Lucknow: Amid rapidly evolving cybercrime patterns and a sharp rise in digital fraud cases across the state, the Uttar Pradesh Police have rolled out a decisive operational roadmap targeting what officials describe as the financial backbone of organised cyber fraud — mule bank accounts. Detailed instructions issued by the police headquarters make it clear that bank accounts being misused for illegal money transfers, money laundering and even terror financing will now be placed under special surveillance, followed by swift investigation and strict legal action.
The directions are based on an official order issued by the Deputy Inspector General of Police (Cyber Crime), which draws on intelligence and analytical inputs received from I4C, FIU, and other central agencies. Using these inputs, the state police have prepared a time-bound, accountability-driven operational roadmap, which is being implemented across all districts and police commissionerates. The message from the police headquarters is unequivocal:
“There will be no laxity or delay in identifying, investigating and prosecuting mule bank accounts.”
Why mule bank accounts have become the biggest link in cybercrime
According to senior police officials, cybercrime today is no longer confined to fake calls, phishing links or fraudulent mobile applications. The real challenge lies in the money trail — how illegally generated funds are concealed, layered and ultimately made to appear legitimate. This is where mule bank accounts play a decisive role.
Technically, these are bank accounts opened in the names of ordinary individuals but operated or controlled by organised cybercriminal networks. Such accounts act as conduits for moving illicit funds while distancing the actual perpetrators from the transaction trail. These accounts are commonly used for:
- Online fraud
- Fake investment and trading scams
- Romance and dating frauds
- Online gaming and job scams
- Large-scale money laundering
- And, in certain cases, terror funding
Police officials note that in many cases, account holders either rent out their bank accounts for quick money or are lured into opening accounts by agents promising jobs, commissions or easy income. Under the law, allowing one’s bank account to be misused constitutes criminal complicity, even if the individual did not directly commit the fraud.
Data was available, action lagged — headquarters acknowledges gaps
In a candid internal assessment, the police headquarters have acknowledged that:
- Central agencies such as I4C and FIU were continuously sharing lists of suspected mule accounts
- Districts and police commissionerates were receiving station-level intelligence inputs.
However,“In several locations, action was neither timely nor proportionate to the seriousness of the threat.”
In other words, intelligence existed, but enforcement on the ground did not always reflect its urgency. This prompted a DGP-level review followed by a video conference with senior officers, after which firm directions were issued:
- No delay in verification and action
- Accountability for every flagged account
- Responsibility to be fixed for negligence or inaction
How mule bank accounts will now be identified
For the first time, the police headquarters have issued clear and measurable indicators for field officers to flag suspicious accounts. These include:
- Sudden transactions involving lakhs or crores of rupees
- A stark mismatch between the account holder’s income profile and transaction volume(for example, students, farmers or unemployed individuals handling large sums)
- Immediate withdrawal of funds after credit
- Routing money through multiple accounts to obscure the trail (layering)Accounts opened under the guise of fake trading, crypto or part-time job schemes
- Frequent access from different cities or IP addresses
- Conversion of funds into crypto assets or digital wallets
In simple terms, officials say, these are accounts that appear normal on paper but behave abnormally in practice.
Standardised investigation process for field units
A step-by-step investigation protocol has now been laid down for every police station, cyber police unit and investigating officer:
- KYC and bank records
- Who opened the account
- Which mobile number and email ID are linked
- Who is actually operating the account
- Interrogation of the account holder
- Was the account opened through deception or inducement?
- Was there a job offer, scheme or commission involved?
- Who is the real beneficiary using the account?
Role of bank staff and intermediaries
Where clusters of suspicious accounts are detected, police have been instructed to examine the role of: Bank employees, Third-party agents, KYC verifiers. Their CDR and IPDR records may be analysed to detect possible collusion or systemic abuse.
Immediate action once a mule account is confirmed
Once an account is identified as a mule account:
- The account will be immediately debit-frozen
- All further transactions will be blocked
If the account holder’s role appears suspicious:
- Police will register a case on their own complaint
- If the account holder is found to be a victim of deception:
- They will be informed, and action will focus on the actual cybercriminals
The headquarters have also mandated that: Every public awareness programme must include warnings about the dangers of mule bank accounts.
Data-driven policing: NCRP, SAMANVAYA and PRATIBIMB
The instructions clearly state that investigations must not stop at FIR registration alone. Field officers have been directed to actively use:
- NCRP (National Cyber Crime Reporting Portal)
- SAMANVAYA (JMIS)
- PRATIBIMB Portal
Using data from these platforms, officers must:
- Prepare station-wise action plans
- Ensure fast, coordinated and evidence-based enforcement
- In effect, cyber investigations will now be data-driven rather than reactive.
Strong warning: ‘Renting your bank account is a crime’
The most forceful message in the order is unambiguous:
“Allowing your bank account to be misused is itself a punishable offence.”
Those who lend or rent their bank accounts may face: Arrest, Criminal prosecution, Freezing of bank accounts, Financial blacklisting. Police have made it clear that ignorance or monetary temptation will not be accepted as a defence.
