Singapore Money Mule Investigations: Why Account Ownership Is Only the Starting Point

When suspected scam proceeds pass through a bank account, identifying the account holder is an obvious first step. It is rarely the end of the investigation.

A recent Singapore High Court judgment illustrates why.

On 10 September 2026, the General Division of the High Court delivered its decision in Mohamed Erzan Taib Zohri v Public Prosecutor and other appeals [2026] SGHC 183, considering seven appeals involving young offenders convicted of scam-related offences, principally involving the relinquishment of bank accounts and, in one case, Singpass credentials. Four of the seven appeals were allowed. Read the Singapore High Court judgment [2026] SGHC 183

Much of the legal attention has understandably focused on sentencing. From an investigative perspective, however, the judgment highlights a broader issue: the name attached to an account tells investigators very little about the person’s true role until the surrounding evidence is reconstructed.

For fraud investigations in Singapore and across Southeast Asia, the important questions are therefore not simply whose account was used? but who recruited whom, who controlled the account, what did each person know, who benefited and where did the money ultimately go?

Singapore’s High Court Rejects a One-Size-Fits-All Approach

Singapore has strengthened its legal framework against money mules as scam activity has increased.

The High Court noted that money mules can perform a critical role for scam syndicates by making bank accounts available to receive and move criminal proceeds. Multiple accounts can be used to break up and layer funds, making detection and tracing more difficult.

At the same time, the court rejected an approach under which imprisonment or reformative training would effectively become the automatic response for every young offender involved in such activity.

The court maintained the presumptive importance of rehabilitation for young offenders while recognising that deterrence, culpability and the seriousness of the conduct remain relevant.

The ruling also established sentencing benchmarks for different offences.

For an archetypal first-time bank-account relinquishment offence under section 55A of the Corruption, Drug Trafficking and Other Serious Crimes (Confiscation of Benefits) Act, where the offender was motivated by gain and convicted after trial, the benchmark is six months’ imprisonment.

Comparable legacy bank-account relinquishment offences generally carry a benchmark of three to four months, while the relevant legacy Singpass credential-disclosure offence carries a four-month benchmark.

But these remain benchmarks rather than automatic tariffs.

The surrounding facts matter.

The Investigative Question Is Function, Not Just Ownership

A bank record may establish that an account belongs to Person A.

It does not necessarily establish what Person A actually did.

One person may have been deceived into providing account information. Another may have knowingly sold control of an account for a small payment. A third may have recruited several other account holders. A fourth may have controlled the movement of funds without appearing as the registered holder of any of the accounts.

All four could appear somewhere in the same financial trail.

Their roles are fundamentally different.

This is why a defensible investigation needs to move beyond account attribution and reconstruct function and culpability.

Compliancia’s wider investigation capabilities combine information gathering, corporate investigation and field enquiries when the evidence extends beyond what can be established from records alone.

From an investigative perspective, several questions become particularly important:

• How was the account holder recruited?
• What explanation was given for using the account?
• Did the person receive or expect payment?
• Who possessed the banking credentials, SIM card or device?
• Who instructed the movement of funds?
• Did the account holder retain practical control?
• Were multiple accounts supplied?
• Did the individual recruit other participants?
• What happened when suspicious transactions appeared?
• Where did the money move next?

Those questions turn an account name into an evidential picture.

Account Ownership Is Only the First Node

Financial investigations are often presented visually as a trail of transactions.

Account A transfers to Account B. Account B transfers to Account C.

But the more useful investigative model includes people, devices, companies and relationships as well as transactions.

An account can be treated as a node.

Investigators then look outward:

Account holder → recruiter → communication channel → device → receiving account → associated company → cryptocurrency wallet → beneficiary.

The objective is not simply to produce a longer diagram. It is to identify who exercised actual control and how the infrastructure was connected.

This distinction becomes particularly important in organised scams because the person whose identity is easiest to discover may be relatively low in the chain.

The person controlling the activity may never personally receive funds into an account bearing their own name.

Where the enquiry begins to involve concealed property, companies, beneficial ownership or other financial interests, asset discovery and tracing can become part of the wider evidential picture.

Compliancia Insight: Follow the Recruitment Before Assuming the Role

One of the most revealing parts of a money mule investigation can be what occurred before the first suspicious transaction.

The recruitment process may help distinguish between someone who was exploited and someone who knowingly became part of an operation.

Investigators may examine:

Initial contact

How did the parties meet?

Was recruitment conducted through friends, social media, messaging platforms, employment advertisements or existing criminal associates?

Instructions

What was the account holder told to do?

Were they asked to open a new account, surrender an existing account, provide credentials or transfer incoming money?

Compensation

Was payment promised per account, per transaction or as a percentage of funds moved?

Control

Who possessed the credentials and who made the actual transfers?

Escalation

Did an individual progress from providing one account to obtaining accounts from other people?

That last distinction can be particularly significant.

Someone who begins recruiting additional participants may occupy a very different place in the network from an individual who simply provided one account.

The investigation therefore needs to reconstruct the relationships between participants rather than examining each account in isolation.

Where the identity, history or associations of a participant require closer examination, a structured background investigation can help test what is known against corporate, litigation, criminal, source and field information.

Reconstructing the Funds Flow Can Reveal the Real Network

Transaction reconstruction is equally important.

The High Court recognised the role money mules can play in layering criminal proceeds through multiple accounts to frustrate detection.

For investigators, the question becomes what the complete movement of those funds reveals.

Timing

How quickly did funds leave after arriving?

A transfer made within minutes can be significant because it may indicate that the movement of funds had already been coordinated or instructed.

Timing should always be considered alongside the surrounding evidence rather than treated as proof by itself.

Transaction splitting

Were large incoming amounts divided into smaller transfers?

Patterns of fragmentation can help identify how funds were dispersed across a wider network.

Repeated counterparties

Do apparently unrelated accounts repeatedly send money to the same destination?

Common counterparties can expose connections that are not apparent when accounts are examined individually.

Financial relationships

Does the subject appear connected to additional accounts or financial interests that were not initially disclosed?

In asset and financial investigations, identifying relevant banking relationships can sometimes form part of a broader enquiry. Compliancia’s work involving bank account identification and financial investigation is one example of how financial information may need to be considered alongside corporate and human intelligence.

Conversion into cryptocurrency

Was fiat currency transferred to an exchange or converted before moving onward?

In one of the cases considered by the High Court, funds passed through an account and were subsequently converted into cryptocurrency and moved out.

The additional layer matters because it can make tracing and potential recovery more complex.

Cross-border movement

Did the trail continue outside Singapore?

Once funds cross jurisdictions, investigators may need to compare financial analysis with corporate records, source enquiries, associates and local intelligence in other markets.

The financial trail should therefore be considered together with the human network behind it.

An Illustrative Money Mule Investigation

Consider a hypothetical fraud investigation.

A Singapore account receives suspected scam proceeds.

Initial checks identify a 21-year-old registered account holder.

Stopping there would produce a simple conclusion:

Suspected mule identified.

A wider investigation might produce a very different picture.

Communications show that the account holder was approached by an acquaintance who offered payment for access to the account.

That acquaintance has recruited four other account holders.

The funds from all five accounts converge on two additional accounts connected to the same phone number.

Corporate research links one of the recipients to a recently incorporated business with minimal visible operations.

Further tracing shows part of the money moving towards a cryptocurrency platform.

The investigation has now changed.

What originally appeared to be a single account-holder problem has become a recruitment and funds-flow network involving multiple individuals, financial accounts and potentially a corporate vehicle.

That is the difference between identifying an account and understanding an operation.

What Lawyers and Companies Should Preserve Early

Timing can be critical when suspected fraud emerges.

Financial accounts can be emptied quickly. Communications can disappear. Devices can change hands. Corporate structures can change, and funds can move across several jurisdictions before formal proceedings begin.

Early preservation and reconstruction may therefore become important.

Depending on the matter, potentially relevant material can include:

• transaction records;
• account-opening information;
• messaging histories;
• phone numbers and devices;
• corporate records;
• cryptocurrency transaction data;
• employment or recruitment information;
• witness accounts;
• connections between known participants; and
• the chronology surrounding unusual transactions.

The objective is to establish a chronology capable of showing knowledge, control, recruitment, gain and funds flow, rather than merely producing a list of names associated with accounts.

The Broader Lesson for Fraud Investigations in Singapore

The Singapore High Court’s ruling is principally a sentencing decision, not an investigative manual.

Nevertheless, it illustrates an important evidential principle.

Money mule cases are fact-sensitive.

The existence of suspicious funds in an individual’s account does not, by itself, explain that person’s complete role in the operation. Investigators and counsel need to distinguish between different levels of knowledge, participation and control.

That requires following both the money and the relationships behind it.

For organisations, counsel and individuals dealing with suspected fraud, the stronger question is therefore not simply:

Whose account received the money?

It is:

Who recruited, knew, controlled, benefited, transferred and ultimately directed it?

That is where account ownership stops being the conclusion and becomes the beginning of the investigation.