FinCEN Identifies $270 Million in Suspicious Activity Linked to US Student Aid Fraud

The US Department of the Treasury has identified approximately $270 million in suspicious financial activity potentially connected to fraud targeting federal student aid programmes. The Financial Crimes Enforcement Network (FinCEN) has referred its findings to federal investigators for further examination, following the identification of more than 20,000 potentially suspicious transactions dating from February 2026.

The announcement, made on 19 October 2026, follows a FinCEN alert issued on 24 July urging financial institutions to identify and report transactions potentially linked to student aid fraud. Nearly 100 suspicious activity reports (SARs) were filed by financial institutions after the alert.

The $270 million figure represents potentially suspicious financial activity rather than a confirmed amount stolen from federal programmes. The authorities have not disclosed the number of individuals or institutions involved, the amount of any confirmed losses, or how much money may ultimately be recovered.

According to the Treasury, the suspected schemes involve the fraudulent enrolment of individuals at educational institutions to obtain financial assistance intended for legitimate students. The funds may subsequently be redirected through bank accounts and other financial channels to conceal their origin and transfer them to the individuals organising the schemes.

One method involves so-called “ghost students”. In these cases, perpetrators use stolen personal information, including names and Social Security numbers, to enrol fictitious students or impersonate real individuals. Applications may be supported by fabricated documents designed to satisfy identity verification requirements.

The schemes can also involve synthetic identities, which combine genuine personal information with invented details. The use of such identities may make it more difficult for educational institutions and financial service providers to determine whether an applicant is genuine.

Victims may remain unaware that their identities have been used to obtain student assistance. In addition to the diversion of public funds, the misuse of personal information can expose individuals to identity theft disputes and potential financial liabilities associated with applications or enrolments they never authorised.

A second method involves “straw students”, who are real individuals recruited to provide their personal information for use in fraudulent applications. According to the Treasury, these individuals may receive payment in exchange for their information, while the organisers retain the resulting financial aid refunds.

The authorities have also identified cases in which employees of educational institutions allegedly assist fraud rings by recruiting participants or manipulating academic records. Such involvement can allow fraudulent enrolments to appear legitimate within institutional systems.

The schemes can affect both the financial integrity of federal student aid programmes and access to education. Fraudulent enrolments may divert funding from eligible recipients and occupy places in classes that would otherwise be available to genuine students.

FinCEN’s July alert specifically addressed how banks and other financial institutions may identify suspicious activity associated with these schemes. Student aid refunds are often transferred electronically by educational institutions or payment contractors, and transaction descriptions may contain the word “refund” alongside the institution’s name or abbreviation.

These payment references can provide an initial indication that a transaction is associated with student assistance. However, the presence of an educational institution’s name or a refund description does not, by itself, establish that a payment is fraudulent.

After the funds are received, perpetrators may move them through money mules, shell companies or fraudulent accounts. These arrangements can obscure the relationship between the original payment and its ultimate recipient, making it more difficult to trace the proceeds and identify those controlling them.

Money mules may receive funds into their accounts before transferring them to other beneficiaries, while shell companies can create additional layers between the payment and the individuals benefiting from it. Where criminal proceeds are knowingly transferred or concealed, such activity may raise potential money laundering concerns.

FinCEN’s alert encouraged financial institutions to review transactions for indicators associated with student aid fraud and to submit SARs where the applicable reporting requirements are met. The reporting process provides investigators with financial information that may help establish links between apparently separate accounts, payments and suspected participants.

The nearly 100 SARs submitted following the July alert contributed to the information reviewed by FinCEN. The agency identified more than 20,000 potentially suspicious transactions and referred its findings to law enforcement as investigative leads.

The transaction count should not be interpreted as the number of proven offences or individual victims. The Treasury has also cautioned that reports submitted by financial institutions do not represent the full extent of potentially suspicious activity. The actual scale of the schemes remains subject to investigation.

The October announcement did not introduce a new general reporting requirement for banks or announce penalties against financial institutions. Instead, it describes the use of financial intelligence to support investigations into suspected fraud affecting federal student aid programmes.

The Treasury has stated that it will continue working with financial institutions and law enforcement agencies to identify suspected schemes, trace financial flows and support efforts to recover public funds. No specific defendants, criminal charges, convictions or final recovery amounts were announced in connection with the $270 million identified in the review.

The investigation remains ongoing, and the suspicious transactions identified by FinCEN have not all been established as fraudulent. The referrals are intended to provide federal investigators with information for further examination of the suspected schemes and the individuals potentially involved.

By fLEXI tEAM