Skip to main content
ThreatPhishing & impersonation

Fake scholarship administrator or financial aid office claiming a scholarship or financial aid disbursement requires bank account routing number verification before funds are released — credential-harvest and bank-drain fraud targeting students; real disbursements are managed through authenticated institutional financial aid portals, never cold email routing number submission requests.

student-scholarship-disbursement-phish

What this tier means

High-confidence threat indicator — phishing, impersonation, BEC, or scam pattern. Strong contributor to the trash decision.

How Gorganizer detects this

Fake scholarship committee, financial aid office, or student aid administrator claiming the recipient's scholarship or financial aid disbursement requires verification of their bank account routing number before the funds can be released — credential-harvest and bank-drain fraud targeting students. Real scholarship and financial aid disbursements are managed through the institution's authenticated student financial aid portal (Banner, PeopleSoft, Ellucian, Campus Solutions); routing number and bank account updates are made through the student's authenticated direct deposit settings, never via cold email submission. Distinct from student-loan-forgiveness-reapp (forgiveness reapplication narrative) and student-fafsa-aid-phish (FAFSA verification) — this specifically targets the scholarship / financial aid disbursement / bank routing number collection pretext. Detection: scholarship/financial aid disbursement + verify bank account routing number to receive/release funds vocabulary + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +4. Source: GC1-R26; FTC student financial aid scam advisory 2025; NASFAA student aid fraud alert; FBI IC3 student scholarship disbursement fraud patterns.

False-positive guard

Every signal in Gorganizer feeds a multi-module score — never a sole verdict. This is a threat-tier signal — it adds a strong contribution to the trash score. The full pipeline still requires convergence across multiple modules + a margin over the safety floor before deletion happens, and Gmail's trash (30-day recovery) is always used — never permanent delete.

About the scoring engine

Gorganizer's scoring engine emits over 1,800 signals across six modules — headers, sender, subject, body, attachments, and structural metadata. Every email is scored by every module independently; the final verdict requires multiple modules to agree and the trash score to beat the safety floor by a margin.

Sacred safety guards — never delete starred emails, replies, calendar invites, receipts/invoices, or attachments — apply unconditionally regardless of any signal.

Ready to clean your inbox?

Gorganizer scans your Gmail with this signal and 1,800+ others, then cleans everything in one click. $4.99 one-time, no subscription.

Get started