Scammers Reportedly Use AI Tools to Impersonate Students and Obtain Federal Aid

Between 2021 and 2025, California community colleges faced a surge in fraudulent applications—now estimated at 34% of all submissions. Reports indicate that scammers used generative AI tools, including ChatGPT, to produce identity-verifying responses that enabled them to impersonate students and obtain financial aid. The fraud allegedly resulted in over $13 million in losses over the past year alone, straining administrative and instructional systems and displacing legitimate applicants.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves coordinated criminal rings using AI chatbots to commit financial aid fraud and identity theft for personal financial gain.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by human scammers who intentionally used deployed generative AI systems to commit financial aid fraud.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The AI systems used were general-purpose chatbots and text generators, which fall under Limited Risk due to transparency obligations requiring users to be aware they are interacting with AI.

AI system and alleged parties

• AI system: ChatGPT (OpenAI)
• AI purpose: Writing Assistant; Chatbot
• Behaviour type: Tool
• Alleged developer: Unknown generative AI developers, OpenAI
• Alleged deployer: Unknown scammers, Scammers targeting California community colleges
• Alleged harmed parties: U.S. taxpayers, Financial aid recipients, California community colleges, California community college students, California community college faculty

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Severe. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Severe, indirect Severe
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Substantial
• Psychological: direct Negligible, indirect Minor
• Epistemic: direct Minor, indirect Minor
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: Yes, the reports describe massive financial losses to public institutions and fraudulent debts imposed on individuals.

Directly caused: The average financial loss per occurrence (treating the nationwide campaign as 1 occurrence) was over $100 million in 2023, with California community colleges losing at least $11.1 million in unrecovered aid.

Indirectly caused: Individual identity theft victims faced fraudulent debts, such as a $9,000 loan in San Francisco and a $5,000 loan in Louisiana, while California spent $150 million on cybersecurity to combat the fraud.

Inferred additional harm: Additional unquantified financial losses likely occurred across other states, alongside administrative costs for colleges and federal agencies resolving the fraudulent accounts.

Privacy

Reported: Yes, the reports describe identity theft involving stolen Social Security numbers and personal details.

Indirectly caused: Scammers used stolen Social Security numbers and personal details of real individuals to enroll them in classes and apply for loans without their consent.

Inferred additional harm: Thousands of other individuals likely had their private personally identifiable information compromised and exploited in these automated enrollment pipelines.

Psychological

Reported: Yes, the reports describe distress and anxiety experienced by victims of identity theft.

Indirectly caused: Victims of identity theft experienced significant distress; Wayne Chaw described it as 'very freaky' to see someone impersonating him, and Brittnee experienced anxiety over her credit score dropping 27 points.

Inferred additional harm: Widespread anxiety and emotional distress are highly likely among the thousands of other individuals whose stolen identities were used in these automated enrollment pipelines.

Epistemic

Reported: Yes, the reports describe the generation of fake student profiles and coursework to deceive educational institutions.

Directly caused: AI chatbots generated fake coursework and forum submissions to impersonate real students and maintain active enrollment.

Indirectly caused: Instructors faced difficulties distinguishing real student submissions from AI-generated ones, complicating the grading and verification process.

Inferred additional harm: The widespread use of AI to generate fake academic submissions risks eroding trust in online education platforms and the integrity of student credentials.

People affected

• Occurrences reported: 1
• People reportedly harmed: 3
• People reportedly exposed: 125000

Potential causes

Management

• Prioritizing Access Over Security: State laws mandate easy enrollment, hindering proactive fraud prevention.
• Delayed Federal ID Mandates: ID verification rules were only introduced after massive losses occurred.

Technology

• Sophisticated AI Chatbots: Scammers use ChatGPT to generate coursework and profile details.
• Vulnerabilities in Online Classes: Asynchronous platforms allow automated bots to join and mimic activity.
• Ineffective AI Detection Tools: Instructors struggle to separate bot submissions from real student AI use.

Data Inputs

• Stolen Identity Data: Scammers use stolen SSNs and personal data to create fake profiles.
• Lack of Identity Verification Data: Certain groups are exempt from initial ID verification to ease enrollment.

Human Factors

• Overburdened Instructors: Teachers must manually identify and filter out bots from online classes.
• Real Students Using AI Tools: Widespread AI use by real students masks fraudulent bot behaviors.

Process and Methods

• Loosened Financial Aid Rules: Pandemic-era policy changes simplified access but reduced security checks.
• Asynchronous Online Formats: Self-paced online courses make it easy for bots to operate undetected.
• Enrollment-Based Funding Incentives: Colleges face financial penalties for dropping suspected fake students.

Regulatory Environment

• Staff Cuts at Education Department: Federal staff reductions weaken the ability to investigate and prevent fraud.
• Inadequate Reporting Channels: Victims face massive delays when trying to report identity theft to SSA.

Information quality

• Classification confidence: High
• Reason for confidence: The reports from multiple reputable sources provide consistent, detailed accounts of the financial aid fraud, including specific monetary losses and first-hand accounts from named victims of identity theft.
• Ambiguities identified: The exact technical implementation of the 'ghost student' chatbots and how automated they were remains slightly vague, with reports referring to them generally as 'chatbots' or 'AI tools'.
• Alternative interpretations: None. The reports clearly point to human-driven financial fraud enabled by generative AI tools.

Criminal rings leveraged generative AI to scale financial aid fraud against US community colleges, stealing over $100 million by fabricating student profiles and coursework. While economically damaging to educational institutions and disruptive to individual identity theft victims, the national security impact remains minor and manageable under standard law enforcement and cybersecurity procedures.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Criminal rings

Threat characteristics

• Imminence: Long-term. The fraud represents an ongoing, systemic vulnerability in online enrollment and verification systems rather than an immediate national security crisis.
• Autonomy: Human-controlled. Scammers actively directed the AI to generate specific coursework and application materials, using it as a tool to support their fraudulent operations.
• Novelty: Evolved capability. Represents a significant automation-driven advancement of existing financial aid and identity fraud methods by leveraging generative AI to mimic student activity.

Impact by dimension

• Physical security: Negligible. The incident is entirely cyber-enabled financial fraud with no impact on physical systems, critical infrastructure, or human safety.
• Information security: Negligible. AI was used to generate fake student coursework for financial fraud, not for state-sponsored disinformation campaigns or intelligence compromise.
• Sovereignty: Minor. The fraud targeted and exploited state and federal financial aid systems, representing a minor disruption to government-administered educational funding programs.
• Economic security: Minor. Siphoned over $100 million in public funds and forced $150 million in cybersecurity spending, representing a notable but localized economic loss managed under standard fraud-prevention procedures.
• Societal stability: Minor. Caused widespread identity theft and displaced legitimate students from courses, affecting individual privacy and access to education, but did not threaten broader societal stability.