Money mules and funnel accounts

As of August 2026: The EMMA figures on this page are from EMMA 9, announced in December 2023. Later EMMA cycles have run annually (EMMA 10 concluded in late 2024), but their headline figures are not restated here. FinCEN advisory FIN-2014-A005 remains in effect.

Also called: money mule · funnel account · smurf accounts.

What are money mules and funnel accounts?

Modern banking checks who you are before it takes your money. Know-your-customer rules mean every account is tied to a verified identity, which creates the obvious workaround: use someone else’s. A money mule is a person who lets criminal money pass through their own, legitimately opened account. Some are paid accomplices, some are recruited through fake job ads, and some are scam victims who believe they are helping a romantic partner or an employer.

A funnel account applies the same idea to cash at scale. One account, often opened with real or stolen identity documents, receives cash deposits at branches in many different cities, each deposit small enough to avoid attention, and is then rapidly drained from somewhere else entirely. FinCEN’s 2014 advisory described cartels using funnel accounts to move US drug dollars after Mexico restricted dollar deposits: the branch network itself became the smuggling route.

Mules sit on a spectrum of knowledge. At one end are professional accomplices who rent out accounts as a business; in the middle, recruits who suspect but prefer not to ask; at the other end, genuinely deceived people: romance-scam victims “helping” a partner, job-seekers who think forwarding payments is the job. The scheme works the same either way, which is why banks and police treat the account’s behaviour, not the holder’s story, as the signal.

Both techniques serve fraud rings and cartels alike because they solve the same problem: the criminal needs the banking system but cannot afford to be its customer. For online fraud there is a second reason: the proceeds were never cash, so there is no placement problem to solve. But a scam victim’s wire has to land in some account in the victim’s own country, and that account cannot belong to the fraudster. Mules are the landing strip. Funnel accounts serve the opposite, cash-heavy end of the market, which is why one technique page covers both: each is the banking system being borrowed through someone else’s identity.

How do mule and funnel schemes work?

1. Recruiters gather account holders. Job ads promise easy money for “processing payments”; romance scammers ask victims to receive a transfer; some networks simply pay students a cut. Each recruit brings a real account with real KYC behind it.
2. Criminal money enters the mule’s account: a scam victim’s wire, fraud proceeds, or structured cash deposits. In the funnel version, couriers deposit cash into the same account at branches across the country, staying below ID and reporting thresholds.
3. The mule forwards the money on instruction, keeping a percentage. Transfers move fast, often within hours, to other mules, to a consolidation account, or to crypto.
4. The consolidated funds exit: withdrawn as cash near a border, wired abroad, or converted. By then the money is several accounts away from the crime, and the only name in the bank’s records is the mule’s.
5. When an account is frozen or flagged, the network drops it and recruits another. Mules are disposable; the scheme’s continuity lives with the recruiters.

Why mule networks work

Every control in retail banking assumes the customer is the risk. Mule schemes invert that: the customer is genuine, verified, and often has years of unremarkable history; it is the money that is foreign to them. Account-opening checks, the industry’s front line, pass cleanly because there is nothing false to catch at opening.

The scheme also spreads risk the way structuring does: thinly. Each mule handles an amount too small to matter and knows nothing beyond their own instructions. Arresting one mule removes a disposable part; the recruiter, usually in another country, replaces it. For the placement of cash, funnel accounts add geography: deposits in twenty cities look like twenty local customers, and only the account’s full statement shows the pattern.

Finally, mule recruitment scales with the internet. Fraud that originates online (romance scams, purchase fraud, business-email compromise, pig-butchering) needs in-country accounts to land money, and social media supplies an endless stream of candidates who see a side hustle, not a laundering job.

EMMA and the funnel-account advisory: counting the mules

The clearest public measure of the mule economy comes from Europol’s annual European Money Mule Action, a coordinated enforcement sweep run with national police forces, banks, and payment firms. The ninth edition, EMMA 9, whose results were announced in December 2023, identified 10,759 money mules and 474 recruiters, and led to 1,013 arrests. Fraud losses linked to the targeted networks were put at about €100 million. The campaigns pair arrests with prevention: much of EMMA’s effort goes into warning the students and job-seekers who make up the recruitment pool.

The pattern is durable enough that the actions have become yearly. The tenth EMMA ran from September to November 2024, with results announced that December and an explicit focus on moving “upstream”: targeting the recruiters and facilitators who assemble mule herds rather than only the mules themselves.

On the cash side, the reference document is FinCEN’s advisory FIN-2014-A005, issued in May 2014. After Mexico restricted US-dollar cash deposits in 2010, cartels needed a new way to bank bulk drug dollars, and found it in US branch networks. The advisory described the funnel-account signature for banks: structured cash deposits into a single account from multiple states, followed by rapid withdrawals from a different region entirely, with activity bearing no relationship to the account holder’s stated business. It remains the template banks use to tune their monitoring for funnel activity.

How mule networks get caught

Velocity gives mules away. Transaction monitoring scores accounts on how money behaves, not just how much: many unrelated inflows, immediate onward transfers, balances that snap back to zero. A genuine customer’s account accumulates and spends; a mule account is a pipe. Geographic checks catch the funnel variant: cash deposited in cities the holder has never set foot in is hard to explain, and it is one of the specific red flags FinCEN told banks to watch.

Network analysis turns each catch into many. Because mules transact with other mules and with consolidation accounts, one confirmed account seeds a graph: banks and financial intelligence units trace its counterparties, and cross-bank data sharing, formalized in several countries, lets them map whole herds. This is why EMMA-style operations produce thousands of identifications at once rather than isolated suspicious activity reports.

The mules themselves are also the scheme’s human seam. Unlike shell companies, mules can be interviewed, and many cooperate the moment their account is frozen; they are, after all, the only participant who ever shows their face to the bank. A single interview can surface the job ad, the messaging handle, and the payment instructions that connect one disposable account to the network behind it.

The recruiters are the harder target, and the current focus. Mules are replaceable; the ads, social-media accounts, and herder networks that recruit them are the durable infrastructure. Recent EMMA cycles have aimed there, while banks increasingly close the loop at onboarding, screening new customers against known mule typologies before the first transfer ever lands. More on the machinery is at how detection works.

First published August 28, 2026 · Last updated August 28, 2026 · Legal statuses current as of August 2026