What to do if a scammer used you as a money mule
Maybe it was a work-from-home job that involved “processing payments.” Maybe someone you were dating online asked you to receive a transfer and pass it along. Either way, money moved through your account for someone else, and now something feels wrong, or your bank has already frozen the account and started asking questions. That is what being a money mule looks like from the inside, and most people in your position had no idea that is what was happening.
Start with this: you were recruited, not hired, and the person who set this up knew exactly how to make it feel legitimate. What matters now is that you stop, document, and report, in that order, and quickly. How you handle the next few days makes a real difference.
Stop moving money immediately
Do not complete any transfer that is pending, no matter how the request is framed. Not the “last task,” not the refund the sender is suddenly demanding, not the crypto purchase or gift cards the “employer” says will close things out. Every additional transfer is another transaction you will have to explain later, and it moves stolen money further from the person it was taken from. Cut off contact, but do not delete the conversations. You will need them.
Understand what your account was used for
Money mule networks exist because stolen money cannot go straight from a victim to the criminal without leaving a trail. So it makes a stop in an ordinary account like yours, then leaves as a wire, a peer-to-peer payment, crypto, or gift cards. The money that landed in your account almost certainly came from another victim, of a romance scam, a business email compromise, or an account takeover. That is why banks treat this so seriously, and why acting on it now, rather than hoping it blows over, is the right call.
Tell your bank before they come to you
Call your bank’s fraud department and tell them plainly what happened: you received funds and moved them at someone else’s direction, and you now believe you were scammed. Coming forward on your own, with your records in hand, puts you in a very different position than waiting for the bank to freeze the account and draw its own conclusions. Expect hard questions, a frozen account, and possibly a closed one. That is disruptive, but it is the system doing what it should, and your cooperation is noted.
Save everything
Screenshot the job posting or profile, the entire conversation, the payment instructions, and any “contracts” or onboarding documents you were sent. Save the emails with full headers if you can. Note every transaction: dates, amounts, where money came from, and where you were told to send it. This record is what shows the pattern of someone being directed rather than someone organizing. Our guide to preserving evidence covers how to capture it cleanly.
Report it, today
File a report with IC3.gov and ReportFraud.ftc.gov, and include the account details and payment instructions the scammer gave you. Those details are more valuable than most victims realize, because the accounts you were told to send money to are the next link in the chain investigators want. If any of your own identity documents were shared during the “hiring” process, also work through IdentityTheft.gov, since mule recruiters often reuse identity information for the next scheme.
Will you be in trouble?
This is the question that keeps people up at night, so here is the honest version. Moving stolen money can carry legal consequences even for people who did not know what they were moving, which is exactly why stopping immediately, self-reporting, and cooperating matter. In practice, the way unknowing mules protect themselves is by doing what this page describes: end the activity, tell the bank, keep the evidence, file the reports. If money that passed through your account is significant or law enforcement contacts you, talk to a lawyer before giving detailed statements. That is not an admission of anything. It is just the sensible order of operations.
Expect the scam to come back in a new costume
Whoever recruited you may resurface with threats, guilt, or a story about how you owe them the funds that got frozen. Recovery scammers may also appear, offering to “clear your name” for a fee. Ignore both. If the recruitment started with a text about an easy remote job, our post on the fake job offer text scam shows the playbook. If it grew out of an online relationship, the pattern in what to do after sending money to a romance scammer will look familiar.
If you also lost your own money
Many mule victims are double victims: they moved money for the scammer and lost some of their own along the way, through “training fees,” deposits, or crypto purchases. If that is you, the trail of your own payments may still be traceable. Our Investigation Help page explains the cases we take on, and for large losses that need court-grade attribution we point people to Rexxfield.
Being used this way leaves people feeling equal parts frightened and foolish. You are neither the first nor the last, and the fact that you are reading this and acting on it already separates you from the version of this story that ends badly.
— Gus