Hong Kong Mule Account Fraud: Why Tracing Cannot Stop at the First Account

Hong Kong mule account fraud investigations highlight one of the most important problems in financial tracing: the bank account that first receives stolen money may identify a payment route without identifying the person who organised the fraud or ultimately benefited from it.

Between 14 and 24 September 2026, West Kowloon Regional Headquarters and district criminal units conducted an anti-fraud and anti-money-laundering operation known as FIRETRACE.

Police-reported figures carried by several Hong Kong media outlets state that 116 people aged between 17 and 77 were arrested in connection with 81 suspected fraud cases involving approximately HK$190 million. The alleged cases included online shopping, investment, employment and telephone scams. Most of those arrested were suspected of being holders of mule accounts.

Those figures describe the scale of the suspected cases. They should not be interpreted as HK$190 million already recovered by police, nor do the arrests establish the guilt of those involved.

For investigators, lawyers and fraud victims, the more important question is:

What happens after investigators identify the account that received the money?

A mule account may be the first visible point in the financial trail.

It is rarely the end of it.

What Is a Mule Account?

A mule account is generally a bank or payment account used to receive, hold or transfer funds connected with fraud or other criminal activity.

Hong Kong Police warns that criminal groups may recruit people through social media, employment offers or other approaches to lend, sell or provide access to their accounts. Those accounts can then be used as “stooge” or mule accounts for money laundering.

Hong Kong Police anti-money-laundering guidance

The account holder may play different roles.

One person may knowingly assist a fraud network.

Another may have provided account access after being misled.

Someone else may have lost control of their banking credentials altogether.

That is why investigators should avoid assuming that every account holder has the same level of involvement.

The investigative objective is to determine:

Who controlled the account?
Who instructed the transfers?
Where did the funds go next?
And who ultimately benefited?

Why Hong Kong Mule Account Fraud Matters

The September operation illustrates the central role mule accounts can play across very different types of fraud.

Police-reported cases included:

• Online shopping scams
• Investment fraud
• Job scams
• Telephone deception

Despite different victim approaches, the underlying financial problem can be similar.

A victim sends money.

The payment enters an account.

The funds are then moved.

The receiving account creates an initial investigative lead, but it may identify only one layer of a larger network.

Hong Kong authorities have therefore increasingly focused not only on individual suspicious accounts but also on mule-account networks.

The Hong Kong Monetary Authority has previously worked with banks and police on network analytics designed to identify relationships among accounts and detect broader patterns of fraud and money laundering.

That is important because fraud proceeds frequently move through networks rather than isolated accounts.

Step 1: Identify the First Receiving Account

For a victim, the first useful financial evidence may be relatively simple:

• Bank account number
• Account holder
• Bank
• Transfer date
• Amount
• Payment reference

That information matters.

It confirms where the victim’s funds went initially.

But it does not necessarily identify the organiser.

Consider a simplified trail:

Victim → Account A

Account A may belong to a mule.

If the investigation stops there, investigators may identify the account holder while missing the rest of the operation.

The next question should therefore be:

What happened after Account A received the funds?

Step 2: Follow the Money Forward

Funds may remain in the receiving account only briefly.

They can be:

• Transferred to another bank
• Split among several accounts
• Withdrawn as cash
• Sent to a payment service
• Used to purchase assets
• Converted into another form of value
• Transferred overseas

The investigative trail may therefore look more like:

Victim → Mule Account A → Account B → Account C → Final beneficiary

or:

Victim → Mule Account → Multiple downstream accounts → Cash withdrawal

or:

Victim → Mule Account → Company → Asset purchase

This is why professional fraud tracing needs to look beyond the first account.

Compliancia’s investigative work includes fraud enquiries, corporate mapping and asset tracing where legal teams need to understand how individuals, companies and assets connect.

Compliancia investigation services

Step 3: Identify Who Actually Controlled the Account

The registered account holder is important.

But registration does not necessarily establish operational control.

Investigators may need to determine:

• Who possessed the banking app?
• Which telephone number received authentication codes?
• Which device logged into the account?
• Who instructed transfers?
• Who held the bank card?
• Where were withdrawals made?
• Who communicated with other members of the network?

A nominal holder and an effective controller can be different people.

This is one reason financial investigations frequently require more than bank data alone.

Messages, devices, witnesses, corporate information and local enquiries may all help explain who actually controlled the movement of funds.

Step 4: Map Related Accounts

One account can lead to another.

The critical question becomes whether apparently separate accounts form part of the same network.

Investigators may look for common indicators including:

• Repeated counterparties
• Similar transfer amounts
• Transfers occurring within minutes
• Shared addresses
• Common telephone numbers
• Common devices
• Related company directors
• Shared beneficial owners
• Repeated cash-withdrawal locations

Network analysis can reveal relationships that are difficult to identify when accounts are reviewed individually.

This approach is already part of Hong Kong’s broader fraud-response framework.

The Hong Kong Monetary Authority has described industry efforts to use network analytics to detect mule-account networks and generate broader risk intelligence rather than analysing suspicious accounts only in isolation.

Step 5: Connect the Accounts to Real People and Companies

Financial flows do not exist independently of people.

Investigators therefore need to connect accounts to:

• Individuals
• Companies
• Directors
• Shareholders
• Beneficial owners
• Employees
• Associates
• Addresses
• Telephone numbers

Suppose a payment moves from an individual mule account into a company.

The next questions become:

Who owns the company?

Who controls its bank account?

Does it conduct genuine business?

Does it share directors or addresses with other companies in the investigation?

A corporate search may reveal that several apparently unrelated recipients are controlled by the same underlying individual.

This is where fraud investigation overlaps with beneficial-ownership and corporate-link analysis.

Compliancia company due diligence services

Step 6: Distinguish the Mule From the Organiser

This distinction can be crucial.

The person whose name appears on the first account may not be the person who designed the scam.

Fraud networks can involve different functions:

Victim recruiter → Operator → Mule-account recruiter → Account holder → Fund mover → Controller → Beneficiary

One person can perform several roles.

But investigators should not assume that the lowest visible layer represents the entire network.

The objective is to understand hierarchy.

Questions may include:

• Who recruited the account holder?
• Who provided instructions?
• Who determined where money should be sent?
• Who controlled the scam platform or telephone operation?
• Who received commissions?
• Who retained the largest share?

The further investigators move from the first transaction toward control and benefit, the clearer the organisational structure may become.

Step 7: Identify the Ultimate Beneficiary

The final investigative question is often the most important:

Who ended up with the value?

The ultimate beneficiary might receive:

• Cash
• Property
• Company shares
• Vehicles
• Luxury goods
• Funds in another jurisdiction

This is where fraud tracing becomes asset tracing.

Compliancia’s asset discovery work focuses on establishing property, company interests, financial relationships and other assets that may be relevant to litigation or recovery.

Compliancia asset discovery and tracing

Identifying the fraudster is valuable.

Identifying assets potentially available for recovery can be commercially decisive.

HK$190 Million Involved Does Not Mean HK$190 Million Recovered

This distinction deserves particular attention.

The approximately HK$190 million figure reported in connection with the September operation refers to the amount involved in the 81 suspected fraud cases, according to police reporting carried by Hong Kong media.

It is not a reported recovery figure.

Three numbers should always be kept separate:

Amount lost

The value victims allegedly transferred.

Amount traced

The money investigators can identify moving through accounts.

Amount recovered or intercepted

The value successfully preserved, frozen, returned or confiscated.

They can differ dramatically.

A fraud involving HK$10 million may result in only a fraction being frozen if the money has already been transferred, spent or withdrawn.

This is why speed matters.

Speed Can Determine Recoverability

Fraud proceeds can move within minutes.

The longer a victim waits to report a transfer, the more opportunities a network has to move the money through additional accounts.

Hong Kong’s Anti-Deception Coordination Centre works with banks and other stakeholders to intercept suspicious transfers and respond rapidly to deception cases.

In 2025, Hong Kong Police reported that the ADCC intercepted approximately HK$2.09 billion in fraud proceeds across 1,552 cases. That illustrates the practical difference between identifying losses and actually intercepting funds.

Hong Kong Police Anti-Deception Coordination Centre

For private parties, rapid action can also improve the chances of:

• Preserving payment evidence
• Identifying recipients
• Alerting banks
• Mapping companies
• Identifying assets
• Preparing civil recovery steps

Cross-Border Transfers Make the Investigation Harder

Fraud money does not necessarily stay in Hong Kong.

A mule account may receive funds locally and immediately transfer them elsewhere.

Once the money crosses jurisdictions, investigators may face:

• Different banking systems
• Different corporate registries
• Different evidence requirements
• Language barriers
• Data-access restrictions
• Local legal procedures

Hong Kong Police has increasingly participated in cross-border anti-scam cooperation, including the FRONTIER+ platform with other jurisdictions in Asia and beyond.

For private investigations, cross-border tracing similarly requires reliable local capabilities.

Compliancia supports fraud, corporate and asset enquiries across Southeast Asia where a payment chain moves beyond a single jurisdiction.

Learn about Compliancia

What Fraud Victims and Counsel Should Preserve

Where a suspected fraud occurs, evidence should be preserved as early as possible.

Useful material may include:

• Bank-transfer confirmations
• Account numbers
• Payment references
• Messaging histories
• Email
• Telephone numbers
• Website addresses
• Screenshots
• Contracts
• Invoices
• Investment statements
• Names used by the suspected operators

Each piece of evidence can connect another part of the network.

A telephone number may identify a messaging profile.

A profile may connect to another victim.

A company name may reveal directors.

A director may lead to other entities.

An account may reveal a payment network.

The investigation grows through linkage.

Why Source Enquiries Can Matter

Financial records tell investigators where money moved.

They do not necessarily explain who controlled the operation.

Local source enquiries can sometimes help establish:

• Who actually operates a company
• Whether a business exists at its registered address
• Who an intermediary works for
• Whether individuals are known associates
• Whether a company has genuine commercial activity

This information needs to be assessed carefully and corroborated.

But in complex fraud matters, human intelligence can add context that databases alone may not reveal.

Fraud Investigation Should Follow the Entire Chain

The main lesson from Hong Kong mule account fraud cases is therefore not simply that mule accounts exist.

It is that they are often one node in a wider financial network.

A useful investigative model is:

Victim → Receiving Account → Mule Network → Intermediaries → Controller → Asset → Ultimate Beneficiary

The further an investigation can reliably establish that chain, the more useful the intelligence becomes for litigation, enforcement and recovery.

How Compliancia Supports Fraud and Asset Investigations

Compliancia supports companies, law firms and their counsel with fraud and investigative intelligence across Southeast Asia.

Relevant capabilities include:

• Fraud investigations
• Account and entity mapping
• Corporate-link analysis
• Beneficial-ownership research
• Source enquiries
• Evidence gathering
• Asset discovery and tracing
• Litigation support
• Cross-border enquiries
• On-the-ground verification

Compliancia investigation services

Compliancia asset discovery services

The objective is not simply to identify the first bank account.

It is to establish:

Who controlled it?
Where did the money go next?
Which individuals and companies are connected?
Who organised the movement?
What assets can be identified?
And who ultimately benefited?

In fraud tracing, the mule account is often the beginning of the investigation — not the end.

Editorial Note

This article discusses a Hong Kong Police operation conducted between 14 and 24 September 2026 based on contemporaneous reporting by several Hong Kong news outlets carrying police information.

Those reports state that 116 people were arrested in connection with 81 suspected fraud cases involving approximately HK$190 million and that most of the arrestees were suspected mule-account holders.

Arrest does not establish guilt, and individuals mentioned in the underlying operation should be presumed innocent unless and until guilt is established through the applicable legal process.

The approximately HK$190 million figure reflects the reported value involved in the suspected cases. It should not be described as money recovered, frozen or returned unless separately confirmed.

At the time of writing, I found multiple contemporaneous local reports carrying the same police figures but did not locate an indexed Hong Kong Police press release for this exact September operation. The operational figures are therefore attributed to police reporting rather than presented as independently established facts.