Money Mule Accounts

A money mule is a person who receives, transfers or withdraws money obtained through fraud or other crime on behalf of criminals. The person may participate knowingly or may be deceived through fake employment, investment, romance or commission-based offers; the bank account used for these transactions is commonly called a mule account.

How money mule networks operate

Money mules provide the bridge between a cyber fraud and the criminals who seek to use its proceeds. Their accounts make the movement of stolen funds appear to involve ordinary banking transactions.

• Fraud proceeds are received in the mule's bank account, wallet or other payment instrument.
• The mule is instructed to transfer the money to other accounts, withdraw it as cash or convert it into another form.
• A commission may be retained, while the remaining amount is rapidly moved through multiple accounts to obscure the money trail.
• Criminals commonly recruit mules through unsolicited job offers, social media messages and promises of easy income.

Why mule accounts matter for cyber security

Mule networks enable cybercriminals to convert fraud proceeds into usable funds while distancing themselves from the victim-facing offence. They therefore support the financial infrastructure of phishing, impersonation fraud and account compromise.

• Multiple intermediary accounts complicate investigation, recovery and identification of the principal offenders.
• An unwitting account holder may suffer account freezing, financial loss and investigation because the account has handled suspected criminal proceeds.
• Banks use transaction monitoring and know-your-customer controls to identify unusual account activity and interconnected mule accounts.

Prevention and response

• Individuals should never lend, rent or sell their bank account, payment credentials, SIM card or identity documents to another person.
• Requests to receive and forward money for a commission should be treated as a serious fraud warning.
• Suspected cyber financial fraud should be reported immediately to the bank and through the national cybercrime helpline 1930 or the National Cyber Crime Reporting Portal.

How UPSC asks this