A ghost student is not a real student who dropped out. In the Justice Department's allegation, a ghost student never existed as a student at all — only on paper, in a system, long enough for money to move.

Here is how investigators say the alleged scheme worked, in the order that matters.

Step 1: Take someone else's identity

The starting point, according to the Justice Department, was stolen personal information belonging to American citizens. That information was used to create fraudulent Federal Student Aid accounts — FAFSA accounts — in those people's names.

FAFSA is the Free Application for Federal Student Aid, the form eligible students in the US use to seek federal financial assistance for higher education. If you control someone else's identity details, you can, in the allegation, file in their name without them knowing.

Victims, in similar schemes reported elsewhere, often only find out later — through a tax form from a school they never attended, an award letter, a loan-servicer notice, or a FAFSA that gets rejected because one was already filed under their Social Security number.

Step 2: Enrol the ghost

With a FAFSA account in place, the alleged fraudsters enrolled the "ghost students" at colleges and universities. Community colleges are repeatedly named in reporting on ghost-student fraud generally, because open admission, simplified applications, no application fees and large catalogues of online courses make mass enrolment easier — and bots can submit thousands of applications quickly.

The ghost does not need to attend lectures, live in a hostel or write an exam in person. Online enrolment is the point.

Step 3: Make the ghost look alive

This is where the allegation gets more modern — and more relevant to Kenyan youth who actually use AI every day for legitimate study.

Prosecutors say some schemes used AI to complete coursework, fill out applications and keep the ghost student appearing active in class, semester after semester. Assistant Attorney General Colin M. McDonald said at a briefing, as reported: "Some use super intelligence to fill out college applications and complete coursework, so it looks like the ghost student is actually completing the class. The goal is to keep the ghost student in school for as long as possible, semester after semester after semester, stealing money from the taxpayer."

In plain terms: the AI is not the crime by itself. Using AI to study is normal now. Using AI to fake a whole student's academic life, so aid keeps flowing, is the alleged fraud.

Step 4: Divert the refund

Once aid was disbursed, the money did not stay with the college. Tuition is covered first, and the leftover — especially from grants that do not have to be repaid, like Pell Grants in the US system — is refunded. In the allegation, those refunds were diverted to bank accounts controlled by foreign actors and facilitated by US-based money mules, including Kenyan nationals.

From there, investigators allege, money moved through networks of accounts and intermediaries, including cryptocurrency. That is why the 29 October announcement includes a crypto seizure of more than $750,000 tied to a network associated with Kenyan nationals.

Why this playbook worked for so long

Three things lined up. First, scale: thousands of applications can be filed faster than a human team can check each one. Second, backlog: if a system assumes most applications are genuine, a fake one can sit in the queue and get paid before anyone looks closely. Third, distance: identities, colleges, bank accounts and crypto wallets in different countries make tracing slower — which is why the Justice Department is now stressing cross-border cooperation with Kenya's DCI, ARA and ODPP.

The US response in 2026 was designed to break that combination: real-time identity screening inside FAFSA itself, live camera checks for high-risk applicants, and a recommendation to disable hundreds of thousands of flagged aid IDs. That tightening is covered in article 20 in this series.

The line every sharp student needs to see

There is a bright line here, and it is not about being tech-savvy. Building a study notebook, using AI to summarise your own notes, automating your revision — that is smart. Filing an application in someone else's name, enrolling a person who does not exist, doing coursework for a ghost, or letting your account receive and forward money you cannot explain — that is alleged fraud, and the US announcement shows it is now being pursued across borders, not just in the US.

What we could not verify

The exact colleges used in the five charged cases, the exact AI tools allegedly used, and the full money trail from refund to crypto wallet were not published in the primary announcement used here. Those details should only be added from indictment documents or official updates, not from social-media threads.

Sources