Phishing Scam Stole $100,000 from SC Voucher Program

State officials confirmed that a phishing attack targeting service providers successfully diverted $100,000 in program funds.

Updated on Oct. 12, 2026 in Financial Aid

Phishing Scam Stole $100,000 from SC Voucher Program

Live Poll

Do you trust the security of the state-managed voucher payment systems in your area?

A phishing campaign targeting vendors in South Carolina's Education Scholarship Trust Fund resulted in the fraudulent redirection of $100,000. State officials halted disbursements for one week while addressing the breach before restoring services.

Why it matters

The breach directly impacted the security of a state-funded program that provides up to $7,634 annually for 15,000 students to access private vendor services. State officials are currently working to recover the stolen assets.

The Education Scholarship Trust Fund supports 15,000 students and manages an $83 million budget, with 959 providers registered for payment. Individual student funding is capped at $7,634 per year for approved private vendor services.

The players

South Carolina Department of Education

This state agency oversees public education policy and manages the administration of the Education Scholarship Trust Fund.

ClassWallet

This financial technology company provides the payment platform used by the state to manage and distribute scholarship funds to vendors.

The details

Vendors were tricked by spoof emails designed to mimic official communications from ClassWallet or the South Carolina Department of Education, which requested account login credentials. While disbursements were paused to secure the system, officials reported that operations returned to normal by early October.

Timeline

  1. September 25, 2026: State officials alerted vendors to the phishing attack.

  2. Late September 2026: The state paused disbursements for approximately one week.

  3. October 5, 2026: Vendor accounts were restored to functional status.

Culture Shift

The rise of digital voucher systems creates new avenues for cybercriminals to target government-backed financial distributions. This incident underscores the systemic risks inherent in modernizing education funding through third-party platforms.

Providers and families participating in the program should remain vigilant against requests for credentials via email, as the state works to finalize security audits. Any questions regarding payment delays should be directed to official state support channels rather than unofficial email prompts.

The takeaway

Users of online payment portals should always verify the sender address before clicking links to protect their account credentials from phishing attempts. Establishing multi-factor authentication can serve as a critical layer of defense against unauthorized access to financial accounts.

Further reading

For more information on program requirements and oversight, visit the South Carolina Financial Aid section.

Source note: This article includes information reported by Post and Courier.

Live Poll

Do you trust the security of the state-managed voucher payment systems in your area?