India’s Mule Account Crisis: How Cybercriminals Exploit Banking Gaps to Launder Millions

An investigation into financial crime in India has revealed that cybercriminals are exploiting a network of nearly 850,000 “mule accounts” to launder illicit funds, with Maharashtra, Uttar Pradesh, and Rajasthan serving as primary operational hubs. According to officials from the Union Ministry of Home Affairs (MHA), these bank accounts—often opened using manipulated or unwitting victims—are being used to layer transactions and obscure the trail of stolen money.

The scale of the operation was highlighted by data from the Indian Cyber Crime Coordination Centre (I4C), which identified these states, alongside Haryana, Delhi, Karnataka, and Tamil Nadu, as critical hotspots for financial diversion. The Central Bureau of Investigation (CBI) reported that in 2025 alone, nearly 850,000 such accounts were opened across 700 bank branches nationwide, signalling a systemic vulnerability in the banking sector.

Background and Context

A mule account functions as a conduit for illicit funds, controlled either knowingly or unknowingly by an individual—often referred to as a “money mule.” Criminals recruit these account holders through various means, including fake job offers, romance scams, or social media advertisements promising easy commissions.

Once established, the accounts are used to receive fraudulently obtained money, which is then rapidly transferred to other accounts, withdrawn via ATMs, or routed through cheques. This process creates multiple transactional layers that significantly hinder the ability of enforcement agencies to trace the origins of the funds. The I4C has noted that while some participants are unwitting victims, others are willing accomplices drawn by the prospect of quick financial gain.

Key Figures and Entities

District-level data reviewed by investigators illustrates the granular impact of this fraud. In Jharkhand’s Jamtara district, a region long recognised as a centre for cyber fraud, officials detected more than 350 mule accounts in 2025. Government reports indicate that approximately Rs 7 crore was withdrawn from these accounts via ATMs and cheques, with an additional Rs 3.8 crore routed through them. The operations involved nearly 5,000 ATM IDs and over 20 cheque branches.

Similarly, in Haryana’s Nuh district, over 1,000 mule accounts were identified last year. These accounts recorded withdrawals totaling Rs 18 crore, with Rs 0.8 crore routed through the first layer of transactions. The infrastructure supporting these illicit transfers included more than 1,400 ATM IDs and 75 cheque branches, demonstrating the sophisticated logistics employed by these networks.

Legal and Financial Mechanisms

The financial mechanisms employed by these networks rely heavily on the rapid layering of funds. Investigators have found that business correspondents—banking intermediaries who serve customers in remote areas—have allegedly been compromised by criminal syndicates to facilitate the opening of these mule accounts.

In regions where financial literacy is low, residents are often enticed to surrender their account details in exchange for small commissions. The funds are subsequently moved through a complex web of transactions before reaching their final destination, often overseas. This deliberate obfuscation of the audit trail poses a significant challenge to forensic accounting and law enforcement efforts.

International Implications and Policy Response

The investigation has uncovered an international dimension to these operations. Officials stated that several cybercrime hotspots are increasingly shifting their logistical bases to countries such as Cambodia, Vietnam, and Myanmar. However, these cross-border syndicates continue to rely on mule accounts based in India to channel the proceeds of their crimes, complicating jurisdictional enforcement.

In response, the MHA has called for enhanced vigilance and improved coordination between state authorities and banks. To combat the lack of awareness among the public, banks have distributed a comic book featuring the popular characters Chacha Chaudhary and Sabu. The initiative, reported by national media, aims to simplify complex fraud concepts for new account holders, warning them of the legal risks associated with allowing others to use their bank accounts.

Sources

This report draws on data and statements from the Union Ministry of Home Affairs, the Indian Cyber Crime Coordination Centre (I4C), and the Central Bureau of Investigation.