Watch for three key red flags: they charge monthly or upfront fees, they promise immediate total forgiveness, or they ask for your FSA ID and password. Legitimate federal loan assistance is always free and never requires sharing your login credentials.