This sense of urgency encourages the reader to act under pressure without thinking.
Unprofessional design or formatting

The email lacks typical professional formatting including a personalized greeting, legitimate signature and contact information.
Incorrect or inconsistent details

The email mentions that the university accepts tuition through Interac e-Transfer to a BACPURSE account, which raises questions about its authenticity.
Grammatical or spelling inconsistencies

The email later refers to the BACPRDSE Interac e-transfer account, showing inconsistency in spelling that contrasts with the professional accuracy expected in official university communications.
Logo or branding

The email imitates the University of Toronto logo and email template to evoke trust from the reader.
Suspicious sender address

The email directs payment to an Outlook address, which is not consistent with official University of Toronto communication channels.

Report phishing

If you receive a suspicious email, do not open attachments or click on links. Report phishing attempts to security.response@utoronto.ca.

Phish Bowl

Phish Bowl

Phish Bowl