DOJ Ghostbusters hits hundreds of millions in student aid theft

By The Conservative Desk (/journals/conservative-desk)

Assistant Attorney General Colin McDonald at a news conference in Alexandria, Virginia, on Oct. 29 and put a number on what federal investigators say has been bleeding the student-aid system for years. Organized rings, he said, have been running ghost-student fraud since at least 2021. Investigators believe several hundred million dollars have been lost.

That was the concrete opening of Operation Ghostbusters, the Justice Department’s nationwide push against a scheme that used stolen American identities to enroll fake students, draw down federal grants and loans, and move the leftovers overseas. McDonald announced charges against five defendants and the seizure of more than $750,000 in cryptocurrency tied to the scheme and laundered through a network associated with Kenyan nationals. He called it the first international seizure of its kind in Kenya.

“This is organized fraud at scale,” McDonald said. “Every year, alongside those eager American students submitting their student loan applications, praying for a better future, are fraudsters. Submitting fraudulent student loan applications by the thousands, preying on the American taxpayer and American victims.”

The mechanics were straightforward and, on the record, industrial. Fraudsters stole personal data belonging to U.S. citizens—often people who never applied to college—and used it to create fraudulent FAFSA accounts and enroll “ghost students” at schools across the country. Once aid was approved, the Department of Education sent funds to the colleges. After tuition and fees came out, the remaining refunds landed in accounts controlled by the operators. From there the money moved through U.S.-based money mules and on to Kenya, including, in one charged case, to a network associated with a purported Kenyan safari company.

Officials say the operators did not stop at applications. They used artificial intelligence to complete paperwork and coursework and, in some instances, paid people to appear in online classes so schools would keep the fake enrollments active and the aid flowing. The longer a ghost student stayed on the books, the larger the take.

The FBI has identified more than $32 million in losses tied to specific suspects, with millions more suspected in similar schemes. More than 830,000 accounts have been flagged as potentially fraudulent. The bureau has more than 40 open investigations—also cited as 45—across 26 field offices, with more than 20 U.S. attorneys’ offices involved. California community colleges alone flagged roughly one-third of applications as potentially fraudulent in 2024. Other schools have reported suspected fraud rates from about 8 percent to 20 percent or higher.

Five people have been charged so far across three federal districts. In Nebraska, a federal grand jury returned a 10-count indictment against Francis Mogambi, a Kenyan national, on charges including theft of government money and aggravated identity theft. He was arrested and detained pending trial. In New Jersey, Mabed Patricia Utate-Alberto, Patricia Arisleydi Perez, and George Arturo Alfau Mendez were arrested on a criminal complaint. Prosecutors say the three acted as witting money mules, receiving FSA funds obtained through false applications that used stolen American identities, taking a cut, and transferring the rest overseas to co-conspirators in Kenya tied to the safari-company cover. That case alone carries an intended loss of about $1.5 million, with more than $1 million obtained. In the Eastern District of Virginia, a grand jury on Oct. 21 returned a sealed indictment against an unnamed Kenyan national charged with conspiracy to commit wire fraud and student aid fraud. That defendant, described as a U.S.-based money mule, allegedly received more than 700 fraudulently obtained refund deposits totaling about $1.44 million and moved at least $1.3 million onward through wires and money-service transactions.

FBI Assistant Director Heith Janke put the enterprise in plain terms. “The perpetrators masterminded a deliberate plot to defraud the U.S. government of millions of dollars through the exploitation of financial aid programs designed to help hardworking American students. These criminals used stolen personal data belonging to U.S. citizens to fuel their criminal enterprise.” He added: “To date, the FBI has identified more than $32 million in losses, with millions more suspected, in similar ghost student schemes. This stops now.”

Under Secretary of Education Nicholas Kent tied the enforcement wave to the administration’s broader effort to keep aid with actual students. “Under President Trump and Secretary McMahon’s leadership, the Department of Education has saved taxpayers more than $2 billion in attempted student aid theft—ensuring students receive the critical funding they need, not fraudsters.” Every dollar that reaches a fraudster, Kent said, is a dollar that will not go to a student in need. “Today’s action sends a strong message to fraudsters both at home and abroad: the Trump Administration is watching and will hold you accountable and protect American taxpayers.”

The conservative case here is not abstract. Federal student aid is a large, recurring transfer of taxpayer money conditioned on paperwork and enrollment status. When that pipeline is open at national scale, the incentive to industrialize theft is obvious—and the record shows it was taken. Several hundred million dollars estimated lost since 2021, more than 830,000 accounts flagged, $32 million already pinned to named strands of the scheme, and refund streams routed through domestic mules to Kenya are not accounting errors. They are the predictable harvest of a system that disperses vast sums faster than it verifies that a real American student is on the other end. Victims whose identities were stolen can face ruined credit and bills for educations they never sought. Taxpayers fund both the stolen aid and the multi-agency machinery now required to chase it.

First Assistant U.S. Attorney Theophani Stamos, whose Eastern District of Virginia office helped drive the case with the FBI Richmond cyber squad and the Education Department’s inspector general, said investigators have already uncovered hundreds of participants and hundreds of millions of dollars in stolen funds and sent roughly 50 referrals to 26 FBI field offices. “We are just getting started,” she said. The data, she added, leaves a trail.

A 7News reporter asked McDonald whether stolen identities or fake enrollments reached the D.C., Maryland, and Virginia area. He said victims have been identified across the country and that DMV residents were likely affected, though he could not confirm specific local cases. No competing policy defense of the prior status quo appears in the announcement record; the officials present described detection, charges, seizures, and pursuit.

“If you steal American identities, if you steal taxpayer dollars, if you exploit programs meant to help students build a future—we will find you. Whether you are in Nebraska, New Jersey, Virginia, or Nairobi, we will pursue you.” A team has been sent to Kenya. The five defendants and the $750,000-plus crypto seizure are the first wave. The 830,000 flagged accounts and the open cases across 26 field offices are what remain on the table.