Treasury's FinCEN Refers $270 Million in Suspicious Financial Transactions Suspected of Being Linked to Federal Student Aid Fraud to Law Enforcement

WASHINGTON

The U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) identified approximately $270 million in suspicious financial activity potentially linked to fraud targeting federal student aid programs and referred the findings to federal investigators. The U.S. Department of the Treasury disclosed this in an October 19 press release. The U.S. Department of the Treasury characterized the amount as "suspicious financial activity" that may be linked to fraud, and did not determine it to be confirmed fraud losses or embezzled funds.

FinCEN Identified Over 20,000 Suspicious Transactions Across Approximately 100 Suspicious Activity Reports (SARs)

According to the U.S. Department of the Treasury, financial institutions submitted nearly 100 Suspicious Activity Reports (SARs) after FinCEN issued an alert in July. FinCEN reviewed these reports and identified more than 20,000 potentially suspicious transactions dating from February 2026 onward. The U.S. Department of the Treasury stated that this figure represents only suspicious activity identified and reported by financial institutions and should not be viewed as the total scope of any specific type of suspicious activity.

FinCEN referred this information to law enforcement as "tip-and-lead" information for further investigation. Secretary of the Treasury Scott Bessent stated, "Federal student aid is meant to expand educational opportunity, not line the pockets of fraudsters stealing from students and hardworking taxpayers." Bessent said, "The Trump Administration will not tolerate criminals exploiting government programs for personal gain," adding that the U.S. Department of the Treasury will work alongside financial institutions and law enforcement to identify fraud schemes and recover stolen funds.

Secretary of Education Linda McMahon stated in the same press release that a new Free Application for Federal Student Aid (FAFSA) fraud detection tool was implemented earlier this year. McMahon said this tool prevents fraud at the beginning of the federal student aid process. McMahon stated that the U.S. Department of Education is partnering with a White House task force to combat fraud, waste, and abuse in these programs, having "already saved American taxpayers more than $2 billion in less than two years." The U.S. Department of the Treasury identified this body as the "White House Task Force to End Fraud," led by Vice President JD Vance.

FinCEN Highlighted Ghost Student and Straw Student Schemes in July 24 Alert

FinCEN stated in its July 24 alert (FIN-2026-Alert004) that it consulted with the Department of Education Office of Inspector General (ED-OIG) and the Federal Bureau of Investigation (FBI). FinCEN stated that fraud rings use stolen and synthetic identities to enroll in educational institutions and improperly siphon off federal student aid funds. FinCEN noted that these schemes not only inflict losses on student aid programs, but fake enrollees also fill course seats, preventing legitimate students from taking classes.

"Ghost students" are fake students enrolled under stolen personal identifying information (PII) pretending to be real people. FinCEN stated that fraudsters use artificial intelligence (AI) and other tools to create documents blending stolen PII with fabricated details in an attempt to pass identity verification. Because students must maintain enrollment through 60% of the enrollment period to receive full refund disbursements, fraudsters have even assigned ghost students' coursework to AI chatbots, FinCEN said. FinCEN noted that the FBI has also identified rings paying individuals to complete coursework. The U.S. Department of the Treasury stated that some victims are minors who are often unaware that student aid is being disbursed in their names. FinCEN stated that such victims may be barred from receiving their own federal student aid or left burdened with student loan debt issued in their names.

"Straw students" are individuals who hand over their personal information to fraudsters in exchange for compensation, after which the fraudsters enroll them in educational institutions. The fraudsters collect the student aid refunds issued in their names. FinCEN stated that corrupt institutional staff sometimes facilitate these schemes by recruiting straw students and altering academic records. Such employees take all of the refund funds or demand a kickback from the students. FinCEN stated that fraudsters often receive the refunds into accounts that have no connection to the students themselves.

FinCEN Identified Money Mules, Shell Companies, and Fraudulent Accounts as Refund Laundering Channels

According to the FinCEN alert, the Department of Education’s office of Federal Student Aid (FSA) disburses more than $120 billion annually in grants, work-study funds, and low-interest loans to approximately 13 million recipients. Aid funds are first disbursed to schools, and any remaining balance after tuition and fees are deducted is refunded to the student.

FinCEN stated that refunds arrive via Automated Clearing House (ACH) direct deposits from schools or payment processors contracted by schools, often including "refund" and the school's name or abbreviation in the transaction description. The U.S. Department of the Treasury stated that this serves as a clue for financial institutions to identify suspicious transactions. FinCEN noted that fraudsters obscure the origin of funds by transferring refunds through money mules, shell companies, and fraudulent accounts.

FinCEN stated that money mules receive multiple refund payments into accounts unrelated to the students, then transfer the funds to other accounts or purchase virtual assets to send to wallets accessible by the fraudsters. In some cases, funds are remitted abroad via domestic money transmitters, it stated. Foreign-based fraudsters establish shell companies in the United States to receive refund payments and wire them overseas, further laundering the funds through real estate investments and other means, according to FinCEN.

As fraud rings grow more sophisticated, they also employ a "one-to-one" approach, opening multiple accounts online via criminal brokers and linking one account to each refund payment, FinCEN said. Citing law enforcement intelligence, FinCEN stated that these brokers offer account opening services on the dark web or via encrypted messaging applications and take a cut of the refunds as a fee.

Courts Sentenced Fraudsters Using Straw Students to 4 to 5 Years in Prison

One case highlighted by FinCEN in its alert involved a Fayetteville, North Carolina woman who conspired with approximately 80 straw students from around 2016 to around 2023 to fraudulently apply for federal student aid at several community colleges across the state. A federal judge sentenced the woman to five years in prison and ordered her to pay $3,641,473 in restitution to the Department of Education. FinCEN noted that the Department of Education Office of Inspector General estimated the scheme resulted in more than $5 million in aid awards and over $3.5 million in actual disbursements. The woman submitted FAFSA applications using straw students' PII while concealing her identity as the preparer, and fabricated class attendance and coursework pretending to be the students, according to FinCEN.

In another case, a university financial aid advisor, along with co-conspirators, enrolled more than 60 straw students in graduate programs across more than eight institutions, including one university, from around 2006 to around 2021. The employee charged fees promising to complete coursework for the straw students, had them apply for student loans, and pocketed a portion of the refunds. The employee was sentenced to four years in prison for conspiracy to commit wire fraud, and the court ordered restitution of the full amount of victim losses, totaling at least $5,648,238.

FinCEN stated in the alert that Executive Order 14249, "Protecting America's Bank Accounts Against Fraud, Waste, and Abuse," signed by President Donald Trump on March 25, 2025, declared it U.S. policy to prevent financial fraud and improper payments. FinCEN noted that the 2026 National Money Laundering Risk Assessment identified fraud, including government benefits fraud, as one of the largest sources of illicit proceeds in the United States. FinCEN added that the Department of Education announced in late 2025 that it had prevented $1 billion in federal student aid fraud throughout 2025.

Financial Institutions Must Reference 'FIN-2026-FSAFRAUD' in SARs

FinCEN requested that financial institutions reference the key term "FIN-2026-FSAFRAUD" in Field 2 and the narrative section of the SAR, and check Field 34(z) (Fraud-Other) with "Federal Student Aid Fraud" specified. FinCEN advised financial institutions to check whether customers receiving refunds lack a history of enrollment in educational institutions, whether multiple students' refunds are deposited into a single account, and whether newly opened accounts are funded solely by refunds. FinCEN also cited as red flags instances where multiple accounts receiving refunds are accessed from the same remote or foreign IP address or the same device.

The U.S. Department of the Treasury stated that reporting by financial institutions under the Bank Secrecy Act (BSA) and whistleblower tips help uncover criminal rings and recover taxpayer dollars. FinCEN noted that individuals who report violations of the BSA and national security laws such as the International Emergency Economic Powers Act (IEEPA) may be eligible for awards if the information leads to a successful enforcement action imposing monetary sanctions exceeding $1 million. Both domestic and foreign whistleblowers are eligible, and reports may be submitted anonymously, FinCEN said. Individuals who suspect they are victims of identity theft should notify Federal Student Aid and their loan servicer, and request a credit freeze from credit reporting agencies, FinCEN stated. FinCEN advised anyone receiving emails, text messages, or phone calls suspected of being student aid-related fraud to report them to the Department of Education Office of Inspector General hotline.

Sources (KST)

• U.S. Department of the Treasury Press Release, "U.S. Treasury Identifies $270 Million in Suspicious Activity Linked to Federal Student Aid Fraud" (October 19, 2026): https://home.treasury.gov/news/press-releases/sb0663
• U.S. Department of the Treasury Press Release, "FinCEN Issues Alert on Fraud Schemes Targeting Federal Student Aid" (July 24, 2026): https://home.treasury.gov/news/press-releases/sb0575
• U.S. Department of the Treasury Financial Crimes Enforcement Network (FinCEN), "FinCEN Alert on Fraud Schemes Targeting Federal Student Aid" (FIN-2026-Alert004, July 24, 2026): https://www.fincen.gov/system/files/2026-07/FinCEN-Alert-Fraud-Schemes-Targeting-Federal-Student-Aid.pdf