Mule account detection
Also called money mule detection
Mule account detection is the work banks and payment firms do to find accounts used to receive and pass on criminal funds. Mules may be recruited people, accounts opened with stolen or synthetic identities or accounts taken over by criminals. Detection combines onboarding checks, behavioural analytics, transaction monitoring and data shared between firms.
How it works
At onboarding, firms look for identity fraud, device reuse and links to known mule networks. After opening, they watch for typical mule patterns: sudden inbound payments from many senders, funds moved out within minutes and logins from unusual devices. Network analytics links accounts that share devices, addresses or counterparties.
Mule accounts are the cash-out route for APP fraud and money laundering. Under UK reimbursement rules the receiving firm pays half of each reimbursed scam loss, so detection carries a direct cost. Firms that find a mule account typically freeze or exit it, file a suspicious activity report and share data where the law allows.
The rules
Makes the receiving firm bear 50% of each reimbursed APP scam loss, linking mule account controls to direct cost.
Payment firms receiving Faster PaymentsAllows outbound payments to be delayed up to four business days where a firm suspects fraud, including onward mule transfers.
UK payment service providersCreates the principal money laundering offences, which cover moving or holding criminal property through an account.
Any person, including account holders acting as mulesCommon questions
What is a money mule account?
An account used to receive criminal funds and move them on, often to hide their origin. The holder may be a recruited person paid a fee, a victim whose account was taken over or a fake identity. Allowing an account to be used this way can be a money laundering offence.
What are signs of a mule account?
Common signs include inbound payments from many unrelated senders, funds moved out within minutes, balances returning to near zero, activity inconsistent with the customer's profile and logins from devices or locations linked to other accounts.
Why do receiving banks care about mule accounts?
Under UK APP fraud rules the receiving firm pays 50% of each reimbursed scam loss. Mule accounts also expose firms to money laundering risk and regulatory action. Detecting them early cuts both losses and onward laundering.
