Cyber cops start scanning mule account holders; register 15 cases — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 27, 2026

Severity: MEDIUM | View Full Scam Details

Cyber Cops Crack Down on Mule Account Holders in UPI Fraud – What Indians Need to Know in 2026

UPI scams continue to rise in India, with cyber police registering 15 cases recently targeting “mule accounts” used by fraudsters to launder stolen money.

What Is the Cyber Cops Start Scanning Mule Account Holders; Register 15 Cases Scam?

In early 2026, Indian cybercrime units intensified investigations into "mule accounts" — bank or UPI accounts used by scammers as conduits to transfer and withdraw illicitly obtained funds. These accounts, often opened or operated by unsuspecting individuals, have become critical cogs in UPI fraud networks exploiting India’s increasingly digital financial ecosystem.

This scam mainly targets vulnerable citizens, frequently those promised easy money through social media jobs, investment schemes, or "quick cash" opportunities. Fraudsters recruit them into acting as money mules — either knowingly or unknowingly — by transferring fraudulently obtained funds. Once these mule accounts move the money, scammers quickly withdraw or convert it, making recovery by victims or authorities difficult.

According to reports from the Indian cybercrime investigation units, 15 cases involving mule account holders were filed in just the last quarter, spanning states like Maharashtra, Tamil Nadu, and Uttar Pradesh. The Reserve Bank of India (RBI) and the Indian Computer Emergency Response Team (CERT-In) have also issued warnings about the rise in mule account usage within UPI scams. The Ministry of Home Affairs’ Indian Cyber Crime Coordination Centre (I4C) has emphasized public awareness as key to preventing such exploitation.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp or Social Media: The scam begins with fraudsters messaging individuals on platforms like WhatsApp or Facebook. They advertise lucrative jobs, fake investment opportunities, or roles requiring minimal upfront investments promising high returns.

2. Building Trust and Creating Urgency: Scammers often impersonate bank officials, government representatives, or credible businesspersons. They use social engineering tactics such as claiming “limited-time offers” or “exclusive deals” to pressure targets into quick decisions.

3. Recruiting Money Mules: Victims are asked to provide bank account details (often UPI-linked accounts) stating their role is to “receive and transfer funds on behalf of clients.” Sometimes, victims are told they will get commission payments for their involvement.

4. Receiving Illegitimate Funds: The mule accounts receive stolen funds, often from card fraud, phishing, or SIM swap attacks elsewhere. Because the accounts belong to everyday citizens, monitoring these transfers looks less suspicious.

5. Transferring or Withdrawing Money: Mules are instructed to quickly transfer the received amounts to other accounts controlled by scammers or to withdraw cash, after which their role ends and they may be ignored or cut off.

6. Victims Face Legal and Financial Consequences: When fraudulent transfers are detected, the account holders face police scrutiny, frozen accounts, and possible legal action — despite often being unaware of the fraud initially.

Real Warning Signs to Watch For

• Job offers or investment opportunities asking for your bank details or UPI ID upfront.
• Messages pressuring you to act immediately or threatening loss of “exclusive offers.”
• Requests to receive money and redistribute it through your bank or UPI account.
• Unsolicited calls or WhatsApp messages claiming to be from government agencies or banks asking for sensitive details.
• Promises of commission or quick earnings for “easy money” tasks without proper paperwork.
• Repeated instructions to keep transactions secret or not share details with family or authorities.
• Sudden unusual credits into your bank or UPI account that you did not expect.

What Happens to Victims

Victims often face frozen bank accounts due to anti-fraud alerts triggered by suspicious transactions. In India, UPI does not guarantee transaction reversals once the money is paid, meaning victims frequently lose funds they moved unknowingly. Worse, if their Aadhaar or SIM card details were compromised as part of the scam, victims may suffer identity misuse or SIM swapping, losing control over phone-based banking and OTP authentication.

Financially, victims can lose thousands or lakhs of rupees and have difficulty accessing their funds during investigations. Emotionally, they experience distress, loss of trust in digital payments, and stigma when accused by authorities or banks of complicity.

What RBI and CERT-In Say

The Reserve Bank of India regularly issues advisories alerting the public to not share UPI PINs or OTPs and to avoid transferring money on behalf of unknown persons. RBI helpline numbers such as 1800-111-555 provide assistance related to digital banking frauds.

CERT-In, India’s official cyber incident response, stresses caution against social engineering and advises reporting cybercrimes immediately. The national cybercrime helpline 1930, operated by the Ministry of Home Affairs, is designed for citizens to report complaints related to digital fraud swiftly.

I4C coordinates with state cyber units to investigate mule accounts and prevent money laundering. All these agencies emphasize that no legitimate bank or government official will ask for your UPI PIN or instruct you to transfer funds to unknown accounts.

How to Protect Yourself

1. Never share your UPI PIN, OTP, or bank passwords with anyone, even if they claim to be officials.
2. Avoid accepting jobs or offers that ask you to use your bank or UPI account to transfer money for others.
3. Verify all job offers or investment schemes independently through official websites or known contacts.
4. Be suspicious of urgent messages threatening loss of money or limited-time offers.
5. Regularly check bank and UPI transaction alerts and report any unauthorized activity immediately.
6. Register any suspicious calls or messages with the cybercrime helpline 1930 or on cybercrime.gov.in.
7. Link your Aadhaar and bank accounts only through secure and official portals; don’t click on unknown links shared via WhatsApp or social media.

What to Do If You've Been Targeted

• Immediately freeze or block your bank accounts or UPI handles by contacting your bank’s customer service.
• Report the incident to the cybercrime helpline 1930 and file a complaint on the National Cybercrime Reporting Portal at cybercrime.gov.in.
• Inform your mobile service provider to check for SIM swap or unauthorized access.
• Change all related passwords and enable two-factor authentication on your banking and social apps.
• Approach your local police cyber cell with complaint details and transaction records.
• Notify your bank to start fraud investigation and attempt possible transaction reversals.
• Stay vigilant for any further suspicious communication and avoid sharing personal info again.

Frequently Asked Questions

Q1: What exactly is a mule account, and why is it illegal?
A mule account is a bank or UPI account used by scammers to move and launder money obtained through fraud. While simply having an account is not illegal, knowingly assisting in transferring stolen funds can lead to legal action. Many victims are unaware their accounts have been used this way, which is why caution is vital.

Q2: Can I get my money back if my account was used as a mule account in a UPI scam?
UPI payments are typically final and irreversible. Banks may assist in investigations but recovering money is often difficult if the victim was complicit or negligent. Registration of a complaint and immediate reporting raises the chances of freezing fraudulent transfers.

Q3: How can I verify if a job or investment offer involving money transfers is legitimate?
Always check the legitimacy by searching for official company trademarks, contacting known representatives, and reviewing credible job portals. Avoid offers requiring you to transfer money for others or sharing sensitive banking info. You can also cross-check suspicious messages on BharatSecure.app to see if similar scams exist.

Stay safe from such UPI frauds by being alert to potential mule account scams. When in doubt, always verify suspicious messages and offers at BharatSecure.app — your trusted partner in digital safety!