Maficheclasse, TrouveClasse, chopetaclasse, listeclasse: these domain names share a common point. They promise students and parents to reveal the composition of a class before the school year begins. No platform from the National Education system provides this information online, making the promise technically impossible to fulfill.
Technical infrastructure behind the fake back-to-school sites
Investigations conducted during the summer of 2026 show that several of these sites (TrouveClasse.com, chopetaclasse.com, listeclasse.com, voirmonbac.com, rentree2026.com) do not operate in isolation. They rely on a common technical infrastructure, likely hosted in Amsterdam, revealing a structured operation for large-scale data collection.
This pooling explains why the sites look so similar: nearly identical design, French flag displayed in the header, pseudo-administrative mentions referencing the Ministry of National Education. A constellation of very similar domain names with similar visual branding serves as a reliable indicator of fraud.
Knowing the warning signs related to maficheclasse allows one to spot these patterns before sharing any personal data.
School phishing: how data collection works
The mechanism relies on a form that asks for seemingly innocuous information: name, first name, school, grade level. This data is sufficient to feed databases that are resold or exploited for targeted phishing.
Since 2026, authorities have reported a notable evolution. Previous campaigns were limited to data collection via web forms. Recent versions include “missions” to complete: install an app, download a browser extension, or run software on one’s computer.
This shift towards direct compromise of devices (smartphone or PC) changes the nature of the risk. A filled-out form exposes personal data. An installed app can access contacts, messages, and even bank credentials stored on the phone.
Spotting a maficheclasse scam: concrete verification criteria
A few quick checks can help distinguish a fraudulent site from a legitimate resource.
- The domain name does not end with .gouv.fr or .education.fr. Official platforms of the National Education system exclusively use these extensions for services intended for families.
- The site requests personal information (name, first name, class, school) without any prior authentication such as FranceConnect or EduConnect. No official service asks for this data via a simple open form.
- “Missions” are proposed after filling out the form: sharing the link on social networks, installing an app, downloading a file. This forced virality mechanism is a constant marker of these campaigns.
- The site displays official symbols (flag, Republic logo) without mentioning a SIRET number, verifiable legal notices, or a privacy policy compliant with GDPR.
The dissemination of these fake sites largely occurs through TikTok, where video tutorials show students how to “discover their class.” The short format and casual tone of these videos make the scam harder to identify for a young audience.
The role of virality on social networks
The creators of these sites rely on peer sharing. A student who thinks they have found their future class sends the link to their classmates, who fill out the form in turn. The spread relies on trust among students, not on traditional advertising.
This viral operation explains why the scam resurfaces every year at the same time, between late August and early September, when the impatience to know one’s class is at its peak.
Steps to take after submitting data to a fake site
If information has already been entered on one of these sites, several actions can limit the damage.
- Immediately change the passwords of accounts that use the same email address or identifier as those provided on the fraudulent site.
- Monitor for suspicious logins on messaging and social media accounts in the weeks that follow.
- If an app or extension has been installed, uninstall it and run a complete antivirus scan of the device.
- Report the site on the Pharos platform (internet-signalement.gouv.fr), the official reporting system for illegal online content.
For minors, informing the school allows for alerting other families. Some academies relay these reports in their back-to-school communications.
Why this school scam works every year
The mechanism exploits a predictable calendar. Class lists are finalized by schools a few days before the start of the school year but are only communicated upon students’ arrival. This delay creates a window of impatience that fraudulent sites systematically exploit.
The target audience, primarily middle and high school students, is proficient with digital tools but may not always have the verification instincts of an adult when faced with a website. The professional appearance of the site is often enough to establish trust.
The gendarmerie and several prefectures (including that of Var) publish alerts every summer, but the exposure window remains short and intense. The sites appear at the end of August and disappear a few days after the start of the school year, complicating removal procedures.
The only reliable way to know one’s class remains the one that hasn’t changed: wait for the first day of school or contact the school directly if it communicates the information in advance through its own secure channels.
