Mule Accounts
Real bank or crypto accounts opened in the name of a third party - knowingly or under deception - and used to receive and forward criminal proceeds.
Definition
A money-mule account is a legitimate account - opened with full KYC - used by a third party to receive criminal proceeds and forward them onward, typically against a small fee or under deception. Mules are recruited at scale through fake job ads, social engineering and romance scams, and are increasingly young (the 18–25 cohort is the largest in EU fraud statistics).
Why mules matter for AML
Mule accounts are the primary placement and short-haul layering infrastructure of modern organised fraud - APP fraud, romance fraud, investment scams, business email compromise. They are also a growing on-chain phenomenon as CASPs scale.
Behavioural signature
- Dormant account suddenly receiving sums that exceed the historical balance baseline.
- Funds outflowing within minutes or hours of arrival.
- Device, IP and geolocation diverging from previous activity.
- Sender or beneficiary across multiple accounts in a peer network.
- Recipient list overlaps with known mule clusters.
Regulatory anchor
AMLD6 explicitly criminalises self-laundering and aiding-and-abetting laundering, which captures most mule conduct. The EU Payment Services Directive (PSD2 / upcoming PSD3) and the Instant Payments Regulation (2024/886) introduce a shared liability framework for confirmation-of-payee and IBAN-name checks that materially impacts mule detection.