What Is a Money Mule? Crypto Money Mule Scams Explained

A money mule is someone who transfers or moves illegally acquired money on behalf of someone else. In crypto, that usually means receiving money from strangers and converting it into crypto at an exchange or crypto ATM, then sending it to a wallet you are told to use. The FBI warns that acting as a money mule is illegal and punishable "even if you aren't aware you're committing a crime".

Many mules are recruited through fake jobs or online relationships and believe they are doing something legitimate. This guide explains how crypto mule schemes work, how recruiters find people, the warning signs, the legal consequences, what exchanges look for, and what to do if you think you are involved.

What a money mule is

Money mules add distance between criminals and their victims. The FBI says they "add layers of distance between crime victims and criminals, which makes it harder for law enforcement to accurately trace money trails". The US Department of Justice describes them as people who, "at someone else's direction, receive and move money obtained from victims of fraud", and lists the scams that feed them: romance, lottery, government impostor and technical support scams.

Europol is blunter: money muling "is a type of money laundering", and even if mules are not involved in the original crime, "they are accomplices". In the three-stage model of laundering, mules are the people who do the placement and much of the layering; see the three money laundering stages.

The FBI separates mules into three types:

• Unwitting mules do not know they are part of a scheme. They are often recruited through a romance scam or job offer and motivated by trust in the relationship or job.
• Witting mules ignore obvious red flags or are wilfully blind. They may have been warned by their bank and carried on, or started as unwitting mules and kept going.
• Complicit mules know what they are doing. They open accounts serially, advertise mule services, recruit other mules and run "funnel accounts" that collect money from lower-level mules.

How crypto money mule schemes work

Crypto has become a favourite exit for mule networks because it moves value across borders in minutes. Common patterns:

• Bank-to-crypto conversion. Money from fraud victims lands in the mule's bank account. The mule is told to buy crypto at an exchange and send it to a wallet address. The "employer" calls this processing payments or currency exchange.
• Crypto ATMs and kiosks. The FBI lists being "directed to deposit cash into one or more cryptocurrency kiosks" as a sign of a mule scam. According to the FBI's 2025 Internet Crime Report, the Internet Crime Complaint Center (IC3) received 13,460 complaints involving crypto ATMs or kiosks in 2025, with USD 389 million in reported losses.
• Accounts opened for someone else. Mules are asked to open new accounts in their own name, then forward whatever arrives or give the criminals access to the account.
• Scam victims turned mules. Victims of investment or romance scams are persuaded to receive and forward other victims' money, often thinking it is part of their own "investment".

The FATF's Virtual Assets Red Flag Indicators report (September 2020) describes a South African case in which more than 150 individuals, many sharing the same residential address and accessing their crypto accounts from the same IP address, bought about USD 108 million of crypto (BTC 11,960) and moved it straight to two overseas platforms. FATF said this indicated "the potential use of money mules by professional money launderers". Another case in the report involved a mule recruited on social media who received fraud victims' payments into a personal bank account and forwarded them, in split amounts, to be converted into Bitcoin.

For scale, the same IC3 report recorded 181,565 complaints involving cryptocurrency in 2025 and USD 11.37 billion in reported losses. The report does not break out how much of that involved mules.

How mules are recruited

Recruiters go where people are looking for money, work or connection:

• Fake jobs. "Money transfer agent", "local representative" or payment-processing roles with vague duties. Europol notes these adverts may copy a genuine company's website, promise "significant earning potential for little effort", and have no education or experience requirements.
• Social media and messaging apps. Europol lists Facebook groups, Instagram and Snapchat, and direct messages on WhatsApp, Viber and Telegram, with phrases like "legit money" and "same day cash".
• Romance and friendship. An online partner you have never met asks you to receive money and forward it to people you do not know.
• Prize and investment scams. You are told you have won something, or your investment has "profits" that need to pass through your account first.

Europol says people under 35 are the most likely targets, and that criminal groups have begun recruiting people aged 12 to 21. Newcomers to a country, students, unemployed people and those in financial hardship are also targeted. The FBI adds that "anyone can be approached".

Warning signs of a money mule scam

Drawing on the FBI and Europol, be suspicious if:

• An unsolicited message promises easy money for little or no effort.
• The "employer" uses a free email address such as Gmail or Outlook rather than a company domain.
• You are asked to receive money in your own account, or open a new account or company, and then forward the funds.
• You are told to buy crypto and send it to a wallet address you do not control, or to use a crypto kiosk.
• You can keep a percentage of what you move.
• The job has no clear description, and everything happens online.
• Someone you have never met in person asks to use your bank or exchange account.

The DOJ's rule of thumb is simple: never agree to move money for someone you have not met in person.

Legal and personal consequences

The FBI says mules can be prosecuted as part of a money laundering conspiracy, with possible federal charges including mail fraud, wire fraud, bank fraud, money laundering and aggravated identity theft. The core US laundering statute, 18 U.S.C. 1956, carries up to twenty years in prison.

Beyond criminal charges, the FBI warns that mules can:

• damage their credit and financial standing;
• have their own identity stolen by the criminals they work for; and
• be held personally liable for repaying money lost by victims.

Banks and exchanges that detect mule activity typically freeze and close the accounts involved, and may file a report with the authorities; see suspicious activity reports.

What exchanges look for

The FATF report lists red flags that may point to money mules or scam victims, alongside general indicators that often catch mule networks:

• A sender who does not appear familiar with crypto or custodial wallets.
• A customer much older than the platform's average user who opens an account and makes many transactions.
• A financially vulnerable customer, or crypto purchases not supported by the customer's known wealth.
• Several accounts sharing identifiers or IP addresses, and funds that are deposited and then moved out almost immediately.

Platforms combine these with transaction monitoring and checks that the person using an account is the person who opened it. Selfie re-verification is one such check: iDenfy's biometric verification, for example, layers 3D liveness and deepfake detection on top of face and document matching, which makes it harder to use an account opened by someone else. See also liveness detection explained.

What to do if you think you are a money mule

• Stop immediately. Stop moving money and stop communicating with the person directing you.
• Do not send on any money you still hold. The DOJ advises not to send it to the person who has been giving directions.
• Tell your bank or exchange what has happened, and consider changing accounts if you shared details.
• Report it. In the US, report to the FBI at ic3.gov. In Europe, Europol advises reporting to your national police.
• Beware of follow-up scams. People offering to "recover" money or clear your name for a fee are often the same criminals. See crypto recovery scams.

Frequently asked questions

What is a money mule in crypto?

It is someone who receives money from others and moves it on at someone else's direction, often by buying crypto at an exchange or crypto ATM and sending it to a wallet they are told to use. The money usually comes from fraud victims.

Is being a money mule illegal if I did not know?

The FBI says acting as a money mule is illegal and punishable even if you are not aware you are committing a crime. Mules who ignore warning signs, or continue after being warned, face a higher risk of prosecution.

How are money mules recruited?

Mostly through fake job adverts for payment processing or money transfer roles, social media and messaging apps, online romances, and prize or investment scams that ask you to receive and forward money.

What are the signs of a money mule job?

Easy money for little effort, an employer using a free email address, vague duties, being asked to receive funds in your own account and forward them or buy crypto, and being allowed to keep a percentage.

What should I do if I have been used as a money mule?

Stop moving money, stop contacting the person directing you, do not send on funds you still hold, tell your bank or exchange, and report it to the police or, in the US, to the FBI's IC3.

Keep reading

• Crypto scams in 2026
• The three money laundering stages
• Account takeover fraud
• AML red flags in crypto
• Crypto recovery scams

This article is educational and is not legal or financial advice. Definitions, warning signs and consequences are from the FBI's money mules page, the US Department of Justice Money Mule Initiative page and Europol's money muling guide; figures are from the FBI's 2025 Internet Crime Report and the FATF report Virtual Assets Red Flag Indicators (September 2020). All were checked on 9 October 2026 and are linked inline.