Hong Kong Mule Account Fraud: Why the First Account Is Only the Beginning

Hong Kong mule account fraud investigations demonstrate why finding the bank account that received stolen funds is often only the first stage of tracing a fraud network.

Between 14 and 24 September 2026, West Kowloon police conducted an anti-fraud and anti-money-laundering operation known as “FIRETRACE”.

According to police information reported by Wen Wei Po, 116 people aged between 17 and 77 were arrested in connection with 81 suspected fraud cases involving approximately HK$190 million.

The cases reportedly included online shopping scams, investment fraud, employment scams and telephone deception. Police said most of those arrested were suspected mule or “stooge” account holders.

Those figures need to be interpreted carefully.

The HK$190 million represents the reported value involved in the suspected cases. It is not a figure for money frozen, seized or recovered.

Likewise, arrest does not establish guilt.

From an investigative perspective, however, the operation illustrates an important financial-tracing problem:

The account receiving the victim’s money may reveal where the payment went first — but not who organised the fraud or ultimately benefited from it.

What Is a Mule Account?

A mule account is a bank or payment account used to receive or move funds connected with fraud or other criminal activity.

Hong Kong Police warns that criminal groups recruit people through social media, employment offers and other approaches to lend, rent or sell their bank accounts.

Those accounts can then be used as “stooge accounts” to receive and transfer suspected proceeds of crime.

The account holder may play very different roles.

One person may knowingly provide an account to a criminal network.

Another may be recruited through a supposed job.

Someone else may be deceived into giving criminals access to their banking credentials.

That is why investigators should not assume that identifying the registered account holder automatically identifies the organiser.

The more useful questions are:

Who controlled the account?

Who instructed the transactions?

Where did the funds go afterwards?

And who ultimately benefited?

Why Hong Kong Mule Account Fraud Matters

Hong Kong Police data shows how significant stooge accounts have become in financial-crime investigations.

Police told Hong Kong’s Legislative Council that 10,496 people were arrested for deception and money-laundering offences in 2024, with approximately 70% identified as stooge-account holders.

Police also said investigations increasingly group cases involving the same stooge account holder together so investigators can identify connections across multiple fraud cases.

That approach reflects a broader shift.

Instead of asking only:

“Who owns this account?”

investigators increasingly ask:

“What network does this account belong to?”

Step 1: Identify the First Receiving Account

The victim’s payment record is often the starting point.

Investigators may have:

• Account number
• Account holder
• Receiving bank
• Transfer amount
• Date and time
• Payment reference

That establishes where the victim’s money initially went.

But consider the following:

Victim → Account A

Account A could belong to a mule.

If an investigation ends there, investigators may identify a receiving account without understanding the operation behind it.

The next question must therefore be:

What happened to the money after it reached Account A?

Step 2: Follow the Money Forward

Fraud proceeds frequently move quickly.

The money may be:

• Transferred to another bank account
• Split across multiple accounts
• Withdrawn in cash
• Used to buy virtual assets
• Sent through a company
• Transferred overseas

The real transaction chain may therefore look like:

Victim → Mule Account → Second Account → Company → Final Beneficiary

Or:

Victim → Mule Account → Crypto Purchase → Digital Wallet

Hong Kong Police specifically warns about schemes where criminal groups recruit account holders, receive suspected criminal proceeds and instruct them to purchase cryptocurrency before transferring it to designated wallets.

This is why tracing cannot stop with the first recipient.

Step 3: Establish Who Controlled the Account

The registered account holder and the person controlling the account may not always be the same.

Investigators may need to examine:

• Who possessed the banking application
• Which phone received authentication codes
• Which device accessed online banking
• Who held the bank card
• Where cash withdrawals occurred
• Who instructed downstream transfers

This distinction is particularly important where a mule has handed control of an account to another person.

In that situation, the registered holder is still an important investigative lead — but may represent only one layer of the network.

Step 4: Map Connected Accounts

The next stage is network analysis.

Suppose investigators identify:

Account A → Account B

They may then discover:

Account A → Account C

and:

Account C → Company D

What initially looked like an isolated account can become a wider financial structure.

Investigators may compare:

• Common recipients
• Shared telephone numbers
• Repeated transfer amounts
• Transfer timing
• Company ownership
• Common directors
• Shared addresses
• Related individuals

Hong Kong’s enforcement and banking sectors have increasingly used network analytics to identify mule-account relationships rather than examining suspicious accounts entirely in isolation.

Step 5: Connect Accounts to Companies and People

An account is only useful to an investigation when it can be placed into context.

Investigators may need to determine:

• Who owns the recipient company
• Who controls it
• Who the directors are
• Whether nominee shareholders are involved
• Whether multiple companies share an address
• Whether recipients are connected to one another

This is where financial tracing and corporate intelligence begin to overlap.

Compliancia supports legal teams and companies with corporate investigations, beneficial-ownership research, UBO and nominee identification, source enquiries and fraud-related investigations.

Compliancia Investigation Services

Step 6: Distinguish Mules From Organisers

A fraud network can contain several different roles.

For example:

Victim recruiter → Scam operator → Mule recruiter → Account holder → Fund mover → Controller → Beneficiary

Some individuals may perform more than one role.

But investigators should avoid assuming that the person at the most visible point of the transaction is necessarily the person directing the operation.

The objective is to determine hierarchy.

Who recruited the account holder?

Who issued payment instructions?

Who decided where the money moved?

Who retained the largest share?

Who controlled the wider operation?

These questions can move an investigation beyond individual bank accounts toward the structure of the suspected fraud network.

Step 7: Trace the Ultimate Beneficiary

The most commercially important question is often:

Where did the value ultimately end up?

Fraud proceeds may eventually become:

• Cash
• Property
• Company shares
• Vehicles
• Investments
• Virtual assets
• Other assets

At this point, fraud tracing becomes an asset-tracing exercise.

Compliancia’s asset-discovery investigations can help legal teams examine property, corporate interests and other assets potentially connected with individuals or entities involved in a dispute.

Compliancia Asset Discovery and Tracing

HK$190 Million Involved Does Not Mean HK$190 Million Recovered

This distinction is essential when reporting financial-crime cases.

The September West Kowloon operation involved suspected cases with an aggregate reported value of approximately HK$190 million.

That does not mean police recovered HK$190 million.

Investigators and journalists should distinguish between:

Amount lost

How much victims allegedly transferred.

Amount traced

How much investigators can identify moving through financial channels.

Amount frozen or intercepted

How much was stopped before disappearing further.

Amount recovered

How much was ultimately returned or confiscated through the appropriate process.

These numbers can be very different.

Hong Kong Police reported that its Anti-Deception Coordination Centre worked with financial institutions to intercept approximately HK$2.09 billion in fraud proceeds across 1,552 cases during 2025, illustrating that interception is a specific outcome rather than simply the headline value of fraud cases.

Why Speed Matters

Fraud money can move within minutes.

Every additional transfer can make the tracing exercise more complex.

That is why victims should preserve payment and communication evidence immediately.

Relevant evidence may include:

• Bank-transfer confirmations
• Account numbers
• Payment references
• Messages
• Emails
• Telephone numbers
• Website addresses
• Screenshots
• Contracts
• Investment statements

Hong Kong’s Anti-Deception Coordination Centre operates a 24-hour Anti-Scam Helpline and works with law enforcement and financial-sector stakeholders to combat deception and support rapid intervention.

Fraud Investigation Is a Link-Analysis Exercise

A useful investigative model is:

Victim → Receiving Account → Mule Network → Intermediaries → Controller → Asset → Beneficiary

Each link answers a different question.

The receiving account explains where the money went first.

Corporate research can identify entities behind later transfers.

Source enquiries may clarify who actually controls those businesses.

Asset tracing can identify where value appears to have accumulated.

The investigation becomes stronger as those separate pieces can be independently corroborated.

How Compliancia Supports Fraud Investigations

Compliancia supports law firms, companies and counsel with investigative intelligence across Southeast Asia.

Relevant capabilities include:

• Fraud investigations
• Corporate-link analysis
• Account and entity mapping
• Beneficial-ownership research
• UBO and nominee identification
• Source enquiries
• Evidence gathering
• Asset discovery and tracing
• Litigation support
• Cross-border investigations

The objective is not simply to find the first account that received the money.

It is to establish:

Who controlled it?
Who instructed the movement?
Where did the money go next?
Which people and companies are connected?
What assets can be identified?
And who appears to have ultimately benefited?

In a fraud investigation, the mule account is often the beginning of the financial trail — not the end.

Editorial Note

This article discusses a Hong Kong Police operation conducted between 14 and 24 September 2026.

According to police information reported by Wen Wei Po, 116 people were arrested in connection with 81 suspected fraud cases with a combined reported value of approximately HK$190 million. Most of those arrested were reportedly suspected mule-account holders.

The arrests should not be interpreted as findings of guilt.

Likewise, the approximately HK$190 million figure represents the reported value involved in the suspected cases and should not be described as an amount recovered, frozen or returned to victims unless separately established.

Hong Kong Police’s own anti-money-laundering guidance confirms the wider enforcement concern regarding stooge accounts and warns the public not to lend, rent or sell bank accounts to others.