Money Mule

A money mule is someone who receives money that came from fraud victims and then forwards it on, at the direction of another person. The Department of Justice defines them as "people who, at someone else's direction, receive and move money obtained from victims of fraud." FinCEN's definition adds the feature that most surprises people: a money mule is "a person (whether witting or unwitting) who transfers or moves illicit funds at the direction of or on behalf of another."

The role exists because criminals need to put distance between a victim's account and their own. A mule contributes a real bank account in a real name with a real history, which is exactly what a newly opened account cannot supply. FinCEN describes the organized version of this as a division of labor, naming groups "comprised of the organizers of the criminal scheme, recruiters, check washers, and money mules."

Two things follow that are easy to get the wrong way round. The money passing through a mule's account is somebody else's money and somebody else's loss, so a mule is not a victim of theft in the way the person at the other end is. And because the mule sends the outbound payment themselves, that transfer is an authorized one, which puts it outside the federal rules that reverse unauthorized electronic transfers.

How people are recruited, in the recruiter's own patterns. The Justice Department names three routes. The first is work: "some people become money mules after responding to online job ads or social media postings. These positions often have ill-defined responsibilities and involve little more than sending or receiving money or packages or opening accounts." The second is a windfall: people are told they "have won a sweepstakes." The third is a relationship, where a person met online asks for help moving money. In every version, the Department notes, "fraudsters will ask that the person receive money from people they do not know and forward the money on," and its own rule of thumb is blunt: "never agree to move money from someone you've never met in person."

The forms the request takes vary and the shape does not. The Department describes fraudsters asking mules "to wire money, purchase gift cards or virtual currency, or even provide someone else access to the money mules' accounts," and asking them to receive packages containing money or to allow deposits into their accounts.

Where the money comes from, which is what a recruit rarely sees. The Department is specific: "the illegally acquired money moved by money mules comes from victims of scams, including romance scams, lottery scams, government imposter scams, and technical support scams," and can also be "swindled from businesses or stolen from government funds." Each of those schemes has its own entry on this site. The relevant point here is that the deposit arriving in a mule's account is a specific person's savings, and forwarding it is the step that makes it unrecoverable.

The liability question, answered at primary source and stated without a bright line in either direction. Both federal money-laundering statutes have knowledge as an element. Section 1956(a)(1) of title 18 reaches "whoever, knowing that the property involved in a financial transaction represents the proceeds of some form of unlawful activity, conducts or attempts to conduct such a financial transaction which in fact involves the proceeds of specified unlawful activity." Section 1957(a) reaches "whoever, in any of the circumstances set forth in subsection (d), knowingly engages or attempts to engage in a monetary transaction in criminally derived property of a value greater than $10,000 and is derived from specified unlawful activity," with "criminally derived property" defined as "any property constituting, or derived from, proceeds obtained from a criminal offense."

The Justice Department's own description of the enforcement posture matches that structure without collapsing into a rule. It says that "knowingly moving money for illegal activities can lead to serious consequences—including criminal charges," that other mules "move money at someone else's direction, not knowing that their activity benefits fraudsters," and that "potential actions by law enforcement range from bringing prosecutions and filing civil actions to letters and interviews. The action taken will depend on the facts and circumstances of each unique matter." That is as far as any honest statement can go: knowledge matters, the range of outcomes is wide, and nobody can tell an individual in advance which end of it they are at. The scale of the enforcement effort is real — the Department records that in 2021, during a ten-week Money Mule Initiative campaign, "agencies took action against approximately 4,750 individuals suspected of being money mules."

The consequence people are most likely to meet is not criminal at all. It is the bank. An account used to receive and forward funds from unknown senders is the pattern the monitoring obligations financial institutions operate under are designed to surface, and an institution that concludes an account is being used this way can freeze it, close it, and report the closure, which can in turn make it harder to open an account elsewhere. How far any of that goes is the institution's judgment rather than a rule anyone can quote. The page on know your customer explains why institutions behave this way.

The Regulation E point, which runs the opposite way from most people's instinct. Someone who has been used as a mule and then discovers it often assumes the outbound transfers can be reversed on the same basis as card fraud. They cannot. The federal definition of an unauthorized electronic fund transfer requires that it be "initiated by a person other than the consumer," and a mule initiates their own outbound transfers. That makes them authorized transfers, outside the liability limits and the error-resolution timetable entirely, however completely the person was deceived about what they were doing. The fraud page sets out what remains available in that situation.

What to do on discovering it, from the agency that runs the initiative. The Justice Department's instructions are specific and unusually operational: "you should stop communicating with the person who asked you to send and receive money. If you currently have money in your possession from the activity, don't send it to the person who has been giving directions. You should notify your financial institution about what has happened and consider changing accounts, especially if you've provided any information to the person to whom you've been talking. Report the communications and suspicious activity to law enforcement." The instruction not to forward what is already held is the one that matters most, because it is the only step that keeps somebody else's money recoverable.

1. A person is recruited, through a job advertisement with vague duties, a claimed prize, or an online relationship. The common feature is that the role amounts to receiving and forwarding money.

2. Money arrives in their account from senders they do not know, or as cash or packages.

3. They are directed to forward it, by wire, by buying gift cards or virtual currency, by sending cash, or by handing over access to the account itself.

4. The trail is broken. The funds have left the victim's institution, moved through a real account belonging to a real person, and gone on to somewhere further away.

5. The consequences land on the mule. The account is the exposure most people meet first, and the person may also be contacted by law enforcement, an outcome the Justice Department says ranges "from bringing prosecutions and filing civil actions to letters and interviews."

A hypothetical, showing where the money actually goes. Célestine answers an advertisement for a remote "payment processing associate" paying 8 percent of each transaction handled.

Over three weeks, four deposits arrive in her account: $4,200, $6,800, $3,500 and $5,500. That is $4,200 + $6,800 + $3,500 + $5,500 = $20,000. She is told to keep her 8 percent and forward the rest, so she keeps 20,000 × 0.08 = $1,600 and wires on $20,000 − $1,600 = $18,400.

Three facts about that arithmetic decide her position. The $20,000 was taken from four people who believed they were paying for something. The $18,400 she forwarded is gone, because she sent it herself and so it is an authorized transfer that the federal rules on unauthorized transfers do not reach. And the $1,600 she "earned" is proceeds of the same fraud rather than pay for work, so it is not hers to keep either. What follows for someone in her position is not something anyone can state in advance: the Justice Department's own answer is that the action taken "will depend on the facts and circumstances of each unique matter." Figures are hypothetical.

There is no version of this that works out for the person recruited, so what follows is what identifies the approach and what the exposure actually is.

Signs that an approach is a mule recruitment

• The role involves receiving money or packages from people you do not know and forwarding them on.
• A job description with vague duties that amounts to moving money, or that asks you to open a bank account for the employer.
• A request to be paid or reimbursed in gift cards or virtual currency, or to withdraw cash and send it.
• Being asked to move money by someone met only online or by phone. The Justice Department's own line is never to agree to move money for someone you have not met in person.
• Being told you have won a prize and must first receive and pass on funds.
• A request for access to your account, rather than for a specific payment.

What the exposure looks like

• Both federal money-laundering statutes turn on knowledge, and the Justice Department says its responses range from prosecutions and civil actions to letters and interviews, depending on the facts.
• The account is the exposure most people meet first: an institution that identifies the pattern can freeze and close it, which can make opening another one difficult.
• The money forwarded cannot be recovered through the federal unauthorized-transfer protections, because the mule initiated the transfer themselves.
• Any cut kept is proceeds of the underlying fraud rather than earnings.
• The loss falls on the victims at the other end, who are usually individuals rather than institutions.