Mules move what accounts can't — human legs on the cashout chain, paid percentages to let their names sit on transactions. The hierarchy from witting operators down to "task" scams, the rate card the market actually pays, and how mule networks get dismantled from the receiving bank backward — full anatomy hidden below.
— RELATED GUIDES —
Compartment the tiers, script the timing, retire before pressure — mule networks fail at their edges, so the edges get maintained like everything else in this chain. The fee payment is the exhibit; treat every transfer like it will be read aloud.
THE ROLE (KID VERSION)
A mule is a person whose bank account or identity receives value that isn't theirs and moves it onward for a cut. The chain needs them because rails terminate at human names — someone's SSN sits on the receiving account, someone's ID shows at the Western Union window. Mules convert institutional risk (the operator's) into personal risk (the account holder's), and the market pays for that conversion.
THE HIERARCHY
Task-scam economics worth understanding: victims are shown fake profit dashboards, asked to "release tasks" by forwarding money from accounts they opened — by the time police visit, the victim's SSN is on wire fraud paperwork. 2024–2026 enforcement has been heavy on exactly this tier, and victims still get named.
WHAT THE NETWORK PROVIDES
HOW NETWORKS GET UNWOUND
EXPOSURE MATH (WHAT EACH TIER ACTUALLY RISKS)
WORKING RELATIONSHIP (IF YOU RUN OR USE THIS LAYER)
Compartmented, timed, paid clean, retired early — the mule layer works exactly as well as its slowest and least careful participant, which is why the good ones treat holders like infrastructure: maintained, monitored, and retired on schedule.
A mule is a person whose bank account or identity receives value that isn't theirs and moves it onward for a cut. The chain needs them because rails terminate at human names — someone's SSN sits on the receiving account, someone's ID shows at the Western Union window. Mules convert institutional risk (the operator's) into personal risk (the account holder's), and the market pays for that conversion.
THE HIERARCHY
| Tier | Role | Cut (market rates) | Knowledge level |
| Tier 0 | operator (runs the chain) | keeps residual | full knowledge |
| Tier 1 | witting account holder — knowingly rents account | 15-30% of moved volume | full knowledge, high legal exposure |
| Tier 2 | semi-witting — knows it's "off-book" but not scale | 10-20% | partial knowledge, plausible deniability they tell themselves |
| Tier 3 | "task" scam victim — fake jobs, fake apps, told to "receive and forward" | flat fees + fake "earnings" dashboards | genuinely deceived, still legally liable |
| Tier 4 | identity lender — rents SSN/ID for account opening | $100-500 flat per account | knows identity is rented, not the downstream use |
Task-scam economics worth understanding: victims are shown fake profit dashboards, asked to "release tasks" by forwarding money from accounts they opened — by the time police visit, the victim's SSN is on wire fraud paperwork. 2024–2026 enforcement has been heavy on exactly this tier, and victims still get named.
WHAT THE NETWORK PROVIDES
- Fresh account openings at banks/fintechs (Tier 4 identities → Tier 1-2 holders).
- Receive logistics: which rails feed which accounts, timing instructions ("wait 24h, then send X to Y").
- Cash-out logistics: ATM routes, WU pickup choreography, crypto handoffs.
- Compartment structure: mules usually see one leg only — receiving account holder rarely knows upstream source or downstream destination. Compartmentalization protects the operator, not the mule.
HOW NETWORKS GET UNWOUND
- Receiving bank sees fan-in/fan-out graph — accounts map as nodes within weeks of activity.
- KYC on the accounts: real holders identified, then their phone/IP/device links reveal handlers.
- Cash-out point: WU pickup CCTV + ID scan connects physical person to account graph.
- Payment trail between mule and handler (small "commission" payments) links tiers — the fee transaction is often the case's spine.
- Cooperation math: Tier 1-2 face structuring/wire fraud exposure → plea pressure toward Tier 0. Dismantling runs bottom-up by design.
EXPOSURE MATH (WHAT EACH TIER ACTUALLY RISKS)
- Tiers 1-4: account fraud, wire fraud, money laundering counts carry years-level exposure regardless of "I didn't know the source." Knowledge of ILLEGITIMACY (not specifics) suffices for laundering counts in most jurisdictions.
- Account closure + early-warning entry: banking access dies for years, credit sideways damage.
- "Task scam" victims: recent policy reduces SOME victim liability where deception documented — but accounts still close, and prosecutors decide case-by-case.
- Tier 0: full exposure across every downstream account's graph plus conspiracy counts — the cut they kept is exhibit A.
WORKING RELATIONSHIP (IF YOU RUN OR USE THIS LAYER)
Bash:
sourcing: consistent holders > strangers (graph trust compounds)
-> instructions: explicit timing scripts (age 24h, exit pattern from drop guide)
-> compensation: payments structured as unrelated transfers, never labeled, spaced
-> compartment: holder sees receive+exit only, never chain context
-> retirement: quiet wind-down BEFORE account restriction pressure appears
-> assume every fee payment is a future exhibitCompartmented, timed, paid clean, retired early — the mule layer works exactly as well as its slowest and least careful participant, which is why the good ones treat holders like infrastructure: maintained, monitored, and retired on schedule.
— RELATED GUIDES —
- Bank Drop Setup: Opening and Running Drops 2026
- Bank Drop Cashout: ATM, ACH, and BTC Routes
- What Are Fullz: Anatomy, Myths, and Market Truth
- Zelle Cashout Method: Why Instant Means Irreversible
- CC to Western Union: Money Transfer Cashout
Compartment the tiers, script the timing, retire before pressure — mule networks fail at their edges, so the edges get maintained like everything else in this chain. The fee payment is the exhibit; treat every transfer like it will be read aloud.
Last edited: