"Ghost student" fraud: how a stolen identity can drain your federal financial aid

You never applied to college, never signed a loan, never touched a FAFSA form this year — and yet a debt collector is calling about a federal student loan with your name and Social Security number on it. Or a tax form arrives for a school you have never heard of. Neither of these is a pitch aimed at you. They are the downstream fallout of a fraud ring’s business model: enrolling a “ghost student” who exists only on paper, using an identity stolen from someone who has no idea it is happening.

How it works

Federal regulators laid out the mechanics in a joint July 2026 alert. FinCEN, working with the Department of Education’s Office of Inspector General and the FBI, describes organized fraud rings — many operating from overseas — targeting a financial aid system that disburses roughly $120 billion a year to about 13 million students. Two typologies dominate:

• Ghost students. Fraudsters obtain someone’s personal information — sometimes a minor’s, sometimes assembled into an AI-generated synthetic identity that pairs real stolen details with fabricated documents — and use it to enroll a “student” at a college or university who never intends to attend a single class. Once enrollment triggers a financial aid disbursement, the fraud ring redirects or drains the refund.
• Straw students. Here the identity is not stolen but rented: a real person is recruited and paid a fee to hand over their Social Security number and personal details, which a fraud ring uses to enroll them and collect the aid refund in their name. FinCEN’s alert notes this sometimes involves complicit staff inside a school altering records to help the scheme along.

Either way, the money moves fast once it lands: refunds get funneled into new accounts opened for no other purpose, split across several accounts accessed from the same device, or converted quickly into cryptocurrency or pushed out through peer-to-peer payment apps — the exact pattern FinCEN is now telling banks to flag and report.

Why it is hard to spot

This is not a scam that calls, texts, or emails you — which is precisely what makes it dangerous. There is no pitch to recognize and refuse. If your identity is the one stolen for a ghost-student enrollment, you are not a target the fraud ring is trying to convince of anything; you are a name it is borrowing. Federal investigators have tied more than $350 million in losses to this pattern over five years, and the Department of Education says real students have sometimes struggled to register for classes because a fraudulently enrolled “ghost” was taking up a seat.

The Department of Education has responded with a nationwide fraud-prevention push: real-time, risk-based identity screening built into the FAFSA itself, live since April 2026, which can require an applicant flagged as high-risk to present government-issued ID before aid is released. The agency says the new system had already stopped more than $100 million in fraudulent disbursements as of this summer. That protects the aid program going forward — it does not undo an enrollment already made in your name, which is why checking your own account matters regardless.

How to spot it happening to you

Because there is no message to catch in the act, the warning signs are things you notice after the fact:

• A tax form, loan statement, or collection call references a school or a federal student loan you never touched.
• StudentAid.gov’s “My Aid” section shows a FAFSA, enrollment, or loan disbursement you never made.
• Your own FAFSA gets rejected because one is already filed for you that year.
• You are offered money in exchange for your Social Security number, FSA ID, or bank details to “enroll” somewhere — the straw-student recruitment pitch, worth refusing outright.

What to do

The free move comes first, and it takes about five minutes: log in to StudentAid.gov, even if you have never applied for aid, and look under “My Aid” for anything you do not recognize. Pair that with a free credit freeze — including one for a minor child — at all three credit bureaus, which blocks new accounts, student loans included, from opening under that identity. Never accept payment for your SSN or FSA ID; that “job” is the fraud, and it can leave you legally exposed alongside the person running the scheme.

If you do find a loan or enrollment you never made, move in this order: call the loan servicer immediately and ask for a forbearance while the account is investigated, so it does not damage your credit or go to collections in the meantime; file a report at IdentityTheft.gov for an official Identity Theft Report and recovery plan; then submit a False Certification (Identity Theft) Discharge Application, available on StudentAid.gov, to have the fraudulent loan discharged. A police report listing student loan identity theft specifically strengthens the discharge request.

If your Social Security number is already exposed more broadly, the steps in what to do after a data breach and a free credit freeze apply here too. If you were the one approached to sell your identity for a fee, that recruitment pitch runs on the same playbook as being recruited as a money mule — walking away protects you as much as it protects the aid program. And if what actually reached you was a scholarship or FAFSA-filing service asking for money or your FSA ID, that is a related but distinct scheme covered in our guide to scholarship and financial aid scams.

For more, browse the defense library or test your eye on the 60-second quiz.