Social Engineering

TGCSB Busts ₹17 Crore Interstate Cyber Syndicate: 101 Arrested Across 6 States — How Mule Accounts Fuel Scams

The Telangana Cyber Security Bureau arrested 101 operatives linked to 1,172 cyber crimes and ₹17 crore in fraud across 6 states. Learn how mule accounts operate and how to protect yourself.

CyberSathi Desk
TGCSB Busts ₹17 Crore Interstate Cyber Syndicate: 101 Arrested Across 6 States — How Mule Accounts Fuel Scams

In one of the most comprehensive coordinated operations across southern India, the Telangana Cyber Security Bureau (TGCSB) conducted a two-week multi-state crackdown, arresting 101 individuals across six states and Union Territories—Kerala, Tamil Nadu, Karnataka, Andhra Pradesh, Telangana, and Puducherry.

Investigators uncovered direct links between these suspects and 1,172 reported cyber crime cases nationwide, tracing illicit transactions exceeding ₹17 crore.

Beyond the headline numbers, this operation highlighted a dangerous trend reshaping modern cyber fraud in India: cyber syndicates rely heavily on ordinary citizens' bank accounts—known as Money Mule Accounts—to move, layer, and cash out stolen money. Of the 101 arrested, 81 were primary account holders who rented or sold access to their accounts for quick commissions.

1. What Is a Money Mule Account?

A Money Mule Account is a legitimate bank account used by cyber criminals to receive, transfer, and launder stolen money.

When a victim falls for an online scam—such as fake stock trading groups, task-based part-time job frauds, or digital arrest scams—the criminals never deposit the money into their personal accounts. Instead, they direct funds through third-party mule accounts to obscure the digital trail.

The Layered Money Flow

StageActor / LayerWhat Actually HappensRisk / Detection Point
Stage 1VictimFunds sent via UPI/NEFT believing it is a job, investment, or police clearance.Fraud transaction initiated.
Stage 2First-Hop MuleMoney lands in an ordinary citizen's rented account (student, driver, shopkeeper).Account flagged; KYC owner becomes primary suspect.
Stage 3Layering Mule / TrustSplit into multiple smaller chunks across interstate accounts or bogus NGO trusts.Rapid transfers across 5–10 banks to evade automated alerts.
Stage 4Cash-Out & CryptoWithdrawn via ATMs or converted into USDT (crypto) and sent overseas.Trail goes dark; original mule faces legal arrest.

2. Key Revelations from the TGCSB Investigation

  • 81 Mules and 19 Local Agents: The syndicate employed 19 grassroots handlers who scouted colleges, local communities, and commercial districts for willing account holders.
  • 2% to 5% Commission Baits: Account owners were lured with promises of easy income—receiving small commissions of 2% to 5% for allowing transactions between ₹1 lakh and ₹10 lakh.
  • Abuse of NGO and Trust Accounts: Investigators found that scammers also compromised accounts registered under charitable trusts and non-profits, linking them to at least 60 major cyber fraud complaints.
  • Immediate Liquidation: Stolen amounts rarely stayed in an account for more than 15 minutes. Funds were either rapidly withdrawn at ATM clusters or converted into cryptocurrency to move out of regulatory reach.

3. How People Get Trapped in Mule Networks

  1. The "Corporate Current Account" Pretext: Fraudsters pose as business owners claiming they have exceeded their daily transaction limits and need temporary accounts to clear payments.
  2. Account Renting Offers: Unsolicited messages on Telegram and WhatsApp offering ₹15,000 to ₹30,000 monthly for providing debit cards, net banking credentials, and checkbooks.
  3. Deceptive Loan Agents: Fraudulent micro-loan apps and agents collecting Aadhaar and PAN cards to open shell accounts without the customer's explicit knowledge.

Many account holders assume they cannot be prosecuted because they did not personally execute the fraud. Under Indian law:

  • Equal Liability as Co-Conspirators: Under the Bharatiya Nyaya Sanhita (BNS) and the Information Technology (IT) Act, facilitating stolen money makes the account holder legally liable as an active participant in criminal conspiracy.
  • Pan-India Account Freezes: Law enforcement alerts banks via the National Cyber Crime Reporting Portal, causing all bank accounts associated with your PAN to be frozen immediately.
  • Long-Term Banking Blacklisting: Once listed in national fraud databases, individuals lose the ability to apply for credit cards, personal loans, or open future accounts.

5. Practical Rules to Protect Your Accounts

  1. Never Rent or Share Banking Access: Keep your debit cards, passbooks, checkbooks, and net banking credentials strictly confidential. Never hand them over to anyone.
  2. Decline Third-Party Routing Requests: Never accept transfers from unknown sources with a promise to withdraw or forward cash.
  3. Audit Active SIM Connections via TAFCOP:
    • Visit the official Department of Telecommunications portal at sancharsaathi.gov.in.
    • Open the TAFCOP module, enter your primary mobile number, and complete OTP verification.
    • Review all mobile numbers issued under your identity. Flag and disconnect any unauthorized numbers.
  4. Monitor Statements Regularly: Inspect your bank account activity at least twice a month for unauthorized micro-credits or unfamiliar transactions.
  5. Report Immediate Anomalies: If you discover unauthorized funds deposited into your account, notify your bank manager in writing immediately.

6. What to Do If Your Account Is Compromised

  • Call Helpline 1930 Immediately: Report the incident to the National Cyber Crime Helpline (1930) within the first two hours to maximize chances of freezing unauthorized transfers.
  • Instruct Your Bank to Place a Hold: Visit your home branch and submit a formal request to place a temporary freeze on online banking and card transactions.
  • Lodge a Formal Report on Cybercrime.gov.in: Submit complete transaction statements, messages, and contact details at cybercrime.gov.in. Reporting early demonstrates clear intent to cooperate and establishes that you were not a willful participant in the scheme.

Read next