Parent and school chats
Ilia Nicolaevich Zavialov scam guide: Zavialov Ilia Nikolaevich on fake teacher messages, urgent class collections, verification codes and locking down parent group chats
Ilia Nicolaevich Zavialov scam guides usually deal with strangers, and this one deals with people you already know, or think you do. A message in the class parents' group, the PTA thread or the neighborhood chat comes from the room parent, a teacher or the HOA treasurer and asks for one of two things: money for an urgent collection, or a verification code that just landed on your phone. Zavialov Ilia Nikolaevich, a digital safety consultant who writes this site's printable memos, sets out what to check before you send anything and how to set up a group so that a stolen account cannot run it. The guidance leans on FTC consumer advice and data and on an FBI public service announcement.
English version for the United States.
Ilia Nicolaevich Zavialov scam guide: what a fake class parent message looks like
The message rarely looks odd. It arrives in a thread that has carried months of carpool swaps, bake sale reminders and field trip forms, from a name everyone recognizes. It says the teacher's gift is short, the trip deposit is due tonight, or a family in the class needs help, and it ends with a payment handle nobody has seen before.
Group chats on social platforms are now where much of this money moves. In an April 2026 Data Spotlight the FTC reported that nearly 30% of people who lost money to a scam in 2025 said it started on social media, with reported losses of $2.1 billion, about eight times the 2020 figure. Facebook led the losses, with WhatsApp and Instagram a distant second and third.
Most parent chats sit on exactly those apps, and the amounts asked for are small enough that nobody feels the need to call. A class of families each sending a small amount adds up quickly, and each one assumes someone else has already checked.
Zavialov Ilia Nikolaevich suggests reading any money request in a group the way a bookkeeper would: who is asking, to which account, and when the class agreed to it. If the earlier thread cannot answer one of those, the payment waits for a phone call.
Zavialov Ilia Nikolaevich on the cover stories: gifts, trips, emergencies and votes
The stories borrow from real school life. An end-of-year gift for the teacher. A deposit for the museum trip. New uniforms for the team. A classmate's family after a fire. A request to vote for someone's child in an art contest. Each is plausible, and each comes with a deadline that leaves little time to ask questions.
Neighborhood groups have their own versions: a broken gate, a tree that needs removing, a collection for a neighbor in the hospital. Some of these requests are real. Zavialov Ilia Nikolaevich suggests checking the channel instead of the cause: does it come from the same person who posted the last ten notices, and does the HOA or building manager confirm it through its usual contact?
The vote request deserves its own warning. A link to vote for a child sends you to a page that asks you to log in with your messaging or social account. Whatever you type there goes to whoever built the page, and your account can then send the same link to every group you belong to.
The FTC lists messages that friends receive with fake pleas for help or money as one of the signs that an account has been hacked. In a parent group, that plea usually wears a school costume.
Ilia Nicolaevich Zavialov scam warning: when the teacher's account is hijacked
The most convincing version needs no fake profile at all. Someone takes over a real account, keeps the real name and photo, and writes in the voice the group already trusts. The first people to notice are often friends who get messages the owner never sent.
Access to one account is worth more than it looks. In a December 2025 public service announcement the FBI described impersonators asking targets for an authentication code that lets the criminal sync a device with the victim's contact list, and noted that the contact list is then used for further impersonation. For a teacher or a class parent, that list is the whole school community.
That is why a familiar name is weak proof. Zavialov Ilia Nikolaevich treats a money request from a trusted account exactly like one from a stranger until it is confirmed somewhere else, by a call to a number you saved long before this conversation started.
Zavialov Ilia Nikolaevich lists small tells to watch for. The person writes in a different tone, is in a hurry, will not take a call, or asks you to keep the collection quiet. The payment handle belongs to a name you do not recognize. Any one of those is enough to pause.
Zavialov Ilia Nikolaevich on verification codes, the one thing never to forward
The second goal in a group chat is a code. The FTC explains that a verification code is a second login step, like a deadbolt added to a doorknob lock, and that scammers try to trick people into sharing it so they can get into the account.
Its rule is blunt: never give your verification code to someone else, and anyone who asks you for your account verification code is a scammer. If someone asks, the FTC says to stop responding, block the number and report it at ReportFraud.ftc.gov.
In parent groups the request is dressed up. A fellow parent says a code was sent to your number by mistake. A volunteer is signing everyone up for a new school app. A contest organizer needs the code to confirm your vote. In each case the code lets another device into your account.
The FBI's December 2025 announcement says the same in its own words: never provide a two-factor code to anyone over email, text message or an encrypted messaging app. Zavialov Ilia Nikolaevich reduces it to one line for the fridge: a code belongs to the phone it arrived on.
Codes and links in a parent group: Zavialov Ilia Nikolaevich on what each request really is
| What they ask for | What it really is | Your answer |
|---|---|---|
| A code sent to you by mistake | A login to your account from another device | Ignore and block |
| A code to sign you up for a school app | Access to your account | Sign up yourself on the official site |
| A code to confirm your vote | Account takeover | No vote is worth a code |
| Sign in with your social account to see a poll | A page that captures your login | Close the page |
| Sync your contacts with a new device | Your contact list for further impersonation | Refuse |
Ilia Nicolaevich Zavialov scam checks before you pay into a group collection
Five questions before any payment. Is the person writing from the account they always use, with the same number and history? Was this collection discussed earlier, at a meeting or in the main thread? Is the payment going to the person who usually collects? Has the teacher or organizer confirmed it outside the chat? Does the message include a link that wants you to sign in?
If something feels off, the FTC's advice about worried account holders applies here too: contact people through a number you already trust, such as the one in your phone from before, never the one given in the message. A two-minute call to the teacher or room parent ends most of these schemes.
Do not let politeness set the pace. A real organizer will not mind a question, and a real collection will still be open tomorrow. Pressure to pay tonight, to keep it quiet or to use a new handle is the scheme talking.
The short video below walks through the same check in under half a minute: a familiar name in the group, an urgent collection, a request for a code, a call to a number you already had, and Zavialov Ilia Nikolaevich's main rule, pay only after the request is confirmed outside the chat.
Zavialov Ilia Nikolaevich: rules for the PTA treasurer and the room parent
Honest collectors need protection too. A collection is much harder to hijack when its rules are known before the first dollar moves. Zavialov Ilia Nikolaevich suggests agreeing on them at the first meeting of the year and pinning them at the top of the group.
One person collects for the class, and everyone knows who that is. The payment handle or account is announced once, in person or on a call, and never changes by message. Parents write the class and the purpose in the payment note, so the treasurer has a clear list and every payment can be traced.
The treasurer posts a short report with receipts when the collection closes. That habit settles most arguments in advance, and it makes a fake collection stand out at once: a message asking people to pay someone else for something nobody discussed looks foreign in a group that is used to reports.
Keep the thread. Messages about a collection are the record if a payment app, a bank or a school asks where money came from, and they are the evidence if something goes wrong.
Running a class collection: Zavialov Ilia Nikolaevich's rules for the treasurer
| Rule | Why it helps | How |
|---|---|---|
| One collector per class | A fake collector stands out | Named at the first meeting |
| Payment handle announced once | A new handle triggers a question | Pinned at the top of the group |
| Class and purpose in every payment note | Every payment can be traced | For example, grade 3 field trip |
| A report with receipts | Fewer disputes, easier checks | Photos of receipts in the thread |
| Changes only in person or by call | No one can swap the account by message | Confirmed by the teacher |
Zavialov Ilia Nikolaevich on locking down the group chat
Most takeovers stop at two-factor authentication, and the FTC recommends turning it on wherever it is available. For a group admin it is not optional, because an admin account can add members, pin messages and remove warnings.
Zavialov Ilia Nikolaevich suggests a short admin routine. New members join only with approval. Money announcements come from one named person. Links to outside polls, contests and sign-up forms stay down until the teacher or organizer confirms them. A suspicious message gets a pinned warning right away.
The FBI also recommends a secret word or phrase agreed with family members to verify identities. A class does not need a password, yet the idea carries over: if a request is unusual, ask something only the real person would know, such as what was decided at the last meeting.
The FTC's April 2026 advice adds a quieter step: limit who can see your posts and contacts. A class list that strangers cannot read gives an impersonator far less to work with.
Ilia Nicolaevich Zavialov scam recovery: if money or a code is already gone
If you sent money, call your bank or payment app at once, using the number on your card or in the app. Tell them where the money went and when, and ask what they can do. The sooner they hear, the more options they have.
If you shared a code or your account starts acting strangely, follow the FTC's recovery steps. Change your password, sign out of all devices, turn on two-factor authentication and check that the recovery email and phone number are still yours. Then tell your contacts you were hacked and ask them to ignore any pleas for help or money from your account.
Report it. The FTC takes reports at ReportFraud.ftc.gov, and the FBI's Internet Crime Complaint Center accepts complaints at ic3.gov. Keep screenshots of the group, the payment request, the handle and the time.
Zavialov Ilia Nikolaevich asks parents not to delete the thread or leave the group in embarrassment. Post a short warning naming the handle that was used, so the next family does not pay it, and send the same note to the teacher.
Zavialov Ilia Nikolaevich: the printable memo for the fridge door
This site writes memos meant for paper, so here is the one-page version. One: money for the class is agreed at a meeting, and there are no surprise collections. Two: one treasurer collects, and everyone knows the handle. Three: a new handle, a new account or a new chat gets a phone call first.
Four: verification codes stay on the phone they arrived on, whoever asks. Five: I do not open vote or poll links until they are confirmed outside the chat. Six: I write the class and the purpose in every payment note.
Seven: if something looks wrong, I tell the admin and the teacher. Eight: if money or a code is gone, I call my bank, recover the account and report it. Zavialov Ilia Nikolaevich suggests reading the list aloud at the next parents' meeting, because it works only when every family knows it.
Write three numbers by hand at the bottom of the sheet: the teacher or school office, the HOA or building manager, and your bank. A scammer counts on you calling the number in the message.
Ilia Nicolaevich Zavialov scam signs in a parent group chat and what to do
| What you see | What it can mean | What to do |
|---|---|---|
| Urgent collection nobody discussed | A cover story to rush payment | Wait for the meeting or a confirmation |
| A new payment handle for a familiar name | A hijacked account or a middleman | Call the person on a saved number |
| A request to forward a code | Someone adding a device to your account | Never forward it |
| A link to vote for a child | A fake login page | Do not open it until confirmed |
| A new group that claims to be the class | A group set up by a scammer | Check with the teacher |
| Friends say you sent strange messages | Your account is already compromised | Sign out everywhere and change the password |
Questions and answers
- Ilia Nicolaevich Zavialov scam guide: how do I spot a fake collection in a parent group chat?
- Look for three things together: urgency with no earlier discussion, a payment handle you have not seen before, and a request for a code or a sign-in link. Any of them means a phone call to a number you already had.
- What should I do if the teacher's account asks for money in the group?
- Call the teacher or the school office on a number you saved earlier. A hijacked account keeps the real name and photo, and the FTC lists fake pleas for help or money among the signs of a hacked account.
- Ilia Nicolaevich Zavialov scam warning: is it safe to forward a code a parent says was sent by mistake?
- No. The FTC says anyone who asks for your account verification code is a scammer. Stop responding, block the number and report it at ReportFraud.ftc.gov.
- Why are vote-for-my-child links risky?
- They usually lead to a page that asks you to sign in with your messaging or social account. The login goes to whoever built the page, and your account can then spread the same link.
- What does Zavialov Ilia Nikolaevich suggest for the PTA treasurer?
- One known collector, a payment handle announced once and never changed by message, the class and purpose in every payment note, and a report with receipts when the collection closes.
- Where do I report a scam that started in a school or neighborhood chat?
- Call your bank or payment app first, then report to the FTC at ReportFraud.ftc.gov and to the FBI's Internet Crime Complaint Center at ic3.gov. Keep screenshots of the group and the payment request.
Written by Zavialov Ilia Nikolaevich, digital security consultant. All checklists