Fraud began by 2021, investigators say
The Justice Department said investigators believe the ghost student fraud has been going on since at least 2021, with estimated losses of well over $200 million.
US prosecutors say a network using stolen identities enrolled fake "ghost students" at US colleges and sent the federal student aid refunds to people in Kenya. On October 29, 2026 the Justice Department announced charges against five defendants in New Jersey, Virginia and Nebraska and a seizure of more than $750,000 in cryptocurrency. The charges are allegations and every defendant is presumed innocent.
As of 31 October 2026 five people face charges in three federal districts and none has been convicted. The Justice Department says more than 40 related cases are open and that it intends to charge two Kenya-based people named as co-conspirators in the New Jersey case.
The Justice Department said investigators believe the ghost student fraud has been going on since at least 2021, with estimated losses of well over $200 million.
A federal complaint in New Jersey alleges that from about March 2021 three US-based defendants conspired with people in Kenya to obtain more than $1 million in federal student aid and send it to co-conspirators linked to a purported safari company.
Francis Mogambi, a Kenyan citizen later charged in Nebraska, entered the United States on this date through the Diversity Visa lottery, according to the Justice Department.
CalMatters reported that about one third of applicants to California community colleges were fake and that the colleges had paid about $13 million in aid to fake students over the past year, as summarised by Higher Ed Dive.
The Education Department told colleges to verify the identities of about 125,000 first-time aid applicants for the summer term, using government ID shown in person or by video. It said nearly 150,000 suspect identities had been flagged in a week.
In fall 2025 the Education Department worked with a vendor to flag applicants for extra identity verification. Only 0.4 percent of those flagged were legitimate students who completed it, according to an American Association of Community Colleges official writing in Community College Daily.
Prosecutors allege that from November 2025 to May 2026 Francis Mogambi used stolen identities to enrol people as students, redirected aid checks to himself, kept 30 percent and sent the rest to Kenya.
The New Jersey complaint alleges the conspiracy continued through at least January 2026, with an intended loss of about $1.5 million, according to the Justice Department.
The Justice Department's National Fraud Enforcement Division was created on April 7 to support the White House Task Force to Eliminate Fraud, chaired by Vice President J.D. Vance, according to the department.
The Education Department said it would start running its fraud-risk model on each FAFSA submission in real time from April 26. Applications rated highest risk are rejected, and high-risk applicants must submit extra ID.
Representatives of the Justice Department's Fraud Division and partner agencies visited Kenya in September to discuss extradition, prosecution and the return of assets, the department said.
In September and October investigators identified 830,840 potentially fraudulent Federal Student Aid IDs linked to nearly $130 million and recommended that the Education Department disable them, according to the Justice Department.
A federal grand jury in Nebraska returned a ten-count indictment (4:26CR3089) charging Francis Mogambi with five counts of theft of government money and five counts of aggravated identity theft. He was arrested and is detained pending trial. He has not been convicted.
A federal grand jury in the Eastern District of Virginia returned a sealed indictment charging an unnamed Kenyan national with conspiracy to commit wire fraud and student aid fraud. Prosecutors allege the defendant received more than 700 fraudulent refund deposits totalling about $1.44 million and sent at least $1.3 million to accounts in the US and Kenya.
The Justice Department announced charges against five defendants in an operation it called Operation Ghostbusters. In New Jersey, Mabed Patricia Utate-Alberto, Patricia Arisleydi Perez and George Arturo Alfau Mendez are charged by complaint as alleged money mules and have been arrested. All defendants are presumed innocent.
The Justice Department said more than $750,000 in cryptocurrency was seized from an account of a Kenyan national, with help from Kenyan law enforcement, and described it as the first international seizure of its kind.
Education Under Secretary Nicholas Kent said the department had saved taxpayers more than $2 billion in attempted student aid theft. FBI Assistant Director Heith Janke said the FBI had identified more than $32 million in losses, with millions more suspected.
The department said the investigation, opened by the FBI Richmond Field Office after a referral from the Education Department's Inspector General, has led to more than 40 open cases across 26 FBI field offices and more than 20 US Attorney's offices.
The Justice Department thanked Kenya's Directorate of Criminal Investigations, Asset Recovery Agency and Office of the Director of Public Prosecutions for their help. No public statement from those agencies on the case had been found as of 31 October.
In 2024 Adani Group companies pursued a 30-year privately initiated proposal to expand and run Jomo Kenyatta International Airport and signed a 30-year, Sh95.68 billion p...
Kenya offered in July 2023 to lead a multinational police mission against armed gangs in Haiti, and the UN Security Council authorized it that October. After a Kenyan cou...
On June 12, 2025, Air India flight 171, a Boeing 787-8 bound for London Gatwick, crashed into buildings in Ahmedabad shortly after takeoff, killing 241 of the 242 people ...
On January 5, 2024, the left mid exit door plug separated from an Alaska Airlines Boeing 737-9 climbing out of Portland, Oregon, and the airplane returned and landed safe...
Last updated 31 October 2026. Spotted an error? See corrections. Every event links to the record it comes from. Allegations are attributed to whoever made them.