TSS has received communications from the SBCTC IT Security group regarding multiple reports of threat actors texting students with fraudulent messages. These texts attempt to prompt users to provide Multi-Factor Authentication (MFA) verification codes. Once obtained, threat actors use these codes to access student accounts.
These messages may appear in various formats, making it extremely important for students to remain vigilant and verify the legitimacy of any request before responding or sharing any MFA codes. Please note: Shoreline does not send MFA codes for account deactivation or to release financial aid funds.
If a student receives an unsolicited or unexpected verification request, they should notrespond to or interact with the message. Shoreline support staff are available to help if there are questions about the validity of any text message requests.
Below is an example of a fraudulent text sent to a student at Bellevue College (the student’s personal information has been removed).


If you have any questions, please visit the Support Center for assistance.
Leave a comment