What a money mule is
A money mule is a person who receives stolen funds and forwards them on, usually keeping a small percentage as 'payment'. The scammer recruits mules through fake job ads, romance-scam progression, social media DMs, or compromised employer email addresses. The money the mule moves is from victims of other scams (phishing, romance fraud, business-email compromise).
The mule rarely realises until law enforcement turns up.
The four recruitment shapes
- Easy remote work. 'Transfer payments for our overseas clients. Work from home. Earn 5% of every transfer. No experience needed.' This is the most common shape, posted on Indeed, Seek, Gumtree, Facebook job groups.
- Fake employment offer. 'Congratulations on getting the position. As your first task, we need you to receive a payment from a client and forward it to our supplier.' The 'job' has no real employer; the company doesn't exist.
- Romance-led recruitment. The pig-butchering 'partner' asks the victim to 'help me receive money from my contract abroad, I'll send you a share.' This blends romance fraud with money laundering.
- Crypto mule. 'I'll pay you 5% to receive USDT in your account and forward it to my address.' Often pitched on Telegram or Discord trading channels.
Why this is not just 'a side hustle'
Receiving and forwarding stolen funds is money laundering. In Australia, this is a federal offence under the AML/CTF Act 2006 with penalties of up to 25 years imprisonment plus restitution to the original victims. State laws (proceeds of crime) add further penalties.
Banks track mule accounts aggressively using AUSTRAC-shared transaction patterns. The mule's account gets frozen, the mule's credit gets ruined, and the mule often gets charged. 'I didn't know' is not a defence under criminal negligence rules if the warning signs were obvious.
The five warning signs
- You're being paid a percentage of money that passes through your account, rather than a salary.
- The 'job' has no in-person interview, no formal employment contract, no Tax File Number request.
- The company has no real online presence, ABN, or registered office.
- You're being asked to use your personal bank account, not a company-issued one.
- You're being asked to act fast, often in cryptocurrency, often with vague reasons ('our payment processor is down').
What to do
- Don't respond. Don't 'just try one transfer'. Even one transfer is enough to trigger criminal charges.
- If you've already received funds: do not move them. Contact your bank immediately and explain what happened. They can freeze the funds and may be able to return them to the victim.
- Report the recruitment ad at AVA, to ScamWatch, and to the platform that hosted the ad.
- If you're feeling pressured into 'just one' by someone you know, get advice from IDCARE (free, confidential, anonymous if needed).