DEV Community

Aashi Agarwal
Aashi Agarwal

Posted on

Operation Mule Hunt 2.0: How Regular Bank Accounts Have Become the Backbone of India’s Cybercrime Economy

The drivers of cybercrime in India are no longer limited to password theft, phishing sites, and malware alone. In many cases, the actual weapon being used is a mundane one – a regular bank account in someone’s name. Operation Mule Hunt 2.0 sheds light on how there is an expanding criminal economy built on mule accounts, which involves innocent people, victims of coercion, and recruited middlemen.
What makes this trend worrying is that this is done under the guise of regular banking activity. Any small amount transferred, any recently opened bank account, and even any temporary transaction pathway seems harmless in itself. But when done on a large scale, it becomes the backbone that enables cybercriminals to wash their illegal gains from fraudulent activity, investment schemes, extortion, and identity theft.

The Definition of a Mule Account

It is possible to define a mule account as a financial account which serves to receive the illegal funds and transfer them to other people who need these funds. There is a case where the owner of such an account perfectly understands the meaning of what he/she is doing, and in return, he/she receives some payment for it. But there is also another situation when the person can be deceived or persuaded to lend his/her account information to someone else. In both cases, the account becomes the channel for transferring the money.
This is what gives criminals the opportunity to be successful with the help of mule accounts. They do not always need to hack into the system of a bank in order to get the money from it. It is enough for them to use the chain of accounts which they can use in order to move the money quickly.

Why is Operation Mule Hunt 2.0 significant?

It is significant because it demonstrates a more mature approach towards combating financial cybercrime. Unlike previously when each scam was treated separately, in this case, the infrastructure behind scams that allows them to be effective will be targeted. In particular, it involves analysis of account networks, transactions, fraud groups' recruitment schemes and repeat offenders who help launder money in mule networks.
This is significant in regard to financial cybercrime because of its high level of industrialization. The scammers today do not try to hide stolen funds; instead, they use complex chains of helpers to withdraw, convert, layer or transfer funds via numerous bank accounts. It becomes very difficult to trace such transactions once the money gets into mule networks.
It also demonstrates an important shift in thinking of those people who work to prevent financial cybercrimes. The shift involves moving from reaction to anticipation of criminal actions and focusing on preventing fraud and catching the scammers earlier.

How Mules Get Recruited

Recruitment of mules starts with a very simple deal. Criminal organizations market themselves by offering easy money, flexibility of working, commission-based transfers or “financial assistant” position that involves low or no skills at all. The offers can be posted online on social media pages, messaging apps, job websites, or delivered personally. In some cases, individuals are made to believe they are working for an international company, while in other cases, fast money in return for the use of their bank account.
Sometimes, people are blackmailed, threatened or made to be dependent in order to get them into the organization. Young adults, students, unemployed, financially troubled people become victims of recruitment since they are easily convinced to risk their positions for fast money. They are made to open a new bank account, receive the incoming payments, transfer them elsewhere or withdraw the payments in cash.

Why Banks Have a Hard Time Preventing It

There are methods for banks to stop money laundering, but one of the difficulties in stopping the process is the ability of money launderers to mimic a genuine transaction. The creation of an account and deposits in it without frequent activity would not cause alarm right away. The nature of transactions will not become suspicious until it comes to volumes and timings of transactions, as well as behaviors of counterparties.
The criminals also evolve fast and try different techniques in order not to trigger any alarms. Transactions could be split into many accounts and made in different amounts and ways. There is even an option of switching bank accounts fast enough to keep suspicious transactions from being connected to any one account.
The prevention of the problem goes beyond the use of anti-fraud measures.

Impact on Victims and Institutions

Victims of cybercrime find mule accounts to be the last link which completes the scam that is being committed against them. These enable converting cybercrimes into tangible monetary harm since they transfer stolen money before it could be recovered. This makes mule accounts essential to the completion of scams in the forms of investment fraud, impersonation, phishing, and false customer service scams.
In terms of institutions, mule chains are sources of risk for them. Banks might suffer when criminals use the services of banks without the knowledge of these banks and payment platforms, including fintechs, might face problems as criminals use these channels to transfer money in much faster way compared to conventional channels.
The social cost of mule chains is significant as each successfully established chain of mules motivates criminals to conduct more scams because they realize that the financial system may be used for conducting scams.

What Should Be Done

Preventing misuse of mule accounts would entail education, detection, and enforcement. The individuals have to know that providing one’s services of opening accounts for “easy money” is illegal and could lead to severe legal implications. Banks and other financial companies have to improve their onboarding processes, track any peculiarities in transactions, and detect clusters of associated accounts. Such indicators as account age, transaction velocity, counterparties’ behavior, and abrupt changes in the account activity could be very useful. Additionally, institutions have to facilitate reporting of suspicious communication by customers.
The law enforcement agencies should cooperate with the financial institutions more closely. Since mule networks tend to be multiplatform and multicountry, quick information exchange is crucial to cut off the financing of the criminal organizations.

The Greater Message Here is that:

Operation Mule Hunt 2.0 proves that cyber crime does not necessarily consist of malware, false websites, or identity theft anymore; it increasingly relies on the use of regular infrastructure as part of its logistics operation. A bank account, a means that most people think of in a very straightforward way, has become one of the main tools of cyber crime.
This raises the issue of mule detection from a matter of banking security into an issue of national security, too. When regular financial accounts are used to launder funds from criminal operations, the boundary between cyber fraud and financial crime simply vanishes.

Find more threat intelligence resources related to cybersecurity and other types of digital risk here at IntelligenceX.IntelligenceX assists organizations in understanding new threats through focused analysis and investigations in digital intelligence.

Top comments (0)