TL;DR - A money mule moves criminal proceeds for someone else, and crypto job or romance scams routinely recruit ordinary people into the role without them realizing the funds are stolen or laundered.
If a new "remote job", an investment mentor, or an online partner has asked you to receive crypto and forward it on, keep a slice as commission, or "help move funds" through your wallet or exchange account, this guide is for you. Most articles about money mules focus on bank transfers and gift cards. The crypto version is quieter: the recruiter never touches your keys, the transfers look like ordinary payments, and by the time an exchange freezes your account you may have already moved money for a scam ring across several chains. Understanding the pattern early is what keeps a bad decision from becoming a criminal record.
What is a money mule, and could I be one without knowing?
A money mule is a person who receives funds obtained through fraud or crime and then transfers them onward, usually keeping a small cut, so the money's trail is broken and its origin obscured. In crypto the mule is often recruited under a legitimate-looking pretext: a payment-processing job, a "crypto arbitrage" opportunity, or a relationship where the other person needs help cashing out. You may genuinely believe you are doing honest work or a favor.
The law recognizes two broad categories: witting mules who know they are laundering money, and unwitting mules who were deceived. Being unwitting matters a great deal for criminal exposure, but it does not make the funds clean, and it does not stop an exchange from freezing your account. The core problem is the same either way: value that entered your wallet is proceeds of someone else's crime, and moving it further is money laundering in the eyes of a compliance system.
The recruiter stays one hop back. Stolen funds land in your wallet and leave through your cash-out, so on-chain the laundering trail runs straight through you.
How do crypto job and romance scams recruit you as a mule?
Two recruitment channels dominate. The first is the fake job: a "financial agent", "payment coordinator", or "crypto operations" role advertised on messaging apps and job boards, where your duties are to receive deposits and forward them, minus a commission. Government advisories from the FBI and the CFTC describe this exact pattern, where criminals send coins to your wallet or exchange account and instruct you to convert and move them. The salary is the bait; the forwarding is the laundering.
The second channel is the romance or "pig butchering" scam. A partner you met online builds trust over weeks, then explains they cannot access an exchange in their country, or that a large payout is stuck, and asks you to receive and pass along crypto on their behalf. The emotional pretext makes the request feel personal rather than criminal. In both channels the recruiter avoids your private keys entirely, so you remain the visible on-chain party while they stay hidden.
What are the red flags that you are moving someone else's dirty funds?
Money-mule recruitment has a recognizable shape. If several of these apply to a "job" or relationship, treat the funds as high-risk before you move anything:
You are paid a percentage to receive crypto and forward it, rather than to produce any actual work or product.
You were hired fast, with no real interview, and communication stays on Telegram, WhatsApp, or Signal.
You are told to act quickly, to split withdrawals into smaller amounts, or to use a fresh wallet for each transfer.
The counterparty refuses to explain where the money comes from, or the story keeps changing.
You are asked to open an exchange account in your own name and then hand over access or move funds out immediately after deposits land.
Splitting deposits to stay under reporting thresholds is itself a laundering technique, and exchanges are tuned to detect it. If you want to understand why that specific behavior draws scrutiny, our explainer on whether your crypto is tainted or "dirty" covers how tainted value carries risk downstream regardless of how many wallets it passes through.
What are the legal consequences for an unwitting crypto money mule?
The honest answer is that intent controls your criminal exposure, but it does not eliminate your problems. Criminal money-laundering charges generally require that you knew, or deliberately ignored obvious signs, that the funds were criminal proceeds. A truly deceived person who stops the moment they learn the truth is in a very different position from someone who kept moving money after the red flags were clear. The FBI's guidance is explicit that acting as a mule, even unknowingly, can expose you to prosecution, and that willful blindness is not a defense.
Intent shapes criminal exposure, but stopping early is the fact that most separates an innocent recipient from a participant. Account freezes can hit either way.
Beyond criminal law, the practical fallout is immediate: exchanges freeze accounts and file suspicious-activity reports, banks may close accounts linked to the flow, and funds you forwarded can be clawed back, leaving you personally out of pocket for money you never really owned. If you received crypto that later turns out to be stolen, the situation overlaps heavily with what we cover in being charged for receiving stolen crypto unknowingly. The single most protective step is to stop moving the funds the instant you suspect something is wrong.
How do I check the crypto I received and protect myself?
Before you forward anything, you can inspect where the funds came from. A public block explorer like Etherscan lets you trace the sending address, and the public OFAC SDN list tells you whether a counterparty is sanctioned, but doing this by hand across multiple chains and several hops is slow and easy to get wrong. Screen the wallet with Plastron to see in one pass whether the incoming funds trace to scams, stolen-funds pools, mixers, or sanctioned entities across Ethereum and six other EVM chains, so you can judge the risk before you act rather than after an exchange freezes you.
If the screen shows exposure to a known scam address or stolen-funds cluster, that is your signal to stop, keep the coins where they are, and document everything. Knowing the shape of your exposure also lets you answer a source-of-funds question truthfully and specifically instead of guessing under pressure.
FAQ
Can I go to jail for being a money mule if I did not know?
Criminal money-laundering charges generally require knowledge or willful blindness, so a genuinely deceived person who stops immediately is far less exposed than someone who kept moving funds after obvious warning signs. Even so, you can still face frozen accounts, clawbacks, and investigation, so stopping and documenting early is essential.
What should I do right now if I think I moved scam funds?
Stop all transfers immediately, do not send the remaining funds anywhere including back to the recruiter, preserve every message and transaction record, and report the situation to your exchange and to law enforcement. Cooperating and ceasing activity are the facts that most distinguish an innocent recipient from a participant.
Does keeping only a "commission" make it legal?
No. Taking a percentage to receive and forward someone else's criminal proceeds is the definition of a money mule, and the commission is evidence of the arrangement rather than a defense to it.
How can I tell if a crypto job offer is a money-mule scheme?
Be suspicious of any role whose actual task is receiving and forwarding crypto for a cut, that hires you with no real interview, that keeps contact on messaging apps, and that pressures you to split or move funds fast. Legitimate employers do not route their revenue through a new hire's personal wallet.
Disclaimer: This article is for educational and informational purposes only and is not legal, financial, tax, or compliance advice. Crypto carries risk; you act on this information at your own risk. Always do your own research and consult a qualified professional before making decisions. Views are the author's own and do not constitute financial, legal, or investment advice.
About Plastron
Plastron is a free, non-custodial wallet screening tool. It checks Ethereum and six EVM chains for AML and KYT risk — sanctions exposure, mixer contact, and stolen-funds proximity — and returns a risk report in seconds. It reads public on-chain data only: it never takes custody of funds and never asks for private keys.