Money Layering via PMJDY Mule Accounts — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 28, 2026

Severity: HIGH | View Full Scam Details

Money Layering via PMJDY Mule Accounts in India 2026: Beware of This Rising Cybercrime Scam

Millions of PM Jan Dhan Yojana (PMJDY) accounts across India are being exploited in a new wave of scams involving money layering to launder stolen funds.

What Is the Money Layering via PMJDY Mule Accounts?

Money layering via PMJDY mule accounts is a sophisticated fraud pattern where scammers use the vast network of India’s PMJDY accounts to obscure illegal money flows. These mule accounts act as intermediaries to transfer funds, making it harder to trace stolen money, often linked to phishing or investment frauds. The scam targets financially vulnerable or digitally inexperienced users, many of whom opened PMJDY accounts to access banking for the first time.

This scam is rapidly growing because PMJDY accounts have simplified Know Your Customer (KYC) norms, often linked with Aadhaar, which fraudsters leverage through phishing and social engineering. Victims, usually contacted via WhatsApp, Facebook, or online ads promising high returns on investments, may unknowingly share Aadhaar details and passcodes. The scam is widespread across urban and rural regions, making it a national concern.

The Reserve Bank of India (RBI), CERT-In, and the Indian Cyber Crime Coordination Centre (I4C) have flagged rising cases of such misuse of PMJDY accounts in their cybersecurity advisories, urging beneficiaries to remain vigilant and report suspicious requests for personal information.

How This Scam Works — Step by Step

1. Initial Contact: Scammers reach out to potential victims on social media platforms like WhatsApp or Facebook, often impersonating friends, relatives, or trusted agents promising investment gains or easy income.

2. Building Trust: Using fake success stories and professional language, they convince victims to share sensitive details like Aadhaar numbers, UPI PINs, or PMJDY account details under the guise of helping them “earn more.”

3. Account Registration Assistance: Victims may be guided or asked to open new PMJDY accounts or link existing ones with their Aadhaar and UPI IDs for “processing” or “verification,” effectively turning their accounts into mule accounts.

4. Money Layering Execution: Once the account is under control, scammers begin layering operations — small credit transfers followed by immediate withdrawal or onward transfers — making it difficult to track origins. These mule accounts receive and pass on stolen funds, laundering the money across multiple PMJDY accounts.

5. Victim Unaware of Transactions: Since the transfers appear as legitimate UPI credits and debits in small amounts, victims often fail to notice until larger financial damage occurs or their accounts are suspended by banks.

6. Scammers Disappear: After successful layering, fraudsters vanish, leaving victims liable for unusual transactions and sometimes facing legal inquiries from banking authorities.

Real Warning Signs to Watch For

• Receiving unsolicited messages or calls urging you to share Aadhaar or bank details.
• Requests to open new bank accounts or provide UPI PINs under the pretext of “easy income” or “investment schemes.”
• Unexpected small credits or debits in your PMJDY account without your knowledge.
• Pressure tactics demanding immediate financial action or secrecy.
• Promises of guaranteed high returns with no risk.
• Contacts asking you to install unknown apps or share OTPs for transactions.
• Friends or family messaging you from new numbers claiming urgent financial help.

What Happens to Victims

Victims often face severe financial losses due to unauthorized fund transfers from their PMJDY accounts. Unlike regular bank accounts, PMJDY accounts are mainly zero-balance, making the limit for unauthorized transactions shocking when exploited repeatedly. Since these accounts are frequently linked to Aadhaar and UPI, misuse can lead to broader identity theft concerns like SIM swaps or misuse of linked wallets.

For many victims, the emotional impact includes stress from unexplained transaction disputes, difficulties in reversing transactions via UPI, and challenges navigating recovery mechanisms. Banks may freeze accounts during investigations, restricting the victim’s access to funds. The experience can deter many from continued participation in digital financial services, hampering financial inclusion efforts.

What RBI and CERT-In Say

The RBI has issued multiple warnings highlighting the misuse of digital payment platforms and the importance of safeguarding Aadhaar and UPI credentials. Its advisory reminds users never to share UPI PINs or OTPs over phone or messaging apps and cautions about mule accounts used for money laundering. The RBI helpline (1800-123-xxxx) is available for reporting suspicious banking activity.

CERT-In, under the Ministry of Electronics and Information Technology, regularly updates alerts on phishing and social engineering tactics linked to UPI frauds. The Indian Cyber Crime Coordination Centre (I4C) also stresses timely reporting of incidents via cybercrime.gov.in and the national helpline 1930 to prevent escalation.

Together, these bodies advocate for increased awareness, secure banking practices, and prompt action to combat scams exploiting the PMJDY ecosystem.

How to Protect Yourself

1. Never share your Aadhaar number, UPI PIN, or bank OTP with anyone, even if they claim to be from official sources.
2. Avoid opening multiple bank accounts based on unsolicited advice; only use authorised bank apps or websites.
3. Regularly monitor your PMJDY account transactions through your bank’s official portal or app.
4. Do not respond to messages offering “easy money” or “high-return” schemes linked to your bank accounts.
5. Enable SMS and email alerts for every transaction to detect unauthorized activity quickly.
6. Confirm the identity of anyone requesting your financial information by calling back through official contact numbers.
7. Educate family members, especially elderly or less tech-savvy relatives, on basic fraud prevention tips.

What to Do If You've Been Targeted

If you suspect your PMJDY account is being used as a mule account or notice suspicious transactions:

• Immediately contact your bank’s customer service and request a freeze on your account.
• Change your UPI PIN and bank login passwords without delay.
• Report the incident on cybercrime.gov.in and call the 1930 cybercrime helpline for further guidance.
• Lodge a complaint with the police cyber cell for documentation and assistance.
• Notify your mobile service provider if you suspect SIM swap fraud.
• Keep records of all communications and transaction alerts for investigation purposes.
• Follow up with your bank and cyber authorities regularly to track the progress of your complaint.

Frequently Asked Questions

Q: How can scammers use my PMJDY account without my knowledge?
Scammers trick victims into linking their accounts by sharing sensitive data like Aadhaar and UPI PINs. Once they have access, they use the account to receive and transfer money, often in small amounts to avoid detection.

Q: Can I get my money back if my PMJDY account was used for money layering?
Recovery depends on how quickly you report the misuse. UPI payments are usually irreversible once completed, but banks and authorities can sometimes help freeze funds and investigate fraudulent transactions.

Q: What should I do if I receive suspicious messages asking for my Aadhaar or banking details?
Do not respond or share any information. Verify the sender’s identity by calling official numbers. Report such messages to your bank and on cybercrime portals immediately to prevent victimisation.

Stay alert—verify suspicious messages at BharatSecure.app and report fraud attempts to the national helpline 1930.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.