NSFAS bursary fraud: 11 suspects, four companies in Hawks net

Shell Companies, Kin Accounts and a Whirlwind of Missing Tenders

Investigators at the Hawks have traced a dizzying money trail that starts with fake student profiles and ends in the bank balances of relatives and shelf companies. Early tallies put the suspected loot at “several million rand” siphoned from the National Student Financial Aid Scheme since 2021, but forensic auditors warn the figure keeps climbing as new ledgers surface.

The racket’s architects allegedly harvested valid ID numbers, invented academic histories and uploaded the “applicants” to NSFAS portals. Once the scheme ticked the bureaucratic boxes, tuition and living-allowance payments skipped off to enterprises that exist only on paper, or to cousins, siblings and spouses who never set foot in a lecture hall.

So far the Hawks have grilled six suspects, three of whom already face fraud, theft and money-laundering charges. Two company bank accounts are frozen and a third is under curator watch, but detectives believe the network is wider, hinting that “fresh arrests are days, not weeks, away.”

Inside the Digital Paper Trail: From Click to Cash

Case files show the first red flag popped up in late 2022 when NSFAS internal auditors matched duplicate cell-phone numbers across hundreds of new applications. Each profile used a different ID book, yet the same handset verified them all. That tiny data slip opened the door to a full-scale probe involving VNS Analytics, the Special Investigating Unit and state cyber-crime labs.

Armed with court orders, analysts pulled server logs, WhatsApp backups and CCTV clips from campus Wi-Fi hubs. The footage allegedly places one suspect at a Pretoria cyber café batch-uploading profiles in exchange for kick-backs. IP addresses from that café later appear in the back-end history of at least 1,400 approved “students.”

Banking graphs drawn by the unit reveal money leaving NSFAS on a Monday, landing in a shell consultancy on Tuesday, taking a 15-minute pit-stop, then scattering into 42 individual accounts by close of business. One recipient used her share to buy two SUVs the same afternoon; another settled a property bond in cash. Investigators call the pattern “spray and pray layering,” a classic wash cycle meant to blur the origin of state funds.

Collateral Damage: Real Students Left Stranded

While the alleged scammers shopped for cars, thousands of actual undergraduates woke up to cancelled registrations and empty meal-ticket wallets. NSFAS insists it has since reinstated legitimate beneficiaries, but campus reps say the claw-back process took months, pushing some learners into debt or temporary drop-out status.

University finance desks bore the brunt of the chaos. Staff had to reverse transactions, blacklist ghost entries and rebuild audit certificates under tight deadlines. One bursar at a Gauteng university described sleepless nights spent “unpicking a Rubik’s cube of fraud,” adding that the reputational hit makes donors skittish about future partnerships.

The scheme also rekindled public anger over NSFAS corruption after previous scandals involving direct deposits to service providers. Critics argue that until biometric verification and real-time cross-checks with Home Affairs become standard, digital bandits will keep probing the system’s weak seams.

Next Moves: Courtrooms, Asset Seizures and Policy Overhaul

The first six accused return to the Pretoria Specialised Commercial Crime Court in August, where prosecutors will oppose bail and push for a stiff sentence schedule. Investigators have prepared 3,700 digital exhibits and close to 90 witness statements, signalling they plan to fast-track the matter under the priority offences doctrine.

Beyond the dock, the state aims to seize properties, vehicles and cryptocurrency wallets linked to the main actors. A draft restraint order lists four houses in Johannesburg’s northern suburbs, a fleet of hatchbacks and an undisclosed sum of Bitcoin parked on an offshore exchange. Should the court grant the order, proceeds will channel into a ring-fenced education fund meant to offset losses suffered by valid students.

On the policy front, Higher Education Minister Blade Nzimande has ordered a full review of NSFAS payment gateways. Pilot projects for facial-recognition onboarding and two-factor bank confirmation will roll out in the 2025 academic cycle. Officials hope tighter tech, stiffer audits and quicker criminal consequences will send a loud message: tuition looters will find the noose drawing tighter, not looser, in years to come.

What is the NSFAS "ghost learner" racket?

The NSFAS "ghost learner" racket involves criminals creating fake student profiles using real ID numbers and invented academic histories to unlawfully obtain tuition and living allowance payments from the National Student Financial Aid Scheme. These funds are then diverted to shell companies or personal bank accounts of relatives.

How was the NSFAS "ghost learner" racket discovered?

The racket was discovered in late 2022 when NSFAS internal auditors identified duplicate cell-phone numbers across hundreds of new applications. Each fake profile used a different ID but was verified by the same phone number, triggering a full-scale investigation involving VNS Analytics, the Special Investigating Unit, and state cyber-crime labs.

Who is investigating this scam and what actions have been taken?

The Hawks, South Africa's Directorate for Priority Crime Investigation, are leading the investigation. They have frozen multiple company bank accounts, arrested six suspects, with three already facing charges of fraud, theft, and money laundering. More arrests are anticipated as the network is believed to be wider.

How much money was stolen and where did it go?

Early estimates suggest "several million rand" has been siphoned from NSFAS since 2021, and this figure is still climbing. The money was traced from NSFAS to shell companies and then rapidly dispersed into numerous individual accounts belonging to relatives and associates of the perpetrators. Some funds were used to purchase high-value assets like SUVs and settle property bonds.

What was the impact of this scam on legitimate students?

Thousands of real students faced cancelled registrations and lost their financial aid, leading to debt or temporary drop-out status. While NSFAS claims to have reinstated legitimate beneficiaries, the claw-back process was lengthy and caused significant stress and financial hardship for affected students. University finance departments also struggled to manage the chaos and rebuild their audit certificates.

What measures are being taken to prevent future scams?

The Higher Education Minister has ordered a full review of NSFAS payment gateways. Pilot projects for facial-recognition onboarding and two-factor bank confirmation are scheduled to roll out in the 2025 academic cycle. The aim is to implement tighter technology, more stringent audits, and quicker criminal consequences to deter future fraudulent activities.