美国司法部指控“幽灵学生”用 AI 完成课程骗取学生贷款，已逮捕 5 人

Manage your consent preferences

If you are a resident of Colorado, Connecticut, Virginia, Utah, Oregon, Texas, Montana, Delaware, Iowa, Nebraska, New Hampshire, and New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, or Rhode Island you have the right to opt-out of Targeted Advertising, including our “sale” and/or “sharing” of your Personal Information (“Opt-Out”). We and our third-party business partners use Personal Information in accordance with our Privacy Policy to serve advertising believed to be of interest to you (“Targeted Advertising”). If you are a California resident, you also have the right to limit the use and disclosure of your Sensitive Personal information in particular circumstances. Please note that you may need to Opt-Out on each website, mobile app, browser, and device you use, and if you clear your browser cookies, you may need to repeat this process. However, if you have created an account to log in across several of our websites and/or mobile apps, we will make reasonable efforts to apply your Opt-Out request to each of those websites and apps. ◦ To Opt-Out of Targeted Advertising on this site: Move the “Allow Targeted Advertising" toggle below to the left and press “Confirm My Choices”◦ To Opt-Out of other “sales”, including for list rentals, data co-ops, and to limit the use and disclosure of your Sensitive Personal Information: Please email privacy_administration@condenast.com or call 1-877-241-4999.

Essential

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Performance

These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

Audience Measurement

We use audience measurement cookies in order to carry out aggregated traffic measurement and generate performance statistics essential for the proper functioning of the site and the provision of its content (for example to measure performance, to detect navigation problems, to optimization technical performance or ergonomics, to estimate server power needed and to analyse content performance). The use of these cookies is strictly limited to measuring the site's audience. These cookies do not allow the tracking of navigation on other websites and the data collected is not combined or shared with third parties. You can refuse the use of this cookie by switching off the slider to the right.

Functional

This website uses functional cookies and services to remember your preferences and choices, such as language preferences, font sizes, region selections, and customized layouts. They enable this website to offer enhanced and personalized functionalities.

Social Media

These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

Allow Sale/Targeted Advertising?

We may transfer or share your personal information to third parties for the purposes of targeted advertising. You can learn more about what information is used for this purpose in our privacy notice.

Confirm My Choices Reject All Accept All

Consent powered by Ethyca

Skip to content Ars Technica home

Sections

Forum Subscribe Search

Forum Subscribe

Story text

Size Width * Links

Subscribers only
Learn more

Pin to story

Theme

HyperLight
Day & Night
Dark
System

5 arrests so far

DOJ exposes “ghost students” using AI to complete courses, steal student loans

Applying for FAFSA may get messy as DOJ “ghost student” crackdown ramps up.

Ashley Belanger – Oct 30, 2026 4:53 PM|0

Credit: Siro Rodenas Cortes | Moment

Text settings

Story text

Size Width * Links

Subscribers only
Learn more

Minimize to nav

The US has charged five individuals as part of the first broad federal crackdown on “ghost students”—fraudsters who steal the identities of hundreds of Americans to pose as fake college students and steal student loans.

In a press release Thursday, the Department of Justice said it had uncovered a large-scale scheme relying partly on AI. The DOJ seized more than $750,000 in cryptocurrency from “a network associated with Kenyan nationals” after data analysis helped flag likely fraudsters. Assistant Attorney General Colin M. McDonald of the DOJ’s National Fraud Enforcement Division credited new fraud-detection measures implemented by the Trump administration for the arrests. He said that “this is the first international seizure of its kind in Kenya,” while warning fraudsters that the crackdown has only just begun.

“If you steal American identities, if you steal taxpayer dollars, if you exploit programs meant to help students build a future—we will find you,” McDonald said. “Whether you are in Nebraska, New Jersey, Virginia, or Nairobi, we will pursue you.”

At a press conference, McDonald was joined by FBI and Department of Education officials to explain how the scheme works.

It starts with bad actors purchasing personally identifiable information (PII) of Americans—most frequently targeting high school graduates who never attended college and went straight into the workforce.

Ars Video

Once they have that sensitive data, they fill out the Free Application for Federal Student Aid (FAFSA) while seeking to enroll in universities and community colleges. If accepted, student aid is distributed first to schools to cover tuition and fees, but any money left over is deposited into bank accounts controlled by the fraudsters. Dozens of Americans have opened bank accounts to act as money mules for fraudsters, the DOJ said.

To keep money flowing, bad actors use AI to fill out applications, complete coursework, and even make it appear that a student is attending virtual sessions.

“It looks like the ghost student is actually completing the class,” McDonald said at the press conference. “Some even create the appearance of a fake student in an online classroom to trick schools into believing a real person is present. The goal is to keep the ghost student in school for as long as possible, semester after semester after semester.”

Oblivious Americans stuck with bills

So far, the DOE has “identified over 830,000 potentially fraudulent federal student aid accounts created by using this PII of US citizens,” officials said at the press conference. If all those accounts are ghost students, total losses come close to $130 million, the DOJ said.

For Americans whose data is stolen, there’s little opportunity to discover the scheme until the government comes collecting on loans years later. In the meantime, victims’ credit can be damaged. Once they detect the scheme, they’re stuck defending against demands to repay inflating student loans, which McDonald admitted is messy.

“The Department of Education does a great job to help unravel that mess, but it is a mess that no one should have to endure,” he said.

In connection with the arrests, officials said they “identified more than $32 million in actual loss tied to these specific subjects” and “we believe that actual total is substantially higher,” with “millions more suspected.”

The DOE’s Office of Inspector General first detected the fraud patterns that brought the alleged scheme to light. The FBI then helped identify how many accounts were impacted, tracing money to US and foreign bank accounts and crypto wallets. In one case, a defendant “used multiple bank accounts across several financial institutions to receive over 700 fraudulently obtained federal student aid refund deposits, totaling approximately $1,439,548,” the DOJ said. In another, “one person received more than $1 million in deposits that were linked to more than 300 fraudulent student accounts,” Inside Higher Ed reported.

At the press conference, First Assistant US Attorney Theophani K. Stamos for the Eastern District of Virginia said that data analysis “identified unusual, suspicious patterns of behavior” that the FBI said indicated “coordinated fraud was happening involving FAFSA.” Those patterns gave investigators “a solid basis and a solid lead to open further inquiries that have led to indictments,” Stamos said.

To keep the crackdown going, his office has sent “approximately 50 referrals to 26 FBI field offices across the country” to hunt down stolen taxpayer funds.

“We are just getting started. Working with partners around the world, we are sending a clear message: student aid belongs to real students, the data always leaves a trail, and we will follow it wherever it leads,” Stamos said.

Automated fraud detection isn’t perfect

The DOJ suspects this scam has been running since at least 2021, growing increasingly sophisticated as AI opens new avenues for loan theft.

“These fraudsters are exploiting Americans who have never been to college before, preventing the Department of Education from cross-checking applicants,” the DOJ said. “Many known victims have reported attaining only high school diplomas—and are shocked by their faked attendance at an institution hundreds of miles away.”

At the press conference, Undersecretary of Education Nicholas Kent accused the Biden administration of leaving Americans unprotected.

“When we walked in the door last January, we were extremely troubled to find that the Biden administration had turned off every off nearly every fraud detection measure,” Kent said.

Trump’s DOE said it introduced online identity verification requirements that Kent claimed would stop ghost students from ever receiving funds. Relying on automated systems to flag behaviors and reject fraudulent FAFSA applications, Federal Trade Commission Chairman Andrew Ferguson, vice chair of the White House Task Force to Eliminate Fraud, insisted that fraud could be easily stopped without allocating staff and resources or overly burdening the US government.

“The computers help us find it, and we keep the money in the agency,” Ferguson said.

The automated system isn’t perfect, however, and advocates have warned that false flags burden schools, meaning students’ access to aid could be delayed as administrators work through the added identity-verification processes.

Glitches have already affected fraud detection and student applications. In August, the DOE confirmed a technical issue from June 29 to July 6 prevented fraud evaluation results from being shared with certain FAFSA forms. After detecting the glitch, the DOE reprocessed those applications.

Real students may be flagged as fakes

Colleges and universities are also considering adding fees to stop the ghost student fraud.

Some advocates have acknowledged that the fraud deprives real students of funds. But they’re concerned that both the fees and online identity verification could become barriers to access to higher education for low-income students.

To verify their identities through the online FAFSA portal, students are expected to have government-issued IDs on hand in “real time.” They hold the IDs up to their cameras, and automated systems review them. A senior DOE official told Insider Higher Ed that the systems are “similar to the ones used by financial services companies like banks” and that he believed they are the same ones used by rental car companies.

Automated systems then assign a risk rating to the student, and anyone flagged as “high risk” is rejected. Once a student is rejected for aid, it’s up to the university to conduct any follow-up to verify if the application was real.

MorraLee Keller, a senior consultant for the National College Attainment Network, told Inside Higher Ed that “a lot of low-economic kids may not have secured, for example, a driver’s license” and may be set back in the application process while trying to obtain alternative IDs. That could also add fees during the application process.

Students may also be subject to automated fraud detection when seeking to make corrections to their FAFSA, which could delay fund distribution if a false rejection is issued.

“We want to make sure that timing doesn’t interrupt the aid getting credited to their account to pay their bills on time so that they could start classes, get refunds to go get their books, and all those kinds of things,” Keller said.

The Trump administration has said that it expects the number of real students flagged as fraudulent to be low. But the president of the National Association of Student Financial Aid Administrators, Melanie Storey, pushed back “a little bit” on that claim during a podcast from the association recently, asking “the department to quantify the volume of in-person verification that will remain,” Inside Higher Ed reported in April. At the time, Aaron Lemon-Strauss, executive director of the FAFSA program, replied, “I’m not going to be able to give you a number yet.”

Storey noted that many people complete the FAFSA form at in-person events, further narrowing potential false positives as the government expands its ghost student crackdown. For any students who “accidentally get caught in the net,” Lemon-Strauss recommended that universities remain vigilant and take action to ensure support goes to Americans who need it most.

Ashley BelangerSenior Policy Reporter

Ashley is a senior policy reporter for Ars Technica, dedicated to tracking social impacts of emerging policies and new technologies. She is a Chicago-based journalist with 20 years of experience.

0 Comments

Comments

Forum view

Loading comments...