Have y'all seen this? Why would KSU have you upload your tax data to a non .edu domain?? I don't think it's a scam because the email actually came from finaid@kennesaw.edu, but, why would I get a phishing alert, and why wouldn't they give you a heads up about using studentforms.com as 3rd party?