DOJ charged alleged 'ghost student' fraudsters who used AI to fake college attendance and obtain federal student aid
On October 29, 2026, Assistant Attorney General Colin McDonald announced charges in Operation Ghostbusters, a crackdown on 'ghost student' fraud. Fraudsters allegedly used stolen identities and AI to fill out college applications, complete coursework and fake a student's presence in online classrooms so they could collect taxpayer-funded financial aid. A Nebraska grand jury indicted a Kenyan national on charges of theft of government money and aggravated identity theft. Several New Jersey residents were charged as alleged money mules in a scheme involving hundreds of ghost students and more than $1.3 million in proceeds. More than $750,000 in cryptocurrency was seized, and the Department of Education is working with the Justice Department to shut off fraudulent accounts.
What the AI did
Fraudsters allegedly used AI, together with stolen identities, to fill out college applications and complete coursework for fake students. They also allegedly made it look as if a fake student was present in online classrooms, to trick schools into believing a real person was attending. It has not been reported which AI tool was used.
First reported October 29, 2026 · Added to the register November 6, 2026 · 1 source
- Scheme proceeds (New Jersey money mule case)
- More than $1.3 million
- Affected
- Americans whose identities were stolen, some of whom never attended college
- Country
- United States
- When it happened
- Not stated in the sources
- First reported
- October 29, 2026
What this means for you
Could this affect you?
If you run online courses or handle federal student aid. Colleges running online courses and federal student aid programs were exposed, along with people whose stolen identities were used to enroll fake students and take out aid in their names.
What to check
- Strengthen identity checks when students apply.
- Verify that a real person is present during online classes.
- Watch for AI-generated coursework and fake classroom presence.
- Monitor your credit for student loans you did not take out.
Areas of your AI programme this touches
Every fact and its source (8)
- Charges announced2026-10-29“Fox News (@FoxNews) October 29, 2026”[1]
- How AI was allegedly usedAI used to fill out applications and complete coursework for ghost students“Some use super intelligence to fill out college applications and complete coursework”[1]
- Operation nameOperation Ghostbusters“This is not the end of Operation Ghostbusters.”[1]
- Government responseDepartment of Education working with DOJ to shut off fraudulent accounts“Department of Education is coordinating with the Department of Justice “to identify and shut off fraudulent accounts”[1]
- Seizure statusFirst international seizure of its kind in Kenya“This is the first international seizure of its kind in Kenya.”[1]
- Fake classroom presenceFraudsters created the appearance of fake students in online classrooms“Some even create the appearance of a fake student in an online classroom to trick schools into believing a real person is present”[1]
- IndictmentNebraska grand jury indicted Kenyan national Francis Mogambi“a grand jury has indicted Francis Mogambi, a Kenyan national, on charges of theft of government money and aggravated identity theft”[1]
- Cryptocurrency seizedMore than $750,000“more than $750,000 in cryptocurrency tied to this scheme”[1]
Sources
- 'Ghostbusters': Feds Find Fraudsters Use AI to Fake College Attendance and Receive Fed Aid – PJ Mediapjmedia.com · October 29, 2026
How this record is classified. Severity M (3/5): harm to individuals, or a policy breach with limited reach. Evidence: Confirmed, meaning a company, official or court statement.
The facts in At a glance and in Every fact and its source are quoted from the sources listed. The summary, What the AI did and What this means for you are written from those sources and checked against them automatically before publication. Records reflect what has been disclosed, not everything that has happened. Incidents are found through news feeds and the GDELT Project.
