Sunita SomvanshiFederal prosecutors have charged five people with running a fraud scheme that used stolen American identities to enroll fake students at real colleges, then drained the federal financial aid those enrollments generated. The Department of Justice named the operation “Ghostbusters.” Investigators estimate the broader fraud network has stolen more than $200 million since 2021 — and specifically targeted Americans who never went to college.
The DOJ’s National Fraud Enforcement Division announced the charges on October 29, 2026. According to the indictment, the five defendants used stolen U.S. Social Security numbers to create fraudulent FAFSA applications in the names of real Americans who had never attended college. They enrolled these fake identities at legitimate colleges, waited for Pell Grant disbursements and student loan funds to clear, then redirected the money through US-based money mules to a transnational fraud network. Over $750,000 in cryptocurrency was seized in Kenya as part of the takedown.
Assistant Attorney General Colin M. McDonald stated: “Whether you are in Nebraska, New Jersey, Virginia, or Nairobi, we will pursue you.”
Even if you have never set foot on a college campus, your Social Security number could be tied to thousands of dollars in fraudulent federal student loans. Scammers specifically targeted people who had never registered a Federal Student Aid account online. Checking your credit report for unfamiliar Department of Education entries — and locking down your identity on StudentAid.gov — can stop you from facing surprise debt collection or damaged credit you didn’t know existed.
How to check if you’re a ghost student fraud victim
The indictment reveals a precise targeting method. Scammers systematically looked for Americans who had never created a profile on StudentAid.gov. Without an existing account, their Social Security numbers sat unmonitored in federal student aid databases — easy to register under a fraudulent identity.
The scheme worked because colleges are funded per enrolled student and cannot physically verify that someone who applied through the federal aid system is real. Once a fake student was enrolled on paper, excess aid funds beyond tuition — typically Pell Grant money disbursed directly to students — flowed to mule accounts and overseas networks.
Congress has been pushing the Department of Education to implement biometric verification for FAFSA applications since 2024. The Operation Ghostbusters indictments add pressure to those legislative proposals and to the Department of Education’s own internal fraud detection systems.
The fraud worked precisely because the US federal student aid system was designed to be accessible — simple enough for an 18-year-old first-generation college student to complete alone. Scammers turned that accessibility into a structural vulnerability, using the same frictionless enrollment process meant to help students to register millions in fake identities without triggering automated fraud flags.
What is a “ghost student” in the FAFSA fraud scheme?
A “ghost student” is a fake college enrollment created by cybercriminals using a stolen U.S. identity to apply for federal financial aid (FAFSA). Once the college disburses Pell Grant or student loan funds beyond tuition costs, US-based money mules redirect the cash to transnational fraud networks. No one attends class.
The DOJ has not confirmed whether all five defendants are in US custody. The investigation is ongoing and additional arrests are possible. Victims who discover fraudulent student loan accounts in their name should contact the Department of Education’s Office of Inspector General (OIG) and file a fraud report with the Federal Trade Commission at ReportFraud.ftc.gov. Check back for updates as the case develops.
