In May 2024, Francis Mogambi arrived in the United States after winning the Diversity Visa lottery, opening a path to permanent residency. Just over two years later, the Kenyan national was arrested in a federal investigation alleging a sophisticated scheme to steal identities, create fake college students, and syphon American taxpayer-funded financial aid.
On October 19, 2026, a grand jury in Nebraska indicted Mogambi on five counts of theft of government money and five counts of aggravated identity theft. Prosecutors allege that between November 2025 and May 2026, he worked with associates in Kenya to steal the identities of US citizens and use them to enrol fictitious students in American colleges.
The case has now become part of a much larger investigation exposing an alleged fraud network with international links stretching from the United States to Kenya.
How the Ghost Student Network Allegedly Worked ¶
US authorities have dubbed the investigation Operation Ghostbusters, targeting an alleged nationwide operation that exploited federal student aid programmes by creating students who did not actually exist.
According to prosecutors, fraudsters obtained the personal information of Americans and used the stolen identities to register fake students at colleges. The identities were sometimes reportedly sold online for as little as $4 to $8.
The targets included low-income Americans who had never attended college. Once their identities were used to create fraudulent student accounts, federal financial aid could be accessed in their names.
The alleged operation went further than simply creating fake college applications. Authorities say those behind the scheme used sophisticated technology and what prosecutors described as “super intelligence” to make the fictitious students appear genuine.
The fake students could allegedly complete coursework and remain active in classes, creating the impression that legitimate students were attending college. That allowed financial aid payments to continue flowing.
“The goal is to keep the ghost student in school as long as possible,” Assistant Attorney General Colin M. McDonald said at a news conference on October 29.
That meant the fraud could continue semester after semester, potentially turning a single stolen identity into a continuing source of taxpayer-funded payments.
Mogambi Allegedly Took 30 Percent ¶
Mogambi's alleged role illustrates how the wider network is accused of operating across borders.
US prosecutors allege that after fictitious students received financial aid, Mogambi diverted the money to himself and associates. He allegedly kept 30 percent before sending the remainder to people in Kenya.
The intended loss connected to his case was approximately $20,000.
Court documents further allege that Mogambi received $2,000 every week and tried to recruit another person into the operation. Prosecutors say he told the prospective recruit that he needed a business that would enable him to cash larger cheques without paying taxes.
Mogambi was arrested shortly after the indictment was returned and remains in custody pending trial.
The allegations have not been proved in court, and Mogambi is presumed innocent unless convicted.
If convicted, however, the consequences could be severe. The US Justice Department says he faces a mandatory minimum prison term of 10 years, alongside potential forfeiture and restitution orders.
Kenya Emerges as a Major Destination for the Alleged Proceeds ¶
The Mogambi case is only one piece of the wider investigation.
US authorities say five indictments have so far been issued, while another 40 investigations remain open. Hundreds of people are believed to have been affected after their personally identifiable information was allegedly stolen and used to obtain federal student aid.
Investigators identified 830,840 potentially fraudulent Federal Student Aid identification numbers associated with nearly $130 million in financial aid during September and October 2026.
The figure does not represent confirmed losses. It refers to financial aid associated with accounts investigators identified as potentially fraudulent.
The sheer scale has nevertheless raised alarm within the US government.
McDonald said stolen money frequently moved overseas, including to Kenya.
In September, US officials travelled to Kenya to work with local authorities on extraditions, prosecutions and recovery of suspected proceeds.
That cooperation produced a major breakthrough when investigators seized more than $750,000 from a cryptocurrency account belonging to a Kenyan national allegedly connected to the wider fraud operation.
The US Justice Department described the seizure as the first international seizure of its kind in Kenya.
Importantly, the cryptocurrency seizure was not connected to Mogambi's individual case.
Other Kenyan Links Point to a Wider Network ¶
A separate case in Virginia has further exposed the alleged Kenya connection.
US prosecutors allege that a Kenyan national received more than 700 fraudulent student-aid refunds worth approximately $1.44 million.
At least $1.3 million was subsequently moved through thousands of transactions involving accounts in both the United States and Kenya, according to prosecutors.
In New Jersey, three people have also been charged with allegedly acting as money mules in a scheme involving more than $1 million in federal student aid.
Prosecutors allege that the suspects received the money through US bank accounts, retained a portion and transferred the remainder to alleged co-conspirators in Kenya linked to a purported safari company.
The cases suggest that the suspected fraud was not simply about stealing identities or manipulating college admissions. It allegedly involved a sophisticated financial pipeline designed to move American taxpayer money through multiple accounts and jurisdictions.
The human cost could also be substantial.
Americans whose identities were allegedly stolen can be left with student loan debts for education they never pursued. Their credit records can be damaged and their names attached to financial obligations they never authorised.
McDonald described the impact bluntly, noting that a victim could have his identity stolen, his credit placed at risk and his name left on the bill.
US authorities have vowed to dismantle the network and pursue those who allegedly profit from the scheme.
For Kenya, the investigation raises another uncomfortable question about the country's growing links to international financial crime. As US investigators trace stolen student-aid money across borders, Kenyan nationals and accounts are increasingly appearing in the alleged money trail.
Operation Ghostbusters is therefore no longer just an American student-aid fraud investigation. It is becoming a cross-border probe into how stolen identities, technology, financial accounts and international money networks can combine to turn a programme designed to help vulnerable students into a pipeline for organised fraud.
