{"id":11785,"date":"2026-07-12T05:17:36","date_gmt":"2026-07-12T05:17:36","guid":{"rendered":"https:\/\/www.fintechpulse8.com\/?p=11785"},"modified":"2026-07-12T05:17:36","modified_gmt":"2026-07-12T05:17:36","slug":"how-money-mule-scams-work","status":"publish","type":"post","link":"https:\/\/www.fintechpulse8.com\/?p=11785","title":{"rendered":"How \u2018money mule\u2019 scams work"},"content":{"rendered":"<p><\/p>\n<div id=\"textFreeArticle\">\n<p>Judith Hawarden must have been excited when she paid R5.5-million to ENS, the attorneys handling the sale of her new house. Unfortunately, she didn\u2019t realise that the email she had received with the bank account details wasn\u2019t from ENS but from a scammer. The email address ended ensafirca.com, not ensafrica.com, and quite understandably, she didn\u2019t notice this.<\/p>\n<p>Before any of the parties involved in the sale realised what had happened, the money was transferred out of the bogus account and was gone.<\/p>\n<p>For the next half-decade, Hawarden and ENS fought each other in court, each blaming the other for the loss. Hawarden won in the Gauteng High Court. But ENS then prevailed at the Supreme Court of Appeal.<\/p>\n<p>When we read about the case, we wondered: where was the bank in all this? Why didn\u2019t they manage to recover the money and reverse the transaction to the fraudulent account? Surely the bank knew who the fraudulent account belonged to? Why does Fica (Financial Intelligence Centre Act) veriFication not prevent this from happening?<\/p>\n<p>In 2023, The Big Issue, the non-profit magazine sold by homeless people, almost went bankrupt because it paid R600 000 to a scammer R600 000 instead of to its printers. Again, the money couldn\u2019t be recovered. GroundUp published an editorial calling on the bank involved to reimburse The Big Issue. \u201cIf Fica cannot prevent this kind of fraud, then its use is questionable,\u201d we wrote.<\/p>\n<p>It turns out that despite Fica, it\u2019s still possible for the recipient of the money to evade identiFication by banks through what\u2019s known as a money mule. A mule is a person who opens a bank account, goes through the Fica process, but then, either deliberately for a fee, or without realising it, gives control of their account to fraudsters.<\/p>\n<p>In other words, the mule has passed Fica veriFication, but the account is not used by the person who passed veriFication. It is like asking an adult to buy you alcohol when you are underage as a teenager; the only requirement is that the liquor store checks if the purchaser is an adult, not who the alcohol is actually going to.<\/p>\n<div id=\"attachment_1851738\" style=\"width: 565px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-1851738\" class=\"wp-image-1851738 size-medium\" src=\"https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_3-555x613.jpg\" alt=\"\" width=\"555\" height=\"613\" srcset=\"https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_3-555x613.jpg 555w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_3-928x1024.jpg 928w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_3-136x150.jpg 136w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_3-102x113.jpg 102w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_3-230x254.jpg 230w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_3-744x821.jpg 744w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_3.jpg 1242w\" sizes=\"auto, (max-width: 555px) 100vw, 555px\"\/><\/p>\n<p id=\"caption-attachment-1851738\" class=\"wp-caption-text\">Example of an investment scam by fraudsters attempting to solicit payment into a mule account.<\/p>\n<\/div>\n<p>Mule recruitment happens in plain sight. On Facebook, fraudsters openly buy bank accounts on Marketplace and in various groups. They target students and unemployed people. They offer a commission in exchange for your banking login details and the One Time Pin (OTP) that gets sent to you by your bank. The OTP enables them to commit fraud using your bank account, with transactions approved by you directly.<\/p>\n<p>The fraudsters then trick someone, like Hawarden or The Big Issue, into paying money into the mule\u2019s account. The crooks then swiftly transfer money from the mule account, typically into a crypto wallet or gambling account. At this point, it becomes very hard, if not impossible, to recover the money. The bank knows who owns the account, but the owner \u2013 the mule \u2013 is uninvolved in the transaction.<br \/><img loading=\"lazy\" decoding=\"async\" class=\"alignnone\" src=\"https:\/\/groundup.org.za\/media\/uploads\/images\/Graphics\/mule_fraud\/mule_1.jpg\" alt=\"\" width=\"606\" height=\"232\"\/><\/p>\n<div class=\"visible-sm-block visible-xs-block m1010\">\n<div class=\"ad-container-wrapper\">\n<p>ADVERTISEMENT<\/p>\n<p>CONTINUE READING BELOW<\/p>\n<\/div>\n<\/div>\n<p class=\"caption\">Social media advert recruiting money mules.<\/p>\n<p>We sent questions about mule accounts to the large banks. ABSA, FNB, Standard Bank, Discovery Bank and Capitec were very helpful. So was the South African Fraud Prevention Service (SAFPS), a non-profit organisation that works with the banks. SAFPS maintains a fraud database that financial institutions can access. The answers to the questions in this article are based on the replies we received from these institutions.<\/p>\n<h2><span style=\"font-size: 12pt;\">How big a problem is mule fraud?<\/span><\/h2>\n<p>One banker we spoke to estimated that mule fraud amounts to hundreds of millions of rands annually. Another banker told us fraud stats are signiFicantly under-reported. This is in part because victims often don\u2019t report the problem. Mule fraud is a growing problem, according to the National Financial Ombud Scheme South Africa and SAFPS.<\/p>\n<p>But there is a lack of concrete data. As a banker explained to us, there has until now been no consistent definition of fraud categories across the financial sector. \u201cWhen one bank reports digital malware as fraud, another institution may say they don\u2019t see that as fraud.\u201d<\/p>\n<p>He explained that the Financial Sector Conduct Authority and the Prudential Authority have sat down with the industry to hammer out definitions and reporting standards. He expected that within a year, banks would be forced to report fraud against them or their customers monthly. \u201cBut whether [that data will be made] public or just [go] to the regulator, I don\u2019t know.\u201d<\/p>\n<h2><span style=\"font-size: 12pt;\">Why is it hard for the banks to prevent mule fraud?<\/span><\/h2>\n<p>There is a concerted effort to reduce bank fraud through mules, but it isn\u2019t easy. Banks can\u2019t delay every electronic payment while a veriFication process takes place with both the payer and payee \u2014 that would make banking impossibly slow.<\/p>\n<p>We asked the banks why they can\u2019t detect when an unusually large amount goes into an account and then delay the transaction while it is confirmed to be legitimate.<\/p>\n<p>One bank explained to us that while \u201cunusual or out-of-pattern transactions\u201d are often suspicious, there are legitimate scenarios where unusual transactions are valid. Blanket delays based only on transaction size \u201ccould result in unnecessary friction,\u201d the bank said.<\/p>\n<p>Also, mule fraud has become more sophisticated. \u201cIt is no longer limited to newly-opened or obviously suspicious accounts,\u201d a bank told us. \u201cIn many instances, mule accounts belong to longstanding, legitimate clients, which makes detection far more complex.\u201d<\/p>\n<div id=\"attachment_1851739\" style=\"width: 441px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-1851739\" class=\" wp-image-1851739\" src=\"https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_2-555x242.jpg\" alt=\"\" width=\"431\" height=\"188\" srcset=\"https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_2-555x242.jpg 555w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_2-1024x447.jpg 1024w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_2-150x65.jpg 150w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_2-1536x670.jpg 1536w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_2-215x94.jpg 215w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_2-230x100.jpg 230w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_2-744x324.jpg 744w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_2.jpg 2048w\" sizes=\"auto, (max-width: 431px) 100vw, 431px\"\/><\/p>\n<p id=\"caption-attachment-1851739\" class=\"wp-caption-text\">Social media advertisement for mules.<\/p>\n<\/div>\n<h2><span style=\"font-size: 12pt;\">What more could the banks do?<\/span><\/h2>\n<p>The banks that responded to us all said they have software in place to attempt to detect and stop suspicious transactions.<\/p>\n<div class=\"visible-sm-block visible-xs-block m1010\">\n<div class=\"ad-container-wrapper\">\n<p>ADVERTISEMENT:<\/p>\n<p>CONTINUE READING BELOW<\/p>\n<\/div>\n<\/div>\n<p>They also co-operate with each other to identify mules. And they have access to a database of fraudulent activities maintained by SAFPS.<\/p>\n<p>But the volume of transactions is huge, and the banks have the competing interest of trying to make paying and being paid as frictionless as possible.<\/p>\n<p>In a Daily Maverick video, Rebecca Davis suggests two measures that would reduce fraud: (1) banks should, by default, have to reimburse clients for fraud up to a certain amount (so that there\u2019s a strong incentive for them to prevent it) and (2) the name of the payee that the payer specifies should be verified against the payee\u2019s account name.<\/p>\n<p>The banks, perhaps unsurprisingly, expressed scepticism about the first suggestion. One bank employee said that his bank does reimburse some victims of fraud, but with mule fraud, the victims have actually authorised the payments, so it\u2019s not really the bank\u2019s fault.<\/p>\n<p>One bank told us that reimbursement could have \u201cunintended consequences\u201d, causing a \u201cshift in customer behaviour, where individuals and businesses may take greater risks, knowing that losses could be refunded.\u201d<\/p>\n<p>Another bank pointed out that the banks already invest significantly in fraud prevention.<\/p>\n<p>On the second suggestion, it was pointed out to us that some banks already offer an account veriFication option when paying. But the problem is that this costs the customer money. Presumably, few people use it, but this might change if it were a free service.<\/p>\n<p>Account name matching would certainly help, but it wouldn\u2019t eliminate mule fraud entirely because many mule accounts have the name of the intended payee but are not controlled by that payee.<\/p>\n<p>And none of the measures discussed here would prevent scams that use money mule accounts, such as (1) \u201cromance\u201d fraud, where a person pays a large amount of money into the account of someone they believe, falsely, is in love with them, (2) marketplace fraud, where people are sold products from dodgy online sites at prices that really are too good to be true, and (3) investment fraud, where people are conned into investing money by paying into accounts from which the money is simply stolen.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-1851740\" src=\"https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_5-555x697.jpg\" alt=\"\" width=\"345\" height=\"433\" srcset=\"https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_5-555x697.jpg 555w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_5-815x1024.jpg 815w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_5-119x150.jpg 119w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_5-1223x1536.jpg 1223w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_5-90x113.jpg 90w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_5-230x289.jpg 230w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_5-744x935.jpg 744w, https:\/\/www.moneyweb.co.za\/wp-content\/uploads\/2026\/07\/mule_5.jpg 1366w\" sizes=\"auto, (max-width: 345px) 100vw, 345px\"\/><\/p>\n<div class=\"visible-sm-block visible-xs-block m1010\">\n<div class=\"ad-container-wrapper\">\n<p>ADVERTISEMENT:<\/p>\n<p>CONTINUE READING BELOW<\/p>\n<\/p><\/div>\n<\/div>\n<p>At least one bank, Capitec, makes you take a selfie before processing some payments. This makes it harder for the person who has hijacked a mule account to transfer the money they have been fraudulently paid into an onward account. Sometimes Capitec clients complain about this on social media, but it does protect them from fraud.<\/p>\n<h2><span style=\"font-size: 12pt;\">What more can the state do?<\/span><\/h2>\n<p>One bank pointed out that the Protection of Personal Information Act (Popia), which came into effect in 2020, while an important protector of privacy, also slows down information sharing between banks, which makes it harder to trace fraudulent transfers. This is something that legislators could try to address.<\/p>\n<p>Also, while none of the banks said this, it\u2019s quite clear that the police have very limited capacity to catch fraudsters.<\/p>\n<p>Another institution involved in eliminating fraud is the South African Banking Risk Information Centre (Sabric). It works with the banks and the Hawks. It claims that it has helped strengthen the police\u2019s \u201cdigital forensic analysis capacity and its ability to investigate and prosecute complex financial crimes\u201d and that this \u201cwas necessary for South Africa to be removed from the Financial Action Task Force (FATF) grey list of countries that have weaknesses in their capacity to fight financial crime\u201d. South Africa was removed from this list in 2025.<\/p>\n<p>Also, since much mule fraud involves transferring money to crypto or gambling site accounts, stronger regulation of these might help.<\/p>\n<h2 class=\"subheading\"><span style=\"font-size: 12pt;\">What can you do to avoid being scammed?<\/span><\/h2>\n<p>When making large payments, it is best practice to verify the bank details telephonically. You can also use account validation services offered by your bank, even though they still cost money (and should be free).<\/p>\n<p>One of the bankers we spoke to emphasised that romance scams, investment scams and online \u201ctoo cheap to be true\u201d product sales are the key things to be aware of. \u201cAlways consult friends and financial advisors,\u201d he said. \u201cSlow down\u201d before making a payment.<\/p>\n<p>He also advised that if you get a call saying that your money is about to be compromised, drop the call and call your bank\u2019s fraud hotline to report it. Such calls are probably an attempt to get you to transfer your money into a mule account.<\/p>\n<p>\u00a9 2026 GroundUp. This article was first published here.<\/p>\n<\/p><\/div>\n<p>#money #mule #scams #work<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Judith Hawarden must have been excited when she paid R5.5-million to ENS, the attorneys handling the sale of her new house. Unfortunately, she didn\u2019t realise that the email she had&hellip; <\/p>\n","protected":false},"author":1,"featured_media":11786,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[27,13209,4512,1105],"class_list":["post-11785","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-investing","tag-money","tag-mule","tag-scams","tag-work"],"_links":{"self":[{"href":"https:\/\/www.fintechpulse8.com\/index.php?rest_route=\/wp\/v2\/posts\/11785","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fintechpulse8.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fintechpulse8.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fintechpulse8.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fintechpulse8.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11785"}],"version-history":[{"count":0,"href":"https:\/\/www.fintechpulse8.com\/index.php?rest_route=\/wp\/v2\/posts\/11785\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.fintechpulse8.com\/index.php?rest_route=\/wp\/v2\/media\/11786"}],"wp:attachment":[{"href":"https:\/\/www.fintechpulse8.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11785"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fintechpulse8.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11785"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fintechpulse8.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11785"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}