Money mule scam: do not lend your bank account

What you need to understand

• Understand offers that suggest receiving, withdrawing or transferring money for a commission, often disguised as an easy job.

The scenario, step by step

• A job offer or a contact suggests receiving funds into a personal account and then transferring or withdrawing them for a commission.
• The money may come from other victims. Moving it through several accounts helps make it harder to trace.
• Even if the person did not organise the initial fraud, anyone who makes their account available may face banking and legal consequences.

What the fraudster is trying to get

• Use of the recruit’s account and identity.
• The card, PIN code or banking access needed to move money.

Common variants

• Payment agent job.
• Commission for transferring a bank payment.
• Lending an account, card or banking app.

Warning signs in your case

• A recruiter asks to use your personal account to move money around
• You have to withdraw, convert or quickly send on money received from a stranger
• The task is vague but the pay seems immediate and high
• A bank card, PIN code, itsme access or login details are being requested

What a legitimate service would do

• An employer does not move client money through a worker’s private account.
• A professional payment follows a contract, accounting records and accounts identified in the organisation’s name.

Belgian context and fraud chain

• Recruitment for money mules targets, in particular, young people or people in financial difficulty by presenting the movement of money as a service, a test or a job. The commission hides the possible origin of the funds.
• The account holder remains visible to the bank and investigators, while the organiser stays at a distance. Lending the card or app does not remove that exposure.

Decision points to check

• Refuse to receive, withdraw or transfer money from strangers into a personal account, even for a small commission.
• Do not lend out your card, code or banking app. A legitimate company uses its own business accounts.
• Check the employer, the contract and the purpose of the payments before doing anything; a vague job title does not justify moving funds.

How to check without taking risks

• Do not reply to the message and do not use the link, QR code or number it contains.
• Open the official app or website yourself, then check whether the same request appears in your personal space.
• If in doubt, contact the organisation using a number found on its official website, a reliable invoice or your bank card.

What to do immediately

• Do not accept any transfer and never lend your account, card or banking access.
• If funds have already arrived, do not move them and contact your bank immediately.
• Keep the messages and ask for advice from the local police before taking any further action.

If you have already clicked, paid or replied

• Stop the exchange and do not try to negotiate with the sender.
• Change any access details you shared through the official service. Contact the bank immediately if a payment, card, IBAN or confirmation is involved.
• Keep the messages, payment references and addresses you observed for reporting purposes, without publishing personal data publicly.

Reacting after an incident

• Stop the transactions and contact the bank to explain the situation accurately. Do not send the funds back according to new instructions from the recruiter.
• Keep the offers, contracts, conversations, beneficiary accounts and withdrawals, then ask for the appropriate reporting steps.
• Do not delete the evidence and do not try to sort it out alone with the network, which may put pressure on you.

Limits and level of proof

• Receiving an unusual bank transfer does not by itself prove willing involvement; the instructions, commissions and transfers requested help clarify the context.
• This page explains the risk but does not provide individual legal advice on a person’s liability.

Analysis grid for Money mule: bank account used by fraudsters

• To review a money mule case: bank account used by fraudsters, separate four questions: who made contact, through which channel, what action was requested and which independent element can confirm it. One reassuring answer does not make up for the other inconsistencies.
• The main warning signs in this file are: a recruiter asks to use your personal account to move money around; you have to withdraw, convert or quickly send on money received from a stranger; the task is vague but the pay seems immediate and high; a bank card, PIN code, itsme access or login details are being requested. Their combination matters more than the isolated presence of a word, a logo or a typo.
• Always compare the message with the real status of the service. For money mule: bank account used by fraudsters, a request that is not present in the app, the account or the official contact should not be carried out until it is confirmed.

When to ask for immediate help

• In a money mule case: bank account used by fraudsters, contact the relevant service without delay if a code, confirmation, payment, card, identity document or remote access has already been shared. Describe the exact action rather than saying only that you were hacked.
• If no sensitive action has been taken, keep the useful elements, block the contact and use the detector to document the warning signs. This distinction helps avoid confusing prevention, a confirmed incident and a simple unsolicited message.

What to do now

• If you have not acted, do not click further and open the named service's official channel yourself.
• If you clicked, close the page, enter nothing else and note what information was shown or requested.
• If you shared a code, card, password or payment, contact your bank or the relevant official service immediately.
• Keep the message, time, link used and any useful screenshots. Share them only with an official reporting channel or a trusted helper.

Limits of this page

• This page does not prove that a message is safe and does not replace your bank, the police, Safeonweb, a platform or a public service.
• A scam may be new, very well written or described with too little context. Use the result as decision support, not as absolute certainty.
• Before taking a final action, checking through the official channel matters more than the appearance of the received message.

Check through an official channel

• Type the service address yourself or open the official app. Do not use a phone number, link or QR code from the suspicious message to verify the situation.
• When money, card details, a code or account access are involved, the safety action comes first. The analysis can then help organise the evidence.

How to read the result

• A low number of signals does not mean that everything is safe. It only means that this page or analysis did not find decisive evidence with the information available.
• Focus on the requested action: paying, sharing a code, installing an app, approving a bank action or leaving an official platform. That action matters more than a logo, sender name or polished wording.
• If the situation feels urgent, step away from the received message first. Then check calmly through a channel you already trusted before the message arrived.

Belgian reading of this situation

• For this money mule scam situation, focus on the relevant Belgian next step: open the official channel yourself, contact the bank, use Safeonweb or preserve evidence.
• The right decision for this money mule scam situation depends on what has already happened. Reading a message is not the same as clicking, paying, sharing a code or granting remote access.

Frequently asked questions

Useful official sources

• Febelfin - Qu'est-ce qu'une mule financière ? - link checked on 2026-09-17
• Febelfin - Arnaque à l'emploi - link checked on 2026-09-17
• SPF Économie - Comment reconnaître une arnaque ou un arnaqueur ? - link checked on 2026-09-17
• SPF Économie - Victime d'une arnaque ? Que faire ? - link checked on 2026-09-17