How Mule Account Syndicates Actually Operate

A syndicate works like a supply chain

The word “syndicate” makes people picture a room full of criminals. In reality it works more like a supply chain, with set roles and a deliberate gap between the people at the top and the accounts at the bottom.

That gap is the point. The people who profit may never touch the money, and the people whose names are on the accounts may never meet them. This is how account holders can end up carrying legal risk they never meant to take on.

Recruiters: the layer closest to you

The person you meet is the recruiter. Recruiters run the fake job ads, loan offers, part-time commission schemes, and friendly messages that end with a request for your bank login.

Recruiters do not need force, only an offer that looks like work. The police Semak Mule portal had flagged more than 190,000 accounts as mule-linked ^[f2].

Controllers: the layer that moves the money

Above the recruiter is the controller, who decides where the money goes and how fast. Controllers may make the transfers by logging in remotely.

They can hide behind throwaway phones, stolen identities, and overseas steps. They are the hardest layer to reach, so an investigation can start with the account that can be seen.

The Bukit Aman Commercial Crime Investigation Department tries to trace the money upward, but the account holder is the easiest person to find ^[f5].

Layering: how the source of the money is hidden

The main technique is layering: pushing money through several accounts in quick succession so its criminal source is hard to follow. Your account may be one stop in a much longer chain.

Money that comes in fast and goes out fast can trigger a freeze, whether or not you knew where it was going.

Section 424C covers transactions through an account without a lawful purpose, and it is the most serious mule offence ^[f3]. It carries 3 to 10 years in jail, or a fine of RM10,000 to RM150,000, or both ^[f3].

Why the account holder is the exposed link

Every layer above you is built to stay hidden. Your layer has to be visible, because a transaction needs a real name, a real IC, and a real bank account.

So when the trail is followed, it reaches you first. Syndicates use real identities as a shield between the money and themselves.

This is not a reason to panic, but it is why early advice matters. Your position as someone who was used, not an organiser, needs to be recorded clearly and early.

Giving access willingly is not the same as knowing

If you handed over access willingly, that can feel damning. Doing it willingly is not the same as knowing it was for crime.

Section 424B covers giving someone else control of your own account without lawful authority or lawful purpose, which is separate from running transactions yourself ^[f4]. The penalty is a fine of RM10,000 to RM100,000, or 1 to 7 years in jail, or both ^[f4]. What you knew and why you did it matter to your defence.

See what a mule account means and section 424B explained for how the difference is drawn.

What this means for your defence

Account holders are the visible part of the chain. Police detected 46,048 mule accounts in 2023 and 50,295 in 2024 ^[f1]. Each account holder’s own role still needs to be put on record.

A defence puts the detail back: where you actually were in the chain, what you actually knew, and what the evidence shows. A lawyer can help you keep that record, which is the core of evidence preparation.

Sources

1. PDRM and CCID mule-account figures, 2024 reporting (rmp.gov.my)
2. PDRM Semak Mule portal (semakmule.rmp.gov.my)
3. Penal Code, section 424C (lawnet.com.my)
4. Penal Code, section 424B (lawnet.com.my)
5. Bukit Aman Commercial Crime Investigation Department (rmp.gov.my)