FinCEN issued Alert FIN-2026-Alert004 in consultation with U.S. Department of Education’s (ED) Office of Inspector General (ED-OIG) and the Federal Bureau of Investigation (FBI), urging financial institutions to detect, prevent, and report suspicious activity connected to fraud schemes targeting the Department of Education's Federal Student Aid (FSA) programs. FSA disburses more than $120 billion annually to roughly 13 million students, and fraud rings exploit the process using stolen or synthetic identities to create "ghost students" (impersonated identity theft victims, sometimes with AI-generated coursework or paid accomplices) and "straw students" (complicit individuals who provide their PII for a fee), including cases with insider assistance from corrupt school staff. Proceeds are frequently laundered through money mules, shell companies, and fraudulent accounts, with criminal brokers increasingly using a "one-to-one" model to open multiple accounts and layer funds through digital assets before conversion to foreign currency. Key takeaways for financial institutions: 1. Red flags (9 identified): refunds to accounts with no enrollment history or connection to the named recipient; rapid transfers via P2P/wire to purchase digital assets or move funds internationally; multiple unrelated students' refunds landing in one account; newly opened accounts funded solely by student aid refunds; multiple accounts accessed from the same out-of-state/international IP or device; and multiple accounts opened in a short window each receiving a single refund ("one-to-one" pattern). 2. SAR filing instructions: reference key term "FIN-2026-FSAFRAUD" in SAR field 2 and the narrative; check SAR field 34(z) (Fraud – Other) and include "Federal Student Aid Fraud" in the text box; also complete fields 36 (Money Laundering) and 38 (Other Suspicious Activities) where applicable. 3. Broader reminders: standard BSA obligations apply (CTR, Form 8300, FBAR, CMIR, RMSB, DOEP), along with due diligence requirements under Section 312 and correspondent account/PEP screening; institutions are encouraged to use Section 314(b) safe harbor to share information on suspected fraud rings across institutions, including cross-border.