meta_id 3351646

On July 24, 2026, the Financial Crimes Enforcement Network (FinCEN), part of the U.S. Department of the Treasury, issued an alert urging financial institutions to detect, prevent, and report suspicious activity connected to fraud schemes targeting federal student aid programs. The alert addresses schemes in which fraudsters use stolen and fraudulent identities to enroll in educational institutions and unlawfully acquire funds from federal student aid programs. FinCEN identified two primary fraud methodologies. First, fraudsters create "ghost students" by illegally obtaining personally identifiable information (PII) to impersonate identity theft victims or by using artificial intelligence and other tools to generate synthetic identities combining stolen PII with fabricated details. Second, fraudsters leverage complicit "straw students"—individuals who provide their PII in exchange for a fee—and enroll them at educational institutions to collect financial aid refunds. Corrupt staff at educational institutions may also act as insiders, recruiting straw students and manipulating educational records. These schemes result in losses to federal student aid programs and, in some cases, prevent legitimate students from enrolling in classes due to fraudulent enrollments. Financial institutions can identify suspicious activity by monitoring deposits made directly by educational institutions or intermediaries. Student aid refund payments typically occur via Automated Clearing House transfers with transaction references including the term "refund" and the educational institution's name or abbreviation. After obtaining student aid refunds, fraudsters may launder funds through money mules, shell companies, and fraudulent accounts. The alert supports Executive Order 14249, Protecting America's Bank Account Against Fraud, Waste, and Abuse, and reflects Treasury's commitment to eliminating government benefits fraud.