DOJ Ghostbusters hits hundreds of millions in student aid theft
Operation Ghostbusters charges five and seizes crypto as officials put several hundred million in taxpayer losses on a years-long ghost-student scheme tied to Kenyan networks.
IJR · Oct 29, 2026 · 5 min read

Assistant Attorney General Colin McDonald at a news conference in Alexandria, Virginia, on Oct. 29 and put a number on what federal investigators say has been bleeding the student-aid system for years. Organized rings, he said, have been running ghost-student fraud since at least 2021. Investigators believe several hundred million dollars have been lost.
That was the concrete opening of Operation Ghostbusters, the Justice Department’s nationwide push against a scheme that used stolen American identities to enroll fake students, draw down federal grants and loans, and move the leftovers overseas. McDonald announced charges against five defendants and the seizure of more than $750,000 in cryptocurrency tied to the scheme and laundered through a network associated with Kenyan nationals. He called it the first international seizure of its kind in Kenya.
“This is organized fraud at scale,” McDonald said. “Every year, alongside those eager American students submitting their student loan applications, praying for a better future, are fraudsters. Submitting fraudulent student loan applications by the thousands, preying on the American taxpayer and American victims.”
The mechanics were straightforward and, on the record, industrial. Fraudsters stole personal data belonging to U.S. citizens—often people who never applied to college—and used it to create fraudulent FAFSA accounts and enroll “ghost students” at schools across the country. Once aid was approved, the Department of Education sent funds to the colleges. After tuition and fees came out, the remaining refunds landed in accounts controlled by the operators. From there the money moved through U.S.-based money mules and on to Kenya, including, in one charged case, to a network associated with a purported Kenyan safari company.
Officials say the operators did not stop at applications. They used artificial intelligence to complete paperwork and coursework and, in some instances, paid people to appear in online classes so schools would keep the fake enrollments active and the aid flowing. The longer a ghost student stayed on the books, the larger the take.
The FBI has identified more than $32 million in losses tied to specific suspects, with millions more suspected in similar schemes. More than 830,000 accounts have been flagged as potentially fraudulent. The bureau has more than 40 open investigations—also cited as 45—across 26 field offices, with more than 20 U.S. attorneys’ offices involved. California community colleges alone flagged roughly one-third of applications as potentially fraudulent in 2024. Other schools have reported suspected fraud rates from about 8 percent to 20 percent or higher.
Five people have been charged so far across three federal districts. In Nebraska, a federal grand jury returned a 10-count indictment against Francis Mogambi, a Kenyan national, on charges including theft of government money and aggravated identity theft. He was arrested and detained pending trial. In New Jersey, Mabed Patricia Utate-Alberto, Patricia Arisleydi Perez, and George Arturo Alfau Mendez were arrested on a criminal complaint. Prosecutors say the three acted as witting money mules, receiving FSA funds obtained through false applications that used stolen American identities, taking a cut, and transferring the rest overseas to co-conspirators in Kenya tied to the safari-company cover. That case alone carries an intended loss of about $1.5 million, with more than $1 million obtained. In the Eastern District of Virginia, a grand jury on Oct. 21 returned a sealed indictment against an unnamed Kenyan national charged with conspiracy to commit wire fraud and student aid fraud. That defendant, described as a U.S.-based money mule, allegedly received more than 700 fraudulently obtained refund deposits totaling about $1.44 million and moved at least $1.3 million onward through wires and money-service transactions.
FBI Assistant Director Heith Janke put the enterprise in plain terms. “The perpetrators masterminded a deliberate plot to defraud the U.S. government of millions of dollars through the exploitation of financial aid programs designed to help hardworking American students. These criminals used stolen personal data belonging to U.S. citizens to fuel their criminal enterprise.” He added: “To date, the FBI has identified more than $32 million in losses, with millions more suspected, in similar ghost student schemes. This stops now.”
Under Secretary of Education Nicholas Kent tied the enforcement wave to the administration’s broader effort to keep aid with actual students. “Under President Trump and Secretary McMahon’s leadership, the Department of Education has saved taxpayers more than $2 billion in attempted student aid theft—ensuring students receive the critical funding they need, not fraudsters.” Every dollar that reaches a fraudster, Kent said, is a dollar that will not go to a student in need. “Today’s action sends a strong message to fraudsters both at home and abroad: the Trump Administration is watching and will hold you accountable and protect American taxpayers.”



