{"success":true,"data":{"id":"fafsa-2026-27-correction-phish","label":"Fake FAFSA 2026-27 correction/verification notice from non-official sender targeting students and parents — impersonates studentaid.gov with \"your FAFSA has errors — correction required / update your FAFSA\" urgency harvesting FSA ID, SSN, and financial account information","description":"Fake FAFSA 2026-27 correction or verification notice from a non-official sender, targeting students and parents applying for federal financial aid. The FAFSA (Free Application for Federal Student Aid) form collects sensitive financial and personal data (SSN, tax records, bank accounts), making it a high-value phishing target. Attackers impersonate the Department of Education / studentaid.gov with fake \"your FAFSA has errors — you must submit corrections by [date] or lose your aid eligibility\" notices, leading victims to fake FSA ID login pages or forms requesting SSN and financial account details. Legitimate FAFSA correction notices are sent from studentaid.gov email or the official FAFSA portal, and never arrive as unsolicited third-party emails requesting credentials. The signal fires when: (1) body references FAFSA, Free Application for Federal Student Aid, studentaid.gov, ISIR, SAR, or FSA ID AND (2) correction required / verification needed / FAFSA errors / aid hold urgency is present AND (3) sender is NOT studentaid.gov, ed.gov, fafsa.gov, or studentaid.ed.gov AND (4) no List-Unsubscribe or In-Reply-To. Source: GC1 R15 council #2; FTC FAFSA phishing consumer alert 2025; NASFAA student-aid phishing advisory 2026.","tier":"danger","category":"phishing","isThin":false}}