Ghost student financial aid fraud

What it is

A ghost student is not a person. It is an identity, stolen or made up, that is enrolled in online college classes so that someone can claim the federal grants and loans that come with enrollment. The Education Department’s inspector general describes fraud rings as groups of criminals, often large or loosely affiliated, who exploit distance education programs to get their hands on federal student aid award balances. A ringleader enrolls straw students for the sole purpose of obtaining aid. The money is the refund of what remains after tuition, and the loans stay in the identity’s name.

How it actually works

1. The identities

   A ringleader obtains identities. According to the inspector general, some participants join willingly, but fraud rings often steal the personally identifiable information of others. In the Texas case, the defendant used victims’ personal information, and in a Michigan ring recruits were asked to provide theirs.

2. The straw student

   The identity is enrolled in an online program, often at a school with open enrollment. The inspector general’s profile of a straw student: a low expected family contribution, making them eligible for Pell Grants, a credit balance refund, no class attendance once the refund arrives and no approved transfer credits.

3. The aid application

   Federal student aid applications and master promissory notes are prepared and signed in the identity’s name. In the Detroit case, claims were submitted for more than 1,200 individuals at over 100 schools in 24 states.

4. The controlled contact points

   The ringleader sets up addresses, phone numbers and email accounts to intercept messages from the Education Department and the schools. In the Texas case, the defendant did this and altered some straw students’ first names while keeping their real Social Security numbers and dates of birth.

   Where it could have stopped

   The inspector general’s red flags for schools include multiple students with the same or similar mailing address, phone number, email address, deposit account, class schedule or IP address, and a mailing address or account changed just before a credit balance is disbursed.

5. Coursework that keeps the aid coming

   In the Detroit complaint against Michelle Hill, it is alleged that she completed the coursework herself, so the students appeared to progress and stayed eligible across semesters. That is an allegation.

6. The refund

   The refund of the credit balance is paid out. In the Texas case it came through electronic transfers, checks and prepaid debit cards sent to addresses and accounts under the defendant’s control. In a Michigan ring, the inspector general says, members acted as runners, withdrawing aid funds from debit cards in straw students’ names.

7. The victims find out, and the ring is prosecuted

   The people whose identities were used find accounts, loans or enrollments they never created. Cases in this page were sentenced or charged between 2025 and 2026, for conduct that began as early as 2015.

Why it works

Online enrollment at open-enrollment schools. According to ABC News, community colleges accept almost all applicants through open enrollment and often carry the burden of identifying fake applications, which requires resources and expertise many institutions lack.

Remote learning opened the door. An Education Department inspector general official told ABC News that when the pandemic hit and everyone went to online learning, it opened the door to more widespread fraud.

Technology. ABC News reported that scammers have realized that remote learning provides an opportunity to use artificial intelligence to expand their reach and get around identity verification controls.

The warning signs show up before the refund. The inspector general’s sheet lists an account or mailing address changed just before a credit balance is disbursed as a red flag, a moment when school staff can look.

The identity owner may not know. The inspector general official said the loans are assigned to people who do not know they have a debt until the Internal Revenue Service says they owe the Department of Education money.

Where it comes from

Domestic in the cases here: each is a US ring or individual using US identities and US schools. ABC News reported that some scammers operate from overseas, which investigators say presents a special challenge, but that many ghost students operate within US borders.

Scale. An Education Department inspector general official told ABC News that over the past five years the government has investigated more than $350 million in ghost student fraud, that the office has more than 200 investigations open nationwide, and that some schemes are suspected of racking up more than a billion dollars. That is the official’s account, and the officials said it covers only what is known and has been adjudicated.

Earlier cases. ABC News reported that a father and son in Arizona made off with more than $7 million from ghost student scams before their arrests in 2018 and 2019 and served 12-month prison sentences after pleading guilty, and that a Maryland man who used the identities of 60 people to take in more than $6.7 million was sentenced in 2023 to four years.

Real cases

Red flags

• An account, application or enrollment in your name that you did not create, or a school telling you that you enrolled when you did not.
• Several students sharing a mailing address, phone number, email address or deposit account.
• Students in the same degree programs taking the same online courses.
• A mailing address or bank account changed just before a credit balance is paid.
• Students attending several schools with little or no academic progress, or who stop attending once the refund arrives.
• Logins from virtual private networks or overseas IP addresses.
• Students who do not answer verification requests.

If it’s happening to you

If you think your identity was used to enroll in college or take out aid:

1. Do not ignore a notice from a school or the Education Department about an application or enrollment you did not make.
2. Tell the school and ask what was submitted, including the address, phone and email on file.
3. Treat it as identity theft. The people described in the reports on this page worked with the colleges and law enforcement to be cleared.
4. Watch for loans you did not take. The inspector general official says they can surface when the Internal Revenue Service says you owe the Department of Education money.
5. Report it. See where to report for agencies and for countries outside the United States.

Where the money goes

Entirely domestic: from the Education Department to the school, then as a credit balance refund to accounts and cards the ring controls.

The aid is awarded and disbursed to the school, which pays the credit balance to the student. In the documented cases, those payments went to addresses, accounts and prepaid debit cards controlled by the ringleader, and the inspector general says runners withdrew funds from debit cards in straw students’ names. In the Detroit case more than $10 million was disbursed of more than $16 million awarded, and in the Texas case $921,189.08 was disbursed of more than $1.3 million sought.

By the numbers

No published dataset breaks this scheme out as its own category yet, so there is no chart to show. The data page explains which agency categories exist and why some schemes are invisible in official statistics.