UCL has warned students about scam emails linked to fee payments and account suspension claims. Here is a practical guide to spotting them and acting safely.
What happened?
UCL’s Information Services Division published a warning on 10 May 2026, updated on Wednesday 13 May at 9:30, saying it was aware of emails circulating that claimed some students’ accounts would be suspended, as well as other messages requesting fee payments. UCL stated that these emails were not legitimate and told students not to make payments or reply to them. (ucl.ac.uk)
The key point is simple: UCL says the only route for students to make a payment to UCL is through its payment partner, Flywire. UCL’s tuition fee guidance also says that self-financed fees must be paid online using Flywire’s payment portal, and that UCL has no other method for self-financed fee payments. (ucl.ac.uk)
UCL’s public warning does not state how many students received the emails, whether anyone paid money, or whether any UCL accounts were compromised. Those details should be treated as unknown unless UCL provides a further update.
Why this matters
Fee-payment scams can be financially serious. Tuition fees are large payments, and a convincing fake email can pressure a student into paying the wrong account, sharing login details, or opening a harmful attachment.
Students can be particularly exposed because they may be dealing with new bank accounts, loans, international payments and enrolment processes. UCL has previously warned that students are at heightened risk of scams during these periods, and that financial scams are becoming more sophisticated and targeted. (ucl.ac.uk)
This is also part of a wider UK trend. The National Cyber Security Centre says phishing is used by criminals to trick people through scam emails, texts or calls, often to steal bank details or personal information. As of April 2026, the NCSC said it had received more than 54.5 million reported scams, resulting in 248,000 scams being removed across 440,000 URLs. (ncsc.gov.uk)
Who may be affected?
The immediate warning is for UCL students who received emails about account suspension or fee payments. It may also be relevant to applicants, parents, sponsors, international students and anyone helping a student pay fees.
Be especially careful if you are:
- a new or returning UCL student arranging tuition fee payment;
- an international student making a cross-border payment;
- a parent, guardian or sponsor asked to pay quickly;
- using a personal email address as well as a UCL email account;
- under pressure because of enrolment, exams, visa, accommodation or deadline worries.
How to spot a fake account-suspension email
A scam email may look polished and may copy university-style wording. Do not rely on logos, formatting or signatures alone. UCL’s own phishing guidance says headers and signatures can be forged, and that “To” and “From” addresses can also be falsified. (ucl.ac.uk)
Common warning signs include:
- Urgency or fear: wording such as “your account will be suspended”, “final warning”, “act immediately” or “avoid termination”. UCL specifically lists urgency and fear as signs used in phishing emails. (ucl.ac.uk)
- Requests for payment outside Flywire: UCL says fee payments should be made through Flywire, not through an alternative link, bank account or agent. (ucl.ac.uk)
- A non-UCL sender address: UCL says it will never contact students about fees through a non-UCL email address, and that UCL addresses end in @ucl.ac.uk. (ucl.ac.uk)
- Links that do not go where they appear to go: UCL advises checking whether links are genuinely in the UCL domain by hovering over them before clicking. (ucl.ac.uk)
- Requests for your password or username: UCL says no legitimate email will ask you to respond with your username and/or password. (ucl.ac.uk)
- Unexpected attachments: UCL warns that phishing emails may include attachments that can compromise your computer. (ucl.ac.uk)
- Poor spelling, grammar or generic greetings: the Student Loans Company’s UK scam guidance says poor quality communication and generic openings such as “Dear Student” can be warning signs. (gov.uk)
What to do now if you received one
- Do not pay. UCL has told students not to make payments in response to these scam emails. (ucl.ac.uk)
- Do not reply. Replying can confirm that your email address is active and may lead to more targeting.
- Do not click links or open attachments. If you need to check your account, go to the official UCL systems yourself rather than using a link in the email.
- Report the suspicious email to UCL. UCL says students can contact ISD Security about IT security issues, including suspicious emails to a university email account, by emailing isg@ucl.ac.uk or calling +44 (0)20 7679 7338. (ucl.ac.uk)
- Forward the email to the NCSC. GOV.UK advises forwarding suspicious emails to report@phishing.gov.uk; the NCSC will investigate. (gov.uk)
- If it came by text, forward it to 7726. GOV.UK says suspicious text messages can be forwarded to 7726 for free. (gov.uk)
If you clicked, replied or paid
Do not panic, but act quickly.
- If you made a payment or gave card/bank details, contact your bank immediately using the number on your card or statement. The FCA advises telling your bank immediately if you have made a payment or given scammers personal information. (fca.org.uk)
- If you entered your UCL password, change it immediately using the official UCL route, and contact UCL ISD Security for advice.
- If you reused that password elsewhere, change it there too. Use a different, strong password for each important account.
- Report the fraud. UCL directs victims of online fraud to Action Fraud, while current FCA guidance refers UK users to Report Fraud on 0300 123 2040; in Scotland, scams should be reported to Police Scotland on 101 or Advice Direct Scotland. (ucl.ac.uk)
- Watch for follow-up scams. Fraudsters sometimes return pretending they can recover lost money. MoneyHelper warns that victims can be targeted again by follow-up scams. (moneyhelper.org.uk)
How to check a genuine UCL fee request
Use a “stop, check, go direct” approach:
- Stop: do not act from the email, especially if it threatens suspension or gives a tight deadline.
- Check: compare the request with UCL’s official fee-payment guidance and your Portico information.
- Go direct: open the official UCL website or student systems yourself; do not use links in a suspicious email.
- Confirm before paying: if anything feels wrong, ask UCL directly before transferring money.
UCL says students should only pay tuition fees directly using Flywire or the instructions on UCL’s tuition fees page, and that it will never ask students to pay fees using another method. (ucl.ac.uk)
How to stay safer next time
- Expect scams around payment periods. Fraudsters often time messages around real deadlines, loan payments, enrolment and fee dates.
- Check the sender carefully. Look beyond the display name and expand the full email address.
- Do not trust links just because the email looks official. Hover over links on desktop, or go to the official site manually.
- Keep your UCL account protected. Use a strong, unique password and any multi-factor authentication offered.
- Limit what you share publicly. The NCSC warns that criminals use information available online, including on social media, to make phishing messages more convincing. (ncsc.gov.uk)
- Talk to someone before paying. If a message makes you feel rushed, worried or embarrassed, pause and ask UCL, your bank, or someone you trust.
- Keep evidence. Save the email, screenshots, sender details and payment information if you need to report it.
Key takeaway
UCL has said the recent account-suspension and fee-payment emails are not legitimate. Do not pay, reply, click links or open attachments from these messages. For UCL tuition fees, use the official Flywire route only, and report suspicious emails to UCL ISD Security and the NCSC.