Treasury’s Financial Crimes Enforcement Network, known as FinCEN, has flagged about $270 million in suspicious financial activity potentially tied to federal student aid fraud and referred its findings to federal investigators. Treasury announced the figure on October 19, saying it comes from nearly 100 suspicious activity reports and more than 20,000 potentially suspicious transactions. It arrives as the Trump administration pushes to root out fraud across federal programs.
What the $270 million figure does and does not mean
The money has not been declared fraud. Treasury calls it suspicious activity potentially linked to fraud, spotted by banks, reviewed by FinCEN and passed to law enforcement as tips and leads. Whether any of it becomes a criminal case is now up to investigators.
The counts are specific. Banks and other financial institutions have filed nearly 100 suspicious activity reports, the confidential alerts they send FinCEN, since the agency issued a student aid fraud alert in July 2026. Those filings point to more than 20,000 potentially suspicious transactions going back to February 2026.
Whose name ends up on a fake student?
That July alert, dated July 24 and prepared with the Education Department’s inspector general and the FBI, describes what it calls ghost student fraud. Criminals steal or invent an identity, enroll it at a school and collect the aid refund. The people whose names get used often have no idea it is happening, and the alert says minors are among them.
That makes victims hard to spot. FinCEN says a person whose identity was used may learn of it only after being found ineligible for aid or told about student loans taken out in that name. Its steps for families are short: contact Federal Student Aid and the loan servicer, freeze credit with the credit reporting agencies using the instructions at IdentityTheft.gov, and report any suspicious education-related email, text or call to the Education Department’s inspector general hotline.
Retirement deadlines, in your inbox: Miss an enrollment or claim deadline and the money can be gone. Join the Retirement Money Brief and we’ll send you our Scam & Identity-Theft Action Card as a welcome gift.
Get the Brief + the scam action card →
We may earn a commission from links on this page.
Some ghost students are synthetic, built from stolen data mixed with invented details. FinCEN says fraudsters sometimes use artificial intelligence to get past identity checks, and that chatbots or paid helpers can finish coursework so the fake student stays enrolled long enough to collect a full refund.
The second scheme, straw student fraud, involves real people who sell their personal information for a fee. A ring enrolls them and collects the refunds, and the straw student sometimes keeps a share. FinCEN says corrupt school staff can recruit straw students, falsify records or take part of the refunds.
The alert says fraudsters often aim at schools with open admissions and online programs, and that real students can lose a seat when fake enrollments fill classes. The size of the underlying program explains the appeal. Federal student aid awards more than $120 billion a year to about 13 million students.
Straw students usually do not attend class, and the people running the scheme or corrupt insiders may complete the coursework for them. The alert also warns that aid refunds are sometimes used to buy digital assets that are quickly moved to another wallet, which makes the money harder to trace once it leaves the bank.
How banks spotted the pattern
Aid refunds usually reach students by bank transfer, often labeled “refund” with the school’s name or initials in the payment description. That gave FinCEN a pattern to search for. The alert told banks to look closely at accounts with no education history that suddenly receive refunds for several unrelated people.
Other red flags include refunds moving out fast through peer-to-peer apps, wires or digital assets, and new accounts funded only by aid refunds. Several accounts opened online in a short period and sharing one out-of-state or foreign IP address is another. FinCEN stresses that no single flag proves fraud, so banks are told to weigh several together.
When a bank sees a pattern, it files a suspicious activity report carrying the key term FIN-2026-FSAFRAUD and keeps the records for five years. For schemes still running, FinCEN says to phone law enforcement as well. Treasury says it reviewed the reports that followed the July alert and sent the information on as tip-and-lead material.
What Washington says it is doing about it
Treasury Secretary Scott Bessent said federal student aid is intended to expand educational opportunities, not line the pockets of fraudsters, and that the administration will not tolerate criminals who exploit government programs for personal gain. Treasury says it is working with the White House Task Force to Eliminate Fraud, led by Vice President Vance.
Education Secretary Linda McMahon said her department is already saving taxpayers more than $2 billion in less than two years, and she pointed to a FAFSA fraud detection tool the department introduced earlier this year. That $2 billion is McMahon’s savings claim, a separate figure from the $270 million FinCEN flagged.
Treasury is also encouraging whistleblowers to report fraud, money laundering, sanctions violations and tax-law violations. FinCEN’s alert says awards may apply when a tip leads to an enforcement action with penalties over $1 million, and anonymous submissions are allowed.
For families the open question is simple: would anyone notice? A ghost student can enroll, collect a refund and disappear while a real person’s name sits on the paperwork, and the alert’s advice for victims starts only after the discovery.
Could a student loan be opened in a family member’s name?
A ghost student scheme works only while the real person stays unaware. The first sign can be a loan statement or an aid denial for a school the person never attended, and by then the refund is gone and the cleanup lands on the name that was used.
The Senior Fraud Defense & First-Hour Recovery Kit is built for that moment. It lays out the free credit-freeze steps, a first-hour recovery plan and a fraud evidence and report log, so the calls to the credit bureaus and loan servicers happen in order. This Treasury case is about student aid, and the kit covers the wider stolen-identity problem behind it.
Get the credit-freeze steps and first-hour plan in one kit →
More Financial Reading
- 21 Ways to Stretch a $2,087 Social Security Check
- 15 Places to Find Your Share of the $4.25 Billion States Give Back
- 15 Ways Out of 22% Credit Card Interest
This article was produced with AI assistance and edited for accuracy against the sources linked above.
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
