Cybercriminals use a complex network of 'mule accounts' to layer stolen funds across multiple states and banks, making it nearly impossible for law enforcement to track the money in real-time.
- Mule accounts act as intermediaries to distance fraudsters from the original theft.
- The Indian Cyber Crime Coordination Centre (I4C) has identified over 32 lakh Layer-1 mule accounts.
- Fraudsters use 'layering' to scatter a single victim's money across thousands of accounts.
- Bogus SIM cards and misused KYC documents are the backbone of this infrastructure.
In the sophisticated world of digital crime, the biggest challenge for a fraudster isn't stealing the money—it's moving it without getting caught. Whether it is an investment scam, an impersonation fraud, or the dreaded 'digital arrest,' the logistical backbone of these crimes is the mule account. These accounts serve as temporary transit points, ensuring that the victim's money never goes directly to the mastermind.
According to recent investigations by the Mumbai Police, these networks are vast and interstate. In one instance, the Dongri Police uncovered a network supplying 110 bank accounts, while the Khar Police traced 22 accounts linked to 42 different cybercrime complaints involving ₹7.42 crore. The scale is even more staggering at a national level; the Indian Cyber Crime Coordination Centre (I4C) reported 32.08 lakh Layer-1 mule accounts in its Suspect Registry as of June 2026.
The Anatomy of a Mule Account
A mule account is essentially a proxy. When a victim is tricked into transferring funds, the account provided belongs to someone else. This could be a person recruited with the promise of a commission, someone in financial distress who sells their KYC documents, or an individual whose identity has been stolen. The first account to receive the money is termed a Layer-1 account. From here, the money is rapidly dispersed into subsequent layers of accounts to break the audit trail.
BozokMedia analysis shows that the 'layering' process is designed to defeat the speed of law enforcement. By the time a victim realizes they have been scammed and files a complaint, the money has already passed through five or six different accounts across different states. This fragmentation means that one bank account might hold stolen funds from a hundred different victims, while one victim's money is split among a thousand accounts, making total recovery nearly impossible.
The use of mule accounts transforms a simple theft into a complex financial puzzle, where the speed of the transaction far outpaces the speed of the legal freeze.
The Recruitment Ecosystem
Fraudsters don't just steal identities; they build a supply chain. In the Dongri case, agents approached vulnerable individuals, offering incentives to open bank accounts. Police recovered 42 passbooks, 70 debit cards, and 36 SIM cards, highlighting that the 'supply' of accounts is a business in itself. This infrastructure is supported by bogus SIM cards used to bypass OTPs and impersonate authority figures, such as CEOs in 'boss scams.'
| Feature | Direct Transaction | Mule Account Network |
|---|---|---|
| Traceability | High (Direct link to criminal) | Low (Multiple intermediaries) |
| Recovery Speed | Fast (Single freeze) | Slow (Requires multiple court orders) |
| Complexity | Simple | High (Layered/Interstate) |
Frequently Asked Questions
Q1: Can a person be arrested if their account was used as a mule account without their knowledge?
A: While the account holder is a suspect, investigations focus on whether the account was supplied deliberately or if the identity was stolen. However, negligence in sharing KYC/ATM details can still lead to legal complications.
Q2: How can I protect my bank account from being used as a mule account?
A: Never share your bank account details, ATM cards, or OTPs with anyone, and never open a bank account in your name for someone else in exchange for money.
