A victim may lose money to an online investment scam, fake trading platform or fraudulent phone call, but the stolen funds rarely move directly into an account openly controlled by the mastermind.
Mule accounts provide an intermediate destination, allowing cybercriminals to receive payments, transfer funds through other accounts and make tracing the money more difficult. These accounts may belong to willing participants, people recruited through deceptive job offers or individuals whose banking identities have been misused.
The Reserve Bank of India (RBI) has repeatedly warned against allowing others to receive or transfer money through personal bank accounts for commission. Such arrangements can expose account holders to financial restrictions, police investigations and possible prosecution.
What Are Mule Accounts and How Do They Work?
A money mule account is a bank account used to receive or move funds associated with fraud or other unlawful activity. The account may be held by an individual, business or entity whose banking access is being exploited by criminals. The process typically begins when a fraud victim transfers money to an account supplied by the scammer. That money may then pass through other accounts, be withdrawn as cash or be transferred to someone controlling the wider operation.
RBI guidance explains that criminals recruit third parties to receive funds and forward them elsewhere, sometimes allowing the account holder to retain a commission. Repeated transfers can complicate investigations by separating the original victim from the eventual beneficiary.
How Do Cybercriminals Move Stolen Money Through Multiple Accounts?
Investigators commonly describe successive transfers as layers. The first receiving account is often called a Layer 1 mule account, while later accounts may receive funds from earlier intermediaries.
A July 2025 Central Bureau of Investigation (CBI) case illustrates the scale such movement can reach. The agency alleged that ₹3.81 crore entered one mule account in a single day before being transferred to more than 100 first-layer accounts and subsequently routed through thousands of accounts. Three people were arrested, and the investigation continued. These were investigative allegations, not findings of guilt.
The example shows why identifying the first recipient does not necessarily identify the person who organised the fraud. Investigators must examine transaction records, account ownership, communications and the people directing subsequent transfers.
How Are People Recruited Into Mule Account Scams?
Recruiters may advertise payment-processing jobs, remote employment or commission-based opportunities through social media, messaging applications and recruitment websites. Applicants are asked to receive payments and forward them to designated accounts.
Other schemes involve renting an existing account, surrendering banking credentials or supplying account-opening documents. Criminals may also exploit people seeking loans or employment by obtaining their identity documents under false pretences.
In November 2026, The420.in reported that Hyderabad Police arrested three suspects accused of supplying banking kits for commissions of ₹20,000 to ₹25,000 each. Investigators identified 83 suspicious accounts across 22 branches, with 11 accounts linked to 14 cyber fraud transactions involving approximately ₹10.04 crore.
Read: Hyderabad Police Bust ₹10.04 Crore Mule Account Network
Why Are Mule Accounts Difficult to Detect?
An account used for fraudulent transfers may initially appear to belong to an ordinary customer with legitimate identification documents. Suspicious activity may become apparent only when transactions are compared with the customer’s expected financial behaviour or linked to a cybercrime complaint.
Banks are required under RBI’s Know Your Customer directions to monitor accounts, identify potential mule activity and report suspicious transactions to the Financial Intelligence Unit-India.
In May 2026, I4C and the Reserve Bank Innovation Hub announced a collaboration to improve AI-assisted identification of mule accounts. The initiative aims to strengthen fraud-risk intelligence and coordination across financial institutions.
How Widespread Are Mule Accounts in India?
Government figures show the scale of the detection effort. According to an August 2026 Ministry of Home Affairs response, 32.08 lakh Layer 1 mule accounts had been shared with participating entities through I4C’s Suspect Registry as of June 30, 2026. The government also reported declined transactions worth ₹25,698 crore through the associated fraud-prevention framework. These figures should not be interpreted as the number of convicted account holders or the amount of money recovered.
The figures indicate that mule accounts are a major concern for financial institutions and cybercrime investigators. However, an account being flagged does not establish that its registered owner knowingly participated in fraud.
Can Mule Account Holders Face Arrest or Account Freezing?
Yes. A person who knowingly receives or moves stolen money may face investigation and prosecution. Section 317 of the Bharatiya Nyaya Sanhita, 2023 addresses specified offences involving stolen property, including dishonest receipt or retention with knowledge or reason to believe it was stolen.
Banks may also restrict suspicious accounts during investigations. But an account freeze is not a conviction, and an unexpected fraudulent credit does not automatically prove criminal intent.
For a detailed legal explanation, see The420.in’s coverage of the Indore loan-trap mule account investigation, which illustrates how identity documents can allegedly be misused without an account holder’s knowledge.
What Should You Do if Your Account Receives Suspicious Money?
Immediately inform your bank and preserve the transaction details. Do not forward the money, withdraw it for someone else or return it to an unfamiliar caller on their instructions. Ask the bank to handle any legitimate reversal through its verified process.
If you have shared banking credentials, request appropriate security restrictions and change compromised passwords. Preserve recruitment messages, account statements and communications showing how the suspicious transaction occurred.
Report suspected cyber fraud through the National Cyber Crime Reporting Portal or call 1930. RBI’s public awareness campaign specifically directs citizens to report suspected money-mule arrangements to their bank and cybercrime authorities.
Frequently Asked Questions About Mule Accounts
1. Is a mule account always opened using fake documents?
No. Some mule accounts are genuine accounts willingly shared with criminals. Others may be opened using misused identity documents.
2. Can someone become a money mule without knowing it?
Yes. Criminals sometimes deceive people through fake jobs, loans or payment-processing arrangements.
3. Why do criminals transfer money through several accounts?
Multiple transfers create additional intermediaries between the victim and the eventual recipient, complicating investigations.
4. Can police freeze an account linked to cyber fraud?
Yes. Accounts may face lawful restrictions during investigations, although the legal basis and extent of the restriction matter.
5. Does receiving stolen money automatically make someone guilty?
No. Criminal liability depends on the applicable offence, the person’s conduct and the evidence.
6. Can victims recover money transferred into mule accounts?
Recovery may be possible if funds are identified and secured, but it is not guaranteed. Prompt reporting is essential.
The420 Insight: Your Bank Account Should Never Be Rented
Mule accounts allow criminals to move stolen money while distancing themselves from the original fraud. The simplest safeguard is to refuse any offer involving payment for receiving, transferring or withdrawing someone else’s funds. Anyone who discovers unexplained transactions should contact the bank immediately, preserve the evidence and report the activity before further transfers occur.
