Ghost student fraud: DOJ seizes over $750,000 in crypto

Contents

At a glance

US prosecutors announced a cryptocurrency seizure and charges over stolen identities used for student aid. The release does not establish repayments to victims.

A seizure announced with criminal charges

The US Justice Department announced on 29 October that investigators had seized more than $750,000 in cryptocurrency connected to an alleged student-aid fraud scheme. Prosecutors also announced charges against five defendants as part of Operation Ghostbusters, an investigation spanning several US jurisdictions and cooperation with Kenyan authorities.

The case concerns stolen identities used to obtain federal educational funding. It is a public-funds and identity-theft investigation involving a crypto account. The announcement describes allegations that prosecutors must prove; it does not report convictions of the defendants.

[1][2]

The alleged route through bank accounts

According to the Justice Department, participants used Americans’ stolen personal information to create fraudulent Federal Student Aid accounts and enroll fictitious students. They allegedly redirected loan and grant refunds through bank accounts, with US-based money mules helping move funds to people overseas.

The department says assistance from Kenyan law-enforcement partners helped investigators seize the cryptocurrency from an account belonging to a Kenyan national connected to the scheme. Its announcement does not identify the seized tokens, name a cryptocurrency exchange holding the account or provide a public transaction-by-transaction account of that seizure.

[1][2]

What the seizure does not establish

The reported figure measures cryptocurrency seized in the investigation. Readers should keep it separate from losses alleged across the wider student-aid scheme. The announcement does not state that all proceeds have been located, specify a final forfeiture judgment for the crypto or confirm that the seized assets have been distributed to victims.

For someone whose identity was misused, an enforcement announcement therefore leaves individual questions open: whether their records are affected, which institution holds the disputed account, and what evidence that institution needs. Our related reporting explains how to document a compensation claim and check a purported compensation programme before sharing information.

[1][2]

Reporting identity theft through official channels

The Justice Department directs suspected victims to the Department of Education’s official complaint form. It also says the FBI has written to many identified victims and directs questions to local field offices. Readers can reach the form through the source linked below.

The Consumer Financial Protection Bureau advises identity-theft victims to contact their financial institution’s security or fraud department and report the theft at IdentityTheft.gov. It recommends using official websites and phone numbers to contact agencies directly, because scammers also impersonate investigators. Keep copies of reports and correspondence for the institution handling your case.

[3]

Evidence & sources

Source record: Oct 29, 2026 · Checked: Nov 1, 2026

Record limits · Checked on 1 November 2026. DOJ announced the case on 29 October. Charges are allegations; seizure does not establish completed repayments.

[1]Source reported
DOJ announced charges against five defendants and the seizure of more than $750,000 in cryptocurrency in Operation Ghostbusters.
Supporting excerpt: Justice Department unveils indictments in nationwide ‘Ghost Student’ fraud scam linked to Kenyan network
Original quotation
The Department is charging five defendants and announcing the seizure of more than $750,000 in cryptocurrency tied to this scheme through a network associated with Kenyan nationals.
Justice Department unveils indictments in nationwide ‘Ghost Student’ fraud scam linked to Kenyan network ↗
Source language: EN · Captured Nov 1, 2026
[2]Source reported
DOJ alleges stolen identities, fictitious student-aid accounts and money-mule bank transfers; charges are allegations, not convictions.
Supporting excerpt: Justice Department unveils indictments in nationwide ‘Ghost Student’ fraud scam linked to Kenyan network
Original quotation
After loan and grant disbursements, the refunds were diverted to bank accounts controlled by foreign actors and facilitated by U.S.-based money mules, including Kenyan nationals.
Justice Department unveils indictments in nationwide ‘Ghost Student’ fraud scam linked to Kenyan network ↗
Source language: EN · Captured Nov 1, 2026
Supporting excerpt: Justice Department unveils indictments in nationwide ‘Ghost Student’ fraud scam linked to Kenyan network
Original quotation
An indictment, information, or complaint is merely an allegation.
Justice Department unveils indictments in nationwide ‘Ghost Student’ fraud scam linked to Kenyan network ↗
Source language: EN · Captured Nov 1, 2026
[3]Source reported
DOJ directs suspected victims to the Education Department complaint form; CFPB recommends direct official contact and identity-theft reporting.
Supporting excerpt: Justice Department unveils indictments in nationwide ‘Ghost Student’ fraud scam linked to Kenyan network
Original quotation
Alert: If you believe you are a victim of this fraud, please report your matter to the Department of Education Hotline Complaint Form:
Justice Department unveils indictments in nationwide ‘Ghost Student’ fraud scam linked to Kenyan network ↗
Source language: EN · Captured Nov 1, 2026
Supporting excerpt: What do I do if I am a victim of identity theft?
Original quotation
Contact the security or fraud departments at your financial institutions.
What do I do if I am a victim of identity theft? ↗
Source language: EN · Captured Nov 1, 2026
Supporting excerpt: What do I do if I am a victim of identity theft?
Original quotation
Contact financial institutions, law enforcement, the DOJ, or FTC directly using official websites and phone numbers, because:
What do I do if I am a victim of identity theft? ↗
Source language: EN · Captured Nov 1, 2026