Three factors drove the surge: the expansion of fully online and asynchronous programs that removed in-person verification, the availability of stolen and synthetic identities sold through fraud networks, and large federal aid programs that make the payoff worthwhile. Coordinated rings now target multiple institutions simultaneously, often hitting open-admission community colleges first before moving to four-year institutions.