90%
SSN disclosed in application text
ssn_request
Case Study — Community College
1 in 3 applications
were not real.
$13M gone to students who never existed. AI-generated ghost students enrolled, submitted AI-written coursework, collected Pell Grants, and disappeared. 116 campuses. 2.1 million real students competing for slots and aid against an army of synthetic identities.
This is the fraud you cannot spot with a human in the loop. Forty-eight applications from the same IP in two minutes. The suss. API catches it at submission.
What happened
The attack.
01
Fake applications at scale
Fraudsters used stolen and synthetic identities to submit hundreds of applications programmatically. At some colleges, 50 applications arrived within two seconds.
02
AI-generated coursework
Ghost students attended class by submitting AI-written assignments. They looked active enough to maintain enrollment and avoid triggering academic flags.
03
Financial aid disbursement
Pell Grants and state aid were disbursed to newly opened accounts. Maximum aid of $7,395 per semester per ghost student, multiplied across thousands of fake enrollees.
Source: U.S. Department of Education OIG
Detection
What suss.
would have seen.
We ran a reconstructed version of this attack through the production API. Here's what fired.
suss. verdict
90%
HIGH RISK
Ghost Student Enrollment Fraud Detected
6 threat indicators fired
85%
Bulk submission pattern detected
ghost_student_enrollment_fraud
90%
48 applications from same IP block in 120 seconds
velocity_anomaly
85%
Financial aid routed to account opened 3 days ago
new_account_disbursement
80%
Maximum Pell Grant disbursement to a neo-bank account
max_aid_fintech_routing
80%
No prior credit file, no employment history, PO box address
synthetic_identity_indicators
Recommended actions
- 01Hold all financial aid disbursement for this application.
- 02Flag the IP block for velocity analysis. 48 applications in 120 seconds is not human behavior.
- 03Verify SSN through the Social Security Administration before processing enrollment.
- 04Cross-reference mailing address against known commercial mail drops.
- 05Run AI detection on the personal statement and submitted coursework.
- 06Report to the U.S. Department of Education Office of Inspector General.
Impact
The cost.
$13M
Lost in state and federal funds
116
Campuses affected statewide
223K+
Fraudulent enrollments flagged
Pattern
Why ghost students are invisible to humans.
01
Ghost students look real
They enroll in classes, submit assignments, and maintain activity. From the registrar's perspective, they are indistinguishable from real students.
02
AI-generated work passes human review
Coursework is generated by large language models and submitted on schedule. Individual professors cannot detect synthetic work across hundreds of students.
03
Synthetic identities have no prior record
These are not stolen identities with fraud alerts. They are fabricated from scratch, with SSNs that pass basic validation but have no credit history.
04
Volume overwhelms manual verification
Community colleges process hundreds of thousands of applications. Manual identity verification at this scale is not feasible.
With vs without
Two timelines.
Two outcomes.
Without suss.
- 01Application arrives. Passes basic validation.
- 02Synthetic SSN has no fraud alert on file.
- 03Student enrolls and submits AI-written work.
- 04Pell Grant disbursed to a newly opened account.
- 05Ghost student cashes out and disappears.
- 06$13M drained across the system before anyone notices.
With suss.
- 01Application flagged at 90% risk on submission.
- 02Synthetic SSN and missing digital footprint detected.
- 03Velocity anomaly: 48 apps from same IP in 2 minutes.
- 04AI-generated personal statement flagged before enrollment.
- 05Financial aid hold triggered before disbursement.
- 06$13M protected. Real students get their slots and aid.
Get protected
Don't be the
next case study.
Book a 15-minute pilot conversation. We'll show you the threats targeting your institution right now and walk through deployment.
Free 30-day pilot for qualified institutions. No IT integration required.