How this scam typically works
Recruitment takes two common shapes. One is framed as a job: a "part-time" or "easy income" offer circulated on WhatsApp, Telegram, or social media, asking you to "help receive payments" or "use your account for a business transaction" in exchange for a fee or a cut of the amount that passes through. The other is more direct — someone approaches a person already in financial difficulty and offers cash upfront for the use, rental, or outright sale of a bank account, an ATM card, or an online banking login.
In both cases, the account is then used by scam operators to receive money from victims of an entirely different scam — a fake investment, a Macau-scam call, a phishing link — and move it quickly through a chain of accounts before it can be traced or frozen. The account holder ("mule") may never meet the operators in person or know exactly which scam the money came from.
The part that catches people off guard: the account holder can face criminal investigation and prosecution even without knowingly taking part in the underlying scam. Once an account is confirmed to have received and moved proceeds of fraud, the bank and the police treat it as a mule account, and the holder has to establish their own lack of knowledge or intent — which is far harder to do after the fact than to simply never lend the account out in the first place.
Warning signs
- Anyone offering to pay you for the use, rental, or sale of your bank account, ATM card, or online banking access
- A "job" that asks you to receive money into your personal account and forward it onward
- Requests to share your OTP/TAC with a stranger, an "agent," or a "colleague" to "process" a transaction
- Pressure to open a new bank account specifically to hand over to someone else
- Vague answers about where the money is coming from, or instructions to "just don't ask questions"
If you're being approached right now
Decline. Do not lend, sell, or rent your bank account, ATM card, or online banking credentials to anyone, no matter how the offer is framed — a job, a favour, or a one-off "business need." Never share an OTP/TAC with anyone, including someone claiming to be a bank officer, employer, or "agent." If you've already handed over a card or shared login details but no money has moved yet, contact your bank immediately to freeze or close the account before it can be used.
If your account has already been used, or you're being accused of being a mule
This page is about recognising and avoiding the recruitment pattern. If you're already in this situation — your account has been flagged, frozen, or you're being investigated — see Someone is using my account as a mule / I'm accused of being a mule for what to do next.
FAQ
I didn't know the money was from a scam — am I still at risk?
Yes, you can still be investigated. Once an account is confirmed to have received and moved proceeds linked to fraud, banks and police treat the account as part of a mule network, and the account holder needs to demonstrate they didn't know or intend to help. That is a much harder position to be in than simply never agreeing to lend, rent, or sell the account in the first place.
Is it different if I only shared my OTP once, and didn't actually hand over my card?
No — sharing an OTP/TAC can authorise a transaction just as effectively as handing over a card. A single OTP shared with the wrong person can be enough for money to move through your account without your account details ever physically changing hands.
What if the person offering money is someone I know, not a stranger?
The relationship doesn't change the legal exposure. Being asked by a friend, relative, or acquaintance to "help" move money through your account carries the same risk as being approached by a stranger — arguably more, since it can be harder to say no.