Money Mule

A money mule is a person who receives illegally obtained money into their own bank account, crypto wallet, or payment app and moves it onward on behalf of criminals — keeping a cut or doing it unwittingly. Mules are the plumbing of online fraud: the proceeds of business email compromise, pig butchering, and romance fraud almost never travel straight to the criminal. They hop through layers of mule accounts that break the trail and convert stolen funds into cash or crypto before investigators can follow.

How it works

Recruitment is itself a social-engineering operation. The most common lures are fake jobs — the employment scam in its money-laundering form: "payment processing agent," "financial coordinator," any remote role whose actual duties are receiving transfers and forwarding them on — plus romance relationships in which a scammer converts a victim into an accomplice ("receive this for me, my account is frozen"), and quick-money offers aimed at students and people in financial distress. Some mules know exactly what they are doing; many genuinely believe they have a job. Legally, the distinction may not save them: moving criminal proceeds is money laundering, and prosecutions of unwitting mules are common. In one coordinated action, Europol reported 2,469 money mule arrests and 8,755 mules identified in a single three-month worldwide operation (EMMA 8, 2022).

How to defend against it

For individuals, one rule filters almost every recruitment attempt: any job, favor, or relationship request that consists of receiving money and sending it onward is money laundering, no matter how plausible the cover story. Legitimate employers do not route company funds through employees' personal accounts.

For organizations, mule recruitment is a workforce risk with legal edges — an employee acting as a mule creates reputational and regulatory exposure, and the financial desperation that makes people accept mule "jobs" is the same distress signal covered in our guide to pig butchering as an enterprise risk. Cover mule recruitment patterns in security awareness training, and give employees a shame-free channel to report offers they have received — or accepted.