When investigating an AML event, the following techniques would be used to investigate suspected mule accounts:
A: Determine if the suspected accounts are being accessed by a common person, telephone number, or device. This can help identify if the accounts are controlled by the same person or group, or if they are part of a larger network of mules. It can also help detect if the accounts are opened using synthetic identities or stolen credentials12.
B: Reconcile the stated purpose of the account with actual transaction history and compare with peer groups. This can help assess if the account activity is consistent with the customer profile, risk rating, and expected behavior. It can also help identify anomalies, such as sudden changes in transaction patterns, large or frequent transfers, or transactions with high-risk jurisdictions or entities12.
E: Establish the frequency with which the funds are moved in and out of the accounts. This can help measure the velocity and volume of the funds flowing through the accounts, which can indicate if the accounts are used for layering or integration of illicit funds. It can also help detect if the accounts are used for smurfing, which is a technique of breaking down large amounts of cash into smaller deposits to avoid detection or reporting thresholds13.
References:
CAMS Study Guide (the 6th edition), page 1841
Mule accounts: how to track them down - Linkurious2
Money Mules - FBI3