Real fraud at universities, school districts, and financial-aid programs. Each case is reported, cited, and linked to the original write-up. We map the pattern, not the institution.
suss. deploys at the inbox and the browser. It flags vendor email compromise, FAFSA phishing, payroll redirect, government impersonation, and credential harvesting before anyone acts on them. Every flagged interaction lands as a signed record your team can audit.
Vendor invoice fraud, business email compromise, FAFSA verification phishing, payroll redirect attacks (like Storm-2657), executive gift-card scams, government impersonation targeting international students, domain typosquatting, ghost-student enrollment fraud, and credential phishing.
DOE prevented $1 billion in financial aid fraud in 2025 alone. The ten incidents documented here range from $1.9M to $13M per case, plus payroll campaigns hitting 25+ universities and data breaches exposing 739,000+ records. FBI IC3 reports BEC cost organizations $2.77 billion in 2024, with education among the most-targeted sectors.
Yes. The phishing campaigns that have moved past MFA in the last year rely on adversary-in-the-middle pages that look like the real SSO portal. suss. flags the email and the page before credentials are submitted.
Under a week for inbox coverage, and managed-browser rollouts deploy via a single Chrome Enterprise policy. We typically run 30 to 60 days in shadow mode first so the verdicts your people eventually see fit the way your institution actually runs.
Yes. suss. catches fake FAFSA verification emails, impostor studentaid.gov domains, and SSN-harvesting forms before submission. With $90M+ fraudulently disbursed in 2025 (including $30M to deceased individuals), the public-facing financial-aid funnel is one of the highest-stakes surfaces in higher ed.
Storm-2657 ('Payroll Pirates') targeted 25 US universities via fake Workday verification emails. suss. flags the phishing email and the impostor portal before credentials change hands. Legitimate HR communications remain untouched.
Book a 15-minute demo. We'll show you the threats targeting your campus and walk through deployment. Reach out at info@gotsuss.com or book directly. 30-day pilots available for qualified institutions.
These are public, documented incidents. The next one is in someone's inbox right now. suss. is what catches it.