A money mule is a person whose bank account or crypto wallet is used to receive and pass on someone else's criminal proceeds, in exchange for a fee, a share, or nothing at all. Some know what they are doing; many are recruited through job adverts, relationships or offers that sound like ordinary work, and find out when an account is closed or an investigator calls. In screening terms the mule address is the layer between a fraud collector and a cash-out point, which is why it turns up on ordinary-looking wallets with short histories.
Recruitment is deliberately mundane. A remote "payment processing" or "financial agent" role, a partner who asks you to receive a transfer, a group chat offering a percentage to move USDT between wallets. The instruction is always the same in substance: accept funds you did not earn and send them on, keeping a cut.
Being unaware is not a defence in most jurisdictions, and it is rarely a practical protection either. The account closes, the balance is held, and the explanation — that someone else asked — is the explanation every investigator has already heard.
Because mule addresses sit exactly where ordinary users meet them. They fund P2P purchases, they pay for goods, they settle small exchanger orders — the layer exists precisely to touch legitimate flow. A P2P seller who screens the counterparty address before releasing funds is checking for this, whether or not they use the term.
For a desk, the pattern is a familiar one: a short history, funds in and straight out, an amount that does not match anything else about the account. Screening puts a name on it before settlement rather than after a chargeback. Check the address first — free in the Telegram bot, three checks a day.
The result names what the address is connected to in plain words, so a wallet acting as a pass-through for a fraud collector is described as that rather than shown as an unremarkable counterparty. The verdict word — CLEAN, LOW, MEDIUM, HIGH, CRITICAL — sits beside a recommendation of Proceed, Caution, Review or Reject and the decision drivers behind them.
Desks that see this repeatedly work it in the workspace, where the category filters the case queue and each decision exports as a signed report. See P2P screening and the pricing page.
Yes, and it is the common case. Recruitment is dressed as remote work, a favour for a partner or a commission for moving funds. Lack of knowledge rarely prevents the account from being closed or the matter from being reported.
Typically a short history with value arriving and leaving quickly, sitting between a collector address and a cash-out venue. That shape is suggestive rather than conclusive, which is why the named categories in the same result matter.
Moving funds for a stranger in exchange for a fee is the description of this offence in nearly every jurisdiction. Decline it, and do not accept the transfer as a test.
Also available in: · · ·
Stop immediately, keep every record including chats and hashes, and contact your bank or platform yourself. Coming forward with documentation is materially better than being contacted first.
Send any wallet to the Telegram bot and get a verdict in seconds. Three checks a day, free, no signup. Desks that screen every deposit run it on plans from $199/mo.