This is such an easy problem to solve. There are simple technical tools to prevent bots from enrolling. More advanced detection methods will catch basically all

This is such an easy problem to solve. There are simple technical tools to prevent bots from enrolling. More advanced detection methods will catch basically all of the rest. And then you can and should be contacting prospective students via phone or otherwise to verify enrollment. And require physical presence and ID (as my university did) before distributing aid. Just an example of truly inept leadership in multiple departments and at the top.