[{"data":1,"prerenderedAt":1055},["ShallowReactive",2],{"$fANBXRA5qL30ILKEJ9yf5YjnDopLtm9f9mk-Ss1FBpQk":3,"$fg5C43Lm8FW29OKvL62b0UU3nMI7jsUj5RXBGlc_cwXA":193,"page:site-default:uri-blockchain-basics__what-is-a-crypto-money-mule":649,"articles:categories-crypto-crime:channel-blockchainBasics:limit-9:site-default":764,"article-formatted-default-108381":938,"faqs-default-crypto-crime-5":1054},{"globalSet":4},{"__typename":5,"dateUpdated":6,"footerLinks":7,"buttonLinks":182,"plainText":188,"plainText2":189,"entry":190},"footer_GlobalSet","2026-07-29T12:38:35+01:00",[8,41,94,120,152],{"buttonLink":9,"buttonLinks":15},[10],{"title":11,"ariaLabel":11,"target":11,"linkUrl":12,"text":13,"__typename":14},null,"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002F","Solutions & Industries","buttonLink_Entry_LinkType",[16,21,26,31,36],{"buttonLink":17},[18],{"title":11,"ariaLabel":11,"target":11,"linkUrl":19,"text":20,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002F","Banks and financial institutions",{"buttonLink":22},[23],{"title":11,"ariaLabel":11,"target":11,"linkUrl":24,"text":25,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fcrypto-companies\u002F","Crypto companies",{"buttonLink":27},[28],{"title":11,"ariaLabel":11,"target":11,"linkUrl":29,"text":30,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fgovernments-regulators\u002F","Governments and regulators",{"buttonLink":32},[33],{"title":11,"ariaLabel":11,"target":11,"linkUrl":34,"text":35,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Flaw-enforcement\u002F","Law enforcement",{"buttonLink":37},[38],{"title":11,"ariaLabel":11,"target":11,"linkUrl":39,"text":40,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002F","Payment service providers",{"buttonLink":42,"buttonLinks":46},[43],{"title":11,"ariaLabel":11,"target":11,"linkUrl":44,"text":45,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002F","Products",[47,52,57,62,67,72,77,82,89],{"buttonLink":48},[49],{"title":11,"ariaLabel":11,"target":11,"linkUrl":50,"text":51,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fdiscovery\u002F","Discovery",{"buttonLink":53},[54],{"title":11,"ariaLabel":11,"target":11,"linkUrl":55,"text":56,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Flens\u002F","Lens",{"buttonLink":58},[59],{"title":11,"ariaLabel":11,"target":11,"linkUrl":60,"text":61,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Finvestigator\u002F","Investigator",{"buttonLink":63},[64],{"title":11,"ariaLabel":11,"target":11,"linkUrl":65,"text":66,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fecosystem-monitoring\u002F","Ecosystem monitoring",{"buttonLink":68},[69],{"title":11,"ariaLabel":11,"target":11,"linkUrl":70,"text":71,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fdata-fabric\u002F","Data Fabric",{"buttonLink":73},[74],{"title":11,"ariaLabel":11,"target":11,"linkUrl":75,"text":76,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Felliptic-copilot\u002F","Elliptic’s copilot",{"buttonLink":78},[79],{"title":11,"ariaLabel":11,"target":11,"linkUrl":80,"text":81,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fplatform\u002F","The Elliptic difference",{"buttonLink":83},[84],{"title":11,"ariaLabel":11,"target":85,"linkUrl":86,"text":87,"__typename":88},"_blank","https:\u002F\u002Fdevelopers.elliptic.co\u002Freference\u002Fgetting-started","API Documentation","buttonLink_Url_LinkType",{"buttonLink":90},[91],{"title":11,"ariaLabel":11,"target":85,"linkUrl":92,"text":93,"__typename":88},"https:\u002F\u002Fstatus.elliptic.co\u002F","Service Status",{"buttonLink":95,"buttonLinks":99},[96],{"title":11,"ariaLabel":11,"target":11,"linkUrl":97,"text":98,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ftraining-and-certifications\u002F","Training & Certifications",[100,105,110,115],{"buttonLink":101},[102],{"title":11,"ariaLabel":11,"target":11,"linkUrl":103,"text":104,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ftraining-and-certifications\u002Fcrypto-certification\u002F","Crypto certification",{"buttonLink":106},[107],{"title":11,"ariaLabel":11,"target":11,"linkUrl":108,"text":109,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ftraining-and-certifications\u002Fproduct-certifications\u002F","Product certifications",{"buttonLink":111},[112],{"title":11,"ariaLabel":11,"target":11,"linkUrl":113,"text":114,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fblockchain-basics\u002F","Blockchain basics",{"buttonLink":116},[117],{"title":11,"ariaLabel":11,"target":11,"linkUrl":118,"text":119,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ftraining-and-certifications\u002Fspotlight-series\u002F","Spotlight series",{"buttonLink":121,"buttonLinks":126},[122],{"title":123,"ariaLabel":11,"target":11,"linkUrl":124,"text":11,"__typename":125},"Insights & Community","","buttonLink_Custom_LinkType",[127,132,137,142,147],{"buttonLink":128},[129],{"title":11,"ariaLabel":11,"target":11,"linkUrl":130,"text":131,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Finsights\u002F","Insights and research",{"buttonLink":133},[134],{"title":11,"ariaLabel":11,"target":11,"linkUrl":135,"text":136,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fcustomer-stories\u002F","Customer stories",{"buttonLink":138},[139],{"title":11,"ariaLabel":11,"target":11,"linkUrl":140,"text":141,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ffaqs\u002F","FAQs",{"buttonLink":143},[144],{"title":11,"ariaLabel":11,"target":11,"linkUrl":145,"text":146,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fwebinars\u002F","Webinars",{"buttonLink":148},[149],{"title":11,"ariaLabel":11,"target":11,"linkUrl":150,"text":151,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fnewsroom\u002F","Newsroom",{"buttonLink":153,"buttonLinks":156},[154],{"title":155,"ariaLabel":11,"target":11,"linkUrl":124,"text":11,"__typename":125},"Company",[157,162,167,172,177],{"buttonLink":158},[159],{"title":11,"ariaLabel":11,"target":11,"linkUrl":160,"text":161,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fabout-elliptic\u002F","About Elliptic",{"buttonLink":163},[164],{"title":11,"ariaLabel":11,"target":11,"linkUrl":165,"text":166,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Ftrust\u002F","Security & Trust",{"buttonLink":168},[169],{"title":11,"ariaLabel":11,"target":11,"linkUrl":170,"text":171,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fpartners\u002F","Partners",{"buttonLink":173},[174],{"title":11,"ariaLabel":11,"target":11,"linkUrl":175,"text":176,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fcareers\u002F","Careers",{"buttonLink":178},[179],{"title":11,"ariaLabel":11,"target":11,"linkUrl":180,"text":181,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fcontact\u002F","Contact",[183],{"buttonLink":184},[185],{"title":11,"ariaLabel":11,"target":11,"linkUrl":186,"text":187,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fprivacy-notice\u002F","Privacy Notice","Elliptic Enterprises Limited. Registered in England and Wales (number 8458210). VAT registration number 171021261.","Stay ahead with expert insights",[191],{"uri":192},"newsletter",{"globalSet":194},{"__typename":195,"dateUpdated":196,"headerLinks":197,"buttonLink":623,"buttonLink2":627,"buttonLinks":631,"externalLink":644,"plainText":646,"cardLink":647,"enabledSwitch":648},"header_GlobalSet","2026-08-06T10:19:11+01:00",[198,391,471,550],{"buttonLink":199,"headerDropdownVariant":201,"title":202,"primaryLinksSubDropdown":203,"primaryLinks":371,"minorLinks":372,"plainText":373,"buttonLink2":374,"plainText2":379,"asset":380},[200],{"title":11,"ariaLabel":11,"target":11,"linkUrl":12,"text":13,"__typename":14},"standard","Solutions for",[204,247,282,315,346],{"image":205,"buttonLink":209,"plainText":211,"title":11,"buttonLinks":212},[206],{"title":207,"url":208,"alt":11},"Icon Finance","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconFinance.svg",[210],{"title":11,"ariaLabel":11,"target":11,"linkUrl":19,"text":20,"__typename":14},"Manage crypto risk with confidence",[213,217,222,227,232,237,242],{"buttonLink":214},[215],{"title":11,"ariaLabel":11,"target":11,"linkUrl":19,"text":216,"__typename":14},"How we help financial institutions",{"buttonLink":218},[219],{"title":11,"ariaLabel":11,"target":11,"linkUrl":220,"text":221,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Fscreening-and-monitoring\u002F","Screening and monitoring",{"buttonLink":223},[224],{"title":11,"ariaLabel":11,"target":11,"linkUrl":225,"text":226,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Fregulatory-reporting\u002F","Regulatory reporting",{"buttonLink":228},[229],{"title":11,"ariaLabel":11,"target":11,"linkUrl":230,"text":231,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Fentity-due-diligence\u002F","Entity due diligence",{"buttonLink":233},[234],{"title":11,"ariaLabel":11,"target":11,"linkUrl":235,"text":236,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Fstablecoin-risk-management\u002F","Stablecoin risk management",{"buttonLink":238},[239],{"title":11,"ariaLabel":11,"target":11,"linkUrl":240,"text":241,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Frisk-management\u002F","Risk Management",{"buttonLink":243},[244],{"title":11,"ariaLabel":11,"target":11,"linkUrl":245,"text":246,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Ffinancial-institutions\u002Finvestigations\u002F","Investigations",{"image":248,"buttonLink":252,"plainText":255,"title":11,"buttonLinks":256},[249],{"title":250,"url":251,"alt":11},"Icon Target","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconTarget.svg",[253],{"title":254,"ariaLabel":11,"target":11,"linkUrl":24,"text":25,"__typename":14},"Crypto Natives","Scale rapidly in digital assets",[257,261,265,270,274,279],{"buttonLink":258},[259],{"title":11,"ariaLabel":11,"target":11,"linkUrl":24,"text":260,"__typename":14},"How we help crypto companies",{"buttonLink":262},[263],{"title":11,"ariaLabel":11,"target":11,"linkUrl":264,"text":221,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fcrypto-companies\u002Fscreening-and-monitoring\u002F",{"buttonLink":266},[267],{"title":11,"ariaLabel":11,"target":11,"linkUrl":268,"text":269,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fcrypto-companies\u002Fblockchain-analytics\u002F","Blockchain analytics",{"buttonLink":271},[272],{"title":11,"ariaLabel":11,"target":11,"linkUrl":273,"text":246,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fcrypto-companies\u002Finvestigations\u002F",{"buttonLink":275},[276],{"title":11,"ariaLabel":11,"target":11,"linkUrl":277,"text":278,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fcrypto-companies\u002Fdata-and-intelligence\u002F","Data and intelligence",{"buttonLink":280},[281],{"title":11,"ariaLabel":11,"target":11,"linkUrl":86,"text":87,"__typename":88},{"image":283,"buttonLink":287,"plainText":289,"title":11,"buttonLinks":290},[284],{"title":285,"url":286,"alt":11},"Icon Credit card","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconCredit-card.svg",[288],{"title":11,"ariaLabel":11,"target":11,"linkUrl":39,"text":40,"__typename":14},"Move money with trust and speed",[291,295,299,303,307,311],{"buttonLink":292},[293],{"title":11,"ariaLabel":11,"target":11,"linkUrl":39,"text":294,"__typename":14},"How we help payment service providers",{"buttonLink":296},[297],{"title":11,"ariaLabel":11,"target":11,"linkUrl":298,"text":221,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002Fscreening-and-monitoring\u002F",{"buttonLink":300},[301],{"title":11,"ariaLabel":11,"target":11,"linkUrl":302,"text":246,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002Finvestigations\u002F",{"buttonLink":304},[305],{"title":11,"ariaLabel":11,"target":11,"linkUrl":306,"text":278,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002Fdata-and-intelligence\u002F",{"buttonLink":308},[309],{"title":11,"ariaLabel":11,"target":11,"linkUrl":310,"text":269,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002Fblockchain-analytics\u002F",{"buttonLink":312},[313],{"title":11,"ariaLabel":11,"target":11,"linkUrl":314,"text":236,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fpayment-service-providers\u002Fstablecoin-risk-management\u002F",{"image":316,"buttonLink":320,"plainText":322,"title":11,"buttonLinks":323},[317],{"title":318,"url":319,"alt":11},"Icon Flag","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconFlag.svg",[321],{"title":11,"ariaLabel":11,"target":11,"linkUrl":29,"text":30,"__typename":14},"Strengthen oversight of digital assets",[324,328,332,337,342],{"buttonLink":325},[326],{"title":11,"ariaLabel":11,"target":11,"linkUrl":29,"text":327,"__typename":14},"How we help governments and regulators",{"buttonLink":329},[330],{"title":11,"ariaLabel":11,"target":11,"linkUrl":331,"text":278,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fgovernments-regulators\u002Fdata-and-intelligence\u002F",{"buttonLink":333},[334],{"title":11,"ariaLabel":11,"target":11,"linkUrl":335,"text":336,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fgovernments-regulators\u002Fblockchain-analytics\u002F","Blockchain Analytics",{"buttonLink":338},[339],{"title":11,"ariaLabel":11,"target":11,"linkUrl":340,"text":341,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fgovernments-regulators\u002Fdue-diligence-dashboards\u002F","Due diligence dashboards",{"buttonLink":343},[344],{"title":11,"ariaLabel":11,"target":11,"linkUrl":345,"text":221,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Fgovernments-regulators\u002Fscreening-and-monitoring\u002F",{"image":347,"buttonLink":351,"plainText":353,"title":11,"buttonLinks":354},[348],{"title":349,"url":350,"alt":11},"Icon Shield","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconShield.svg",[352],{"title":11,"ariaLabel":11,"target":11,"linkUrl":34,"text":35,"__typename":14},"Trace illicit activity and recover assets",[355,359,363,367],{"buttonLink":356},[357],{"title":11,"ariaLabel":11,"target":11,"linkUrl":34,"text":358,"__typename":14},"How we help law enforcement",{"buttonLink":360},[361],{"title":11,"ariaLabel":11,"target":11,"linkUrl":362,"text":269,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Flaw-enforcement\u002Fblockchain-analytics\u002F",{"buttonLink":364},[365],{"title":11,"ariaLabel":11,"target":11,"linkUrl":366,"text":221,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Flaw-enforcement\u002Fscreening-and-monitoring\u002F",{"buttonLink":368},[369],{"title":11,"ariaLabel":11,"target":11,"linkUrl":370,"text":246,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fsolutions\u002Flaw-enforcement\u002Finvestigations\u002F",[],[],"Spotlight",[375],{"title":11,"ariaLabel":11,"target":11,"linkUrl":376,"text":377,"__typename":378},"https:\u002F\u002Fwww.elliptic.co\u002Fnewsroom\u002Finside-operation-atlantic-how-blockchain-analytics-helped-disrupt-approval-phishing-at-scale\u002F","Operation Atlantic","buttonLink2_Entry_LinkType","How Elliptic helped trace $45M+ in stolen crypto",[381],{"__typename":382,"image":383,"mobileImage":390},"image_Entry",[384],{"title":385,"url":386,"alt":387,"width":388,"height":389},"Jeans ynxy F Id93 Ws unsplash 1","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Fjeans-ynxyFId93Ws-unsplash-1.jpg","A high-angle view of a modern staircase with curved glass railings and people walking below on the tiled floor.",760,800,[],{"buttonLink":392,"headerDropdownVariant":394,"title":45,"primaryLinksSubDropdown":395,"primaryLinks":396,"minorLinks":429,"plainText":456,"buttonLink2":457,"plainText2":461,"asset":462},[393],{"title":11,"ariaLabel":11,"target":11,"linkUrl":44,"text":45,"__typename":14},"minorLinks",[],[397,405,413,421],{"image":398,"buttonLink":402,"plainText":404},[399],{"title":400,"url":401,"alt":11},"Icon Scan","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconScan.svg",[403],{"title":11,"ariaLabel":11,"target":11,"linkUrl":55,"text":56,"__typename":14},"Real-time multi-asset wallet & transaction screening",{"image":406,"buttonLink":410,"plainText":412},[407],{"title":408,"url":409,"alt":11},"Icon Compass","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconCompass.svg",[411],{"title":11,"ariaLabel":11,"target":11,"linkUrl":50,"text":51,"__typename":14},"VASP screening & entity due diligence",{"image":414,"buttonLink":418,"plainText":420},[415],{"title":416,"url":417,"alt":11},"Icon Click","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconClick.svg",[419],{"title":11,"ariaLabel":11,"target":11,"linkUrl":60,"text":61,"__typename":14},"Single-click cross-chain investigations",{"image":422,"buttonLink":426,"plainText":428},[423],{"title":424,"url":425,"alt":11},"Icon Graph","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconGraph.svg",[427],{"title":11,"ariaLabel":11,"target":11,"linkUrl":65,"text":66,"__typename":14},"Visualizations for crypto exposure trend analysis",[430],{"title":431,"buttonLinks":432},"Platform",[433,436,441,446,449,452],{"buttonLink":434},[435],{"title":11,"ariaLabel":11,"target":11,"linkUrl":80,"text":81,"__typename":14},{"buttonLink":437},[438],{"title":11,"ariaLabel":11,"target":11,"linkUrl":439,"text":440,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fissuer-due-diligence\u002F","Issuer due diligence",{"buttonLink":442},[443],{"title":11,"ariaLabel":11,"target":11,"linkUrl":444,"text":445,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fproducts\u002Fasset-due-diligence\u002F","Asset due diligence",{"buttonLink":447},[448],{"title":11,"ariaLabel":11,"target":11,"linkUrl":70,"text":71,"__typename":14},{"buttonLink":450},[451],{"title":11,"ariaLabel":11,"target":11,"linkUrl":75,"text":76,"__typename":14},{"buttonLink":453},[454],{"title":11,"ariaLabel":11,"target":85,"linkUrl":86,"text":455,"__typename":88},"API documentation","ROI",[458],{"title":11,"ariaLabel":11,"target":11,"linkUrl":459,"text":460,"__typename":378},"https:\u002F\u002Fwww.elliptic.co\u002Fcrypto-compliance-calculator\u002F","Compliance efficency calculator","See how much your business could save",[463],{"__typename":382,"image":464,"mobileImage":470},[465],{"title":466,"url":467,"alt":468,"width":388,"height":469},"Sj objio Ecxd9 F Eo2 Kk unsplash 1 1","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Fsj-objio-Ecxd9FEo2Kk-unsplash-1-1.jpg","Person wearing a brown blazer and white shirt sitting at a table with a laptop and a cup, holding a green pen, in low light.",680,[],{"buttonLink":472,"headerDropdownVariant":394,"title":474,"primaryLinksSubDropdown":475,"primaryLinks":495,"minorLinks":518,"plainText":535,"buttonLink2":536,"plainText2":540,"asset":541},[473],{"title":11,"ariaLabel":11,"target":11,"linkUrl":97,"text":98,"__typename":14},"Courses",[476,482,488],{"image":477,"buttonLink":478,"plainText":480,"title":11,"buttonLinks":481},[],[479],{"title":11,"ariaLabel":11,"target":11,"linkUrl":103,"text":104,"__typename":14},"Turn your team into crypto experts",[],{"image":483,"buttonLink":484,"plainText":486,"title":11,"buttonLinks":487},[],[485],{"title":11,"ariaLabel":11,"target":11,"linkUrl":108,"text":109,"__typename":14},"Master wallet screening, transaction monitoring and deep investigations",[],{"image":489,"buttonLink":490,"plainText":493,"title":11,"buttonLinks":494},[],[491],{"title":11,"ariaLabel":11,"target":11,"linkUrl":118,"text":492,"__typename":14},"On-demand courses","Self-paced compliance training",[],[496,503,511],{"image":497,"buttonLink":501,"plainText":486},[498],{"title":499,"url":500,"alt":11},"Icon Award C","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconAward-C.svg",[502],{"title":11,"ariaLabel":11,"target":11,"linkUrl":103,"text":104,"__typename":14},{"image":504,"buttonLink":508,"plainText":510},[505],{"title":506,"url":507,"alt":11},"Icon Award P","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconAward-P.svg",[509],{"title":11,"ariaLabel":11,"target":11,"linkUrl":108,"text":109,"__typename":14},"Turn your team into experts on Elliptic's blockchain analytics solutions",{"image":512,"buttonLink":516,"plainText":493},[513],{"title":514,"url":515,"alt":11},"Icon Laptop","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconLaptop.svg",[517],{"title":11,"ariaLabel":11,"target":11,"linkUrl":118,"text":119,"__typename":14},[519],{"title":520,"buttonLinks":521},"Fundamentals",[522,525,530],{"buttonLink":523},[524],{"title":11,"ariaLabel":11,"target":11,"linkUrl":113,"text":114,"__typename":14},{"buttonLink":526},[527],{"title":11,"ariaLabel":11,"target":11,"linkUrl":528,"text":529,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fcountry-guides\u002F","Country guides",{"buttonLink":531},[532],{"title":11,"ariaLabel":11,"target":11,"linkUrl":533,"text":534,"__typename":125},"\u002Fglossary\u002F","Glossary","Webinar",[537],{"title":11,"ariaLabel":11,"target":11,"linkUrl":538,"text":539,"__typename":378},"https:\u002F\u002Fwww.elliptic.co\u002Fwebinars\u002Fcrypto-regulation-in-2026-on-demand-webinar\u002F","Crypto regulation in 2026: How to prepare","Watch on demand",[542],{"__typename":382,"image":543,"mobileImage":549},[544],{"title":545,"url":546,"alt":547,"width":388,"height":548},"Sj objio Ecxd9 F Eo2 Kk unsplash 1","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Fsj-objio-Ecxd9FEo2Kk-unsplash-1.jpg","A close-up of a laptop screen displaying a video call interface with various participant windows and controls in a dark theme.",600,[],{"buttonLink":551,"headerDropdownVariant":394,"title":553,"primaryLinksSubDropdown":554,"primaryLinks":573,"minorLinks":596,"plainText":609,"buttonLink2":610,"plainText2":614,"asset":615},[552],{"title":123,"ariaLabel":11,"target":11,"linkUrl":124,"text":11,"__typename":125},"Resources",[555,561,567],{"image":556,"buttonLink":557,"plainText":559,"title":11,"buttonLinks":560},[],[558],{"title":11,"ariaLabel":11,"target":11,"linkUrl":130,"text":131,"__typename":14},"From quick guides to trend forecasting and deep analysis",[],{"image":562,"buttonLink":563,"plainText":565,"title":11,"buttonLinks":566},[],[564],{"title":11,"ariaLabel":11,"target":11,"linkUrl":135,"text":136,"__typename":14},"See how Elliptic has helped global leaders",[],{"image":568,"buttonLink":569,"plainText":571,"title":11,"buttonLinks":572},[],[570],{"title":11,"ariaLabel":11,"target":11,"linkUrl":140,"text":141,"__typename":14},"All your questions, answered",[],[574,581,589],{"image":575,"buttonLink":579,"plainText":559},[576],{"title":577,"url":578,"alt":11},"Icon Bulb","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconBulb.svg",[580],{"title":11,"ariaLabel":11,"target":11,"linkUrl":130,"text":131,"__typename":14},{"image":582,"buttonLink":586,"plainText":588},[583],{"title":584,"url":585,"alt":11},"Icon Person","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconPerson.svg",[587],{"title":11,"ariaLabel":11,"target":11,"linkUrl":135,"text":136,"__typename":14},"Real results, big impact.",{"image":590,"buttonLink":594,"plainText":571},[591],{"title":592,"url":593,"alt":11},"Icon Question","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Ficons\u002FIconQuestion.svg",[595],{"title":11,"ariaLabel":11,"target":11,"linkUrl":140,"text":141,"__typename":14},[597],{"title":598,"buttonLinks":599},"Community",[600,603,606],{"buttonLink":601},[602],{"title":11,"ariaLabel":11,"target":11,"linkUrl":145,"text":146,"__typename":14},{"buttonLink":604},[605],{"title":11,"ariaLabel":11,"target":11,"linkUrl":150,"text":151,"__typename":14},{"buttonLink":607},[608],{"title":11,"ariaLabel":11,"target":11,"linkUrl":170,"text":171,"__typename":14},"Success story",[611],{"title":11,"ariaLabel":11,"target":11,"linkUrl":612,"text":613,"__typename":378},"https:\u002F\u002Fwww.elliptic.co\u002Fcustomer-stories\u002Fglobal-crypto-exchange-realizes-31m-efficiency-gain-through-compliance-transformation-with-elliptic\u002F","Global crypto exchange realizes $3.1M efficiency gain with Elliptic","Uncover the story",[616],{"__typename":382,"image":617,"mobileImage":622},[618],{"title":619,"url":620,"alt":621,"width":388,"height":548},"Sj objio Ecxd9 F Eo2 Kk unsplash 1 2","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Fsj-objio-Ecxd9FEo2Kk-unsplash-1-2.jpg","Rows of dark green stadium seats arranged in a pattern, set against a dim background, creating a sense of depth and emptiness.",[],[624],{"title":11,"ariaLabel":11,"target":11,"linkUrl":625,"text":626,"__typename":14},"https:\u002F\u002Fwww.elliptic.co\u002Fget-started\u002F","Get a demo",[628],{"title":629,"ariaLabel":11,"target":11,"linkUrl":124,"text":11,"__typename":630},"Company & Careers","buttonLink2_Custom_LinkType",[632,635,638,641],{"buttonLink":633},[634],{"title":11,"ariaLabel":11,"target":11,"linkUrl":160,"text":161,"__typename":14},{"buttonLink":636},[637],{"title":11,"ariaLabel":11,"target":11,"linkUrl":165,"text":166,"__typename":14},{"buttonLink":639},[640],{"title":11,"ariaLabel":11,"target":11,"linkUrl":175,"text":176,"__typename":14},{"buttonLink":642},[643],{"title":11,"ariaLabel":11,"target":11,"linkUrl":180,"text":181,"__typename":14},{"url":645},"https:\u002F\u002Fapp.elliptic.co\u002F?_gl=1*7ha9nv*_gcl_aw*R0NMLjE3ODE2OTM0OTcuQ2owS0NRandpOG5SQmhEaEFSSXNBSFpmX3BiZDZ3X1N5dlRaWEw0Y0x4Njd2YXBDelZrYzZwYjRqYnZFWGFvYVlGSExKdUNUMlVad01qWWFBZ3VSRUFMd193Y0I.*_gcl_au*MTMzNjMwMTA3MC4xNzgxNjkzNDk3","We’re hiring! Join us and make a move that matters",{"url":175,"target":11},true,{"__typename":650,"siteName":651,"uri":652,"id":653,"title":654,"url":655,"postDate":656,"dateUpdated":657,"slug":658,"sectionHandle":659,"ancestors":660,"authorSelect":661,"asset":675,"categoryTopics":685,"categoryNewsTypes":689,"categoryIndustries":690,"categoryRegions":691,"seo":692,"articleContentArea":701,"faqs":761,"articleSelect":762,"plainText":11,"plainText2":11,"buttonLink":763},"article_Entry","Elliptic","blockchain-basics\u002Fwhat-is-a-crypto-money-mule","108381","What is a crypto money mule","https:\u002F\u002Fwww.elliptic.co\u002Fblockchain-basics\u002Fwhat-is-a-crypto-money-mule\u002F","2026-07-10T16:26:00+01:00","2026-08-27T15:00:30+01:00","what-is-a-crypto-money-mule","blockchainBasics",[],[662],{"title":651,"uri":663,"plainText":11,"textBlock":664,"image":666,"externalLink":11,"plainText2":672,"entry":673},"authors\u002Felliptic",{"rawHtml":665},"\u003Cp>Here we discuss cryptoasset compliance, blockchain analysis, financial crime, sanctions regulation, and how Elliptic supports our crypto business and financial services customers with solutions.\u003C\u002Fp>",[667],{"title":668,"url":669,"alt":670,"width":671,"height":671},"Apple touch icon","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Fapple-touch-icon.png","Stylized letter \"E\" in a 3D effect, set against a gradient green background.",180,"Stay ahead with exclusive insight from our experts.",[674],{"uri":192},[676],{"__typename":382,"image":677,"mobileImage":684},[678],{"title":679,"url":680,"alt":681,"width":682,"height":683},"What is a crypto mule 720x380","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002FWhat-is-a-crypto-mule_720x380.webp","Digital representation of data with binary code and cryptocurrency icons illustrating a flow from traditional currency to various cryptocurrencies.",1000,528,[],[686],{"title":687,"slug":688},"Crypto Crime","crypto-crime",[],[],[],{"title":693,"description":124,"advanced":694,"keywords":696,"social":697},"What is a crypto money mule | Elliptic",{"canonical":124,"robots":695},[],[],{"facebook":698,"twitter":700},{"description":124,"title":699},"What is a crypto money mule - Elliptic",{"description":124,"title":699},[702],{"articleContentAreaBlocks":703},[704,710,718,722,727,731,736,741,746,751,756],{"__typename":705,"textBlock":706},"textBlock_Entry",{"html":707,"rawHtml":707,"markdown":708,"plainText":709},"\u003Cp>A crypto money mule is a person who receives illicitly obtained cryptoassets and moves them onward on behalf of someone else. Sometimes shortened to crypto mule, the role is the same one money mules have played in traditional finance for decades, transferred to blockchains. A crypto money mule is, in effect, a money mule operating with cryptoassets.\u003C\u002Fp>\u003Cp>It helps to separate two terms that are often used interchangeably:\u003C\u002Fp>\u003Cul>\u003Cli>\u003Cstrong>A mule account\u003C\u002Fstrong> is the account that illicit cryptoassets pass through, usually an account at a virtual asset service provider (VASP).\u003C\u002Fli>\u003Cli>\u003Cstrong>A crypto money mule\u003C\u002Fstrong> is the individual who controls that account and carries out the transfers.\u003C\u002Fli>\u003C\u002Ful>\u003Cp>The mule account is the vehicle and the crypto money mule is the driver. The account may be the mule's own or one opened at a third party's request.\u003C\u002Fp>\u003Cp>Crypto money mules sit in the middle of laundering chains. Their function is to add distance between stolen funds and the people who stole them, breaking the trail so the original perpetrators are harder for law enforcement to reach.\u003C\u002Fp>","A crypto money mule is a person who receives illicitly obtained cryptoassets and moves them onward on behalf of someone else. Sometimes shortened to crypto mule, the role is the same one money mules have played in traditional finance for decades, transferred to blockchains. A crypto money mule is, in effect, a money mule operating with cryptoassets.\n\nIt helps to separate two terms that are often used interchangeably:\n\n- **A mule account** is the account that illicit cryptoassets pass through, usually an account at a virtual asset service provider (VASP).\n- **A crypto money mule** is the individual who controls that account and carries out the transfers.\n\nThe mule account is the vehicle and the crypto money mule is the driver. The account may be the mule's own or one opened at a third party's request.\n\nCrypto money mules sit in the middle of laundering chains. Their function is to add distance between stolen funds and the people who stole them, breaking the trail so the original perpetrators are harder for law enforcement to reach.","A crypto money mule is a person who receives illicitly obtained cryptoassets and moves them onward on behalf of someone else. Sometimes shortened to crypto mule, the role is the same one money mules have played in traditional finance for decades, transferred to blockchains. A crypto money mule is, in effect, a money mule operating with cryptoassets.\n\nIt helps to separate two terms that are often used interchangeably:\n\n- A mule account is the account that illicit cryptoassets pass through, usually an account at a virtual asset service provider (VASP).\n- A crypto money mule is the individual who controls that account and carries out the transfers.\n\nThe mule account is the vehicle and the crypto money mule is the driver. The account may be the mule's own or one opened at a third party's request.\n\nCrypto money mules sit in the middle of laundering chains. Their function is to add distance between stolen funds and the people who stole them, breaking the trail so the original perpetrators are harder for law enforcement to reach.",{"__typename":711,"heading":712},"headingBlock_Entry",[713],{"headingTextBlock":714,"headingType":716,"headingStyle":716,"animated":717},{"rawHtml":715},"\u003Cp>How do people become crypto money mules?\u003C\u002Fp>","h2",false,{"__typename":705,"textBlock":719},{"html":720,"rawHtml":720,"markdown":721,"plainText":721},"\u003Cp>Crypto money mules fall into two groups: witting and unwitting. Witting mules know what they are doing. They understand the funds are illicit, or ignore obvious warning signs, and in some cases are actively complicit in the scheme.\u003C\u002Fp>\u003Cp>This said, the account a witting mule uses is not necessarily one they created themselves. Some mule accounts are legitimate accounts that have been compromised, bought or rented, so a verified history built up over years masks the activity moving through them now.\u003C\u002Fp>\u003Cp>Others are created at scale using stolen or falsified identity documents for the sole purpose of muling, a practice known as mule account farming. The distinction shapes where the activity surfaces: a compromised account shows a sudden break from its established behavior, while a farmed account tends to have thin history and shares identifying details with other accounts.\u003C\u002Fp>\u003Cp>On the other side are unwitting mules, who do not realize they are part of a laundering operation. They are typically recruited through deception. Common methods include:\u003C\u002Fp>\u003Cul>\u003Cli>Romance scams, where a fake online partner persuades the victim to receive and forward money.\u003Cbr \u002F>\u003Cbr \u002F> \u003C\u002Fli>\u003Cli>Fake job offers, often advertised as remote payment-processing or financial-agent roles that involve moving funds for a supposed employer.\u003Cbr \u002F>\u003Cbr \u002F> \u003C\u002Fli>\u003Cli>Other social engineering, such as messages promising easy money in return for use of a bank or exchange account.\u003C\u002Fli>\u003C\u002Ful>","Crypto money mules fall into two groups: witting and unwitting. Witting mules know what they are doing. They understand the funds are illicit, or ignore obvious warning signs, and in some cases are actively complicit in the scheme.\n\nThis said, the account a witting mule uses is not necessarily one they created themselves. Some mule accounts are legitimate accounts that have been compromised, bought or rented, so a verified history built up over years masks the activity moving through them now.\n\nOthers are created at scale using stolen or falsified identity documents for the sole purpose of muling, a practice known as mule account farming. The distinction shapes where the activity surfaces: a compromised account shows a sudden break from its established behavior, while a farmed account tends to have thin history and shares identifying details with other accounts.\n\nOn the other side are unwitting mules, who do not realize they are part of a laundering operation. They are typically recruited through deception. Common methods include:\n\n- Romance scams, where a fake online partner persuades the victim to receive and forward money.\n- Fake job offers, often advertised as remote payment-processing or financial-agent roles that involve moving funds for a supposed employer.\n- Other social engineering, such as messages promising easy money in return for use of a bank or exchange account.",{"__typename":711,"heading":723},[724],{"headingTextBlock":725,"headingType":716,"headingStyle":716,"animated":717},{"rawHtml":726},"\u003Cp>Is it illegal to be a crypto money mule?\u003C\u002Fp>",{"__typename":705,"textBlock":728},{"html":729,"rawHtml":729,"markdown":730,"plainText":730},"\u003Cp>In most jurisdictions, moving illicitly obtained funds is a criminal offense, and that does not change because the funds are in cryptoassets. Witting mules can face money laundering charges and the penalties that follow.\u003C\u002Fp>\u003Cp>Unwitting mules are not automatically exempt. Claiming not to have known is not always a defense, particularly where a reasonable person would have recognized the warning signs. Consequences can include frozen accounts, closed banking relationships and, depending on the jurisdiction and the facts, criminal liability.\u003C\u002Fp>\u003Cp>Penalties vary by jurisdiction and by the specifics of each case. The consistent point is that acting as a conduit for illicit funds carries real legal risk, whether or not the mule earns money and whether or not they understood the full scheme.\u003C\u002Fp>","In most jurisdictions, moving illicitly obtained funds is a criminal offense, and that does not change because the funds are in cryptoassets. Witting mules can face money laundering charges and the penalties that follow.\n\nUnwitting mules are not automatically exempt. Claiming not to have known is not always a defense, particularly where a reasonable person would have recognized the warning signs. Consequences can include frozen accounts, closed banking relationships and, depending on the jurisdiction and the facts, criminal liability.\n\nPenalties vary by jurisdiction and by the specifics of each case. The consistent point is that acting as a conduit for illicit funds carries real legal risk, whether or not the mule earns money and whether or not they understood the full scheme.",{"__typename":711,"heading":732},[733],{"headingTextBlock":734,"headingType":716,"headingStyle":716,"animated":717},{"rawHtml":735},"\u003Cp>Which fraud typologies use crypto mules?\u003C\u002Fp>",{"__typename":705,"textBlock":737},{"html":738,"rawHtml":738,"markdown":739,"plainText":740},"\u003Cp>Because mules interact with regulated financial infrastructure, they are often one of the most visible points in a laundering chain, easier to trace than the original perpetrators. In practice, that visibility concentrates at VASPs.\u003C\u002Fp>\u003Cp>Our \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Fresources\u002Fthe-state-of-crypto-scams-2025\">State of crypto scams 2025\u003C\u002Fa> report found that VASPs were the first destination for 76% of scam proceeds in 2024 and 80% in the first half of 2025. That makes VASPs the place crypto money mule activity is most likely to surface.\u003C\u002Fp>\u003Cp>Mules are integral to several crypto fraud typologies:\u003C\u002Fp>\u003Cul>\u003Cli>\u003Cstrong>Pig butchering\u003C\u002Fstrong> combines investment and romance fraud and is run at industrial scale, predominantly from Southeast Asia. According to the State of Crypto Scams report, proceeds from these scams are estimated at over $64 billion a year. Victim deposits are aggregated into a small set of cryptoasset wallets. Mules forward the consolidated funds or convert them to fiat currency.\u003Cbr \u002F>\u003Cbr \u002F> \u003C\u002Fli>\u003Cli>\u003Cstrong>Business email compromise (BEC) \u003C\u002Fstrong>cash-out is the stage after attackers have stolen company funds by impersonating a trusted contact. The diverted payment lands in a mule account, with the mule responsible for converting between fiat and cryptoassets across exchanges and blockchains. Without that step, the funds would sit in a single traceable account, so the mule is what turns a successful diversion into recoverable proceeds.\u003Cbr \u002F>\u003Cbr \u002F> \u003C\u002Fli>\u003Cli>\u003Cstrong>ATM-based scams\u003C\u002Fstrong> also use mules for laundering. Scammers exploit the relative anonymity and ease of crypto ATMs, often coercing victims into depositing cash under the threat of penalties or service cut-offs. Once that cash becomes cryptoassets at the machine, mules move it onward through a series of accounts to break the link to the deposit.\u003C\u002Fli>\u003C\u002Ful>","Because mules interact with regulated financial infrastructure, they are often one of the most visible points in a laundering chain, easier to trace than the original perpetrators. In practice, that visibility concentrates at VASPs.\n\nOur [State of crypto scams 2025](https:\u002F\u002Fwww.elliptic.co\u002Fresources\u002Fthe-state-of-crypto-scams-2025) report found that VASPs were the first destination for 76% of scam proceeds in 2024 and 80% in the first half of 2025. That makes VASPs the place crypto money mule activity is most likely to surface.\n\nMules are integral to several crypto fraud typologies:\n\n- **Pig butchering** combines investment and romance fraud and is run at industrial scale, predominantly from Southeast Asia. According to the State of Crypto Scams report, proceeds from these scams are estimated at over $64 billion a year. Victim deposits are aggregated into a small set of cryptoasset wallets. Mules forward the consolidated funds or convert them to fiat currency.\n- **Business email compromise (BEC)** cash-out is the stage after attackers have stolen company funds by impersonating a trusted contact. The diverted payment lands in a mule account, with the mule responsible for converting between fiat and cryptoassets across exchanges and blockchains. Without that step, the funds would sit in a single traceable account, so the mule is what turns a successful diversion into recoverable proceeds.\n- **ATM-based scams** also use mules for laundering. Scammers exploit the relative anonymity and ease of crypto ATMs, often coercing victims into depositing cash under the threat of penalties or service cut-offs. Once that cash becomes cryptoassets at the machine, mules move it onward through a series of accounts to break the link to the deposit.","Because mules interact with regulated financial infrastructure, they are often one of the most visible points in a laundering chain, easier to trace than the original perpetrators. In practice, that visibility concentrates at VASPs.\n\nOur State of crypto scams 2025 report found that VASPs were the first destination for 76% of scam proceeds in 2024 and 80% in the first half of 2025. That makes VASPs the place crypto money mule activity is most likely to surface.\n\nMules are integral to several crypto fraud typologies:\n\n- Pig butchering combines investment and romance fraud and is run at industrial scale, predominantly from Southeast Asia. According to the State of Crypto Scams report, proceeds from these scams are estimated at over $64 billion a year. Victim deposits are aggregated into a small set of cryptoasset wallets. Mules forward the consolidated funds or convert them to fiat currency.\n- Business email compromise (BEC) cash-out is the stage after attackers have stolen company funds by impersonating a trusted contact. The diverted payment lands in a mule account, with the mule responsible for converting between fiat and cryptoassets across exchanges and blockchains. Without that step, the funds would sit in a single traceable account, so the mule is what turns a successful diversion into recoverable proceeds.\n- ATM-based scams also use mules for laundering. Scammers exploit the relative anonymity and ease of crypto ATMs, often coercing victims into depositing cash under the threat of penalties or service cut-offs. Once that cash becomes cryptoassets at the machine, mules move it onward through a series of accounts to break the link to the deposit.",{"__typename":711,"heading":742},[743],{"headingTextBlock":744,"headingType":716,"headingStyle":716,"animated":717},{"rawHtml":745},"\u003Cp>Red flags compliance teams should look out for\u003C\u002Fp>",{"__typename":705,"textBlock":747},{"html":748,"rawHtml":748,"markdown":749,"plainText":750},"\u003Cp>Crypto money mules exhibit six behaviors that warrant a closer look from compliance teams. None is conclusive on its own, but multiple of these behaviors will significantly strengthen a case for enhanced due diligence.\u003C\u002Fp>\u003Col>\u003Cli>\u003Cstrong>Inbound payments from wallets linked to suspicious activity.\u003C\u002Fstrong> Mules often receive deposits from wallets already flagged for scams, sanctions exposure, darknet markets or \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Fblockchain-basics\u002Fwhat-is-a-crypto-mixer\u002F\">mixing services\u003C\u002Fa>, which combine and redistribute cryptoassets to obscure the flow of funds.\u003Cbr \u002F>\u003Cbr \u002F> \u003C\u002Fli>\u003Cli>\u003Cstrong>Transaction patterns consistent with pig butchering.\u003C\u002Fstrong> On a monitoring system this often appears as inbound transfers from pool wallets, which are accounts whose activity is almost entirely for receiving, consolidating and quickly forwarding funds. According to our State of Crypto Scams report, any returns sent back to the victim are typically a round 4% to 5% of the amount received, designed to simulate genuine gains.\u003Cbr \u002F>\u003Cbr \u002F> \u003C\u002Fli>\u003Cli>\u003Cstrong>A new account with no prior cryptoasset history that immediately makes large deposits and rapid outbound transfers.\u003C\u002Fstrong> Mules may first test with small amounts to build a history, then scale up. Warning signs include near-immediate forwarding, volumes inconsistent with the stated account purpose and consistently low balances.\u003Cbr \u002F>\u003Cbr \u002F> \u003C\u002Fli>\u003Cli>\u003Cstrong>Customer profiles in jurisdictions associated with organized scam operations.\u003C\u002Fstrong> Southeast Asia (particularly Cambodia, Myanmar and Laos) hosts \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Fblog\u002F8-park-prince-and-huiones-role-in-a-scam-compound-still-operating-amid-crackdowns\">large-scale scam compounds\u003C\u002Fa>, but operations can and do relocate, so treat geography as a signal rather than proof.\u003Cbr \u002F>\u003Cbr \u002F> \u003C\u002Fli>\u003Cli>\u003Cstrong>Clusters of accounts sharing residential addresses, IP addresses or device fingerprints.\u003C\u002Fstrong> Supposedly unrelated accounts tracing back to the same device or location can point to mule account farming, where a single operator opens and controls many accounts to fragment and move illicit funds.\u003Cbr \u002F>\u003Cbr \u002F> \u003C\u002Fli>\u003Cli>\u003Cstrong>Account behavior inconsistent with the stated purpose at onboarding.\u003C\u002Fstrong> A customer who declares personal use but runs business-level volumes, or declares low income but makes six-figure transfers, merits scrutiny.\u003C\u002Fli>\u003C\u002Fol>","Crypto money mules exhibit six behaviors that warrant a closer look from compliance teams. None is conclusive on its own, but multiple of these behaviors will significantly strengthen a case for enhanced due diligence.\n\n1. **Inbound payments from wallets linked to suspicious activity.** Mules often receive deposits from wallets already flagged for scams, sanctions exposure, darknet markets or [mixing services](https:\u002F\u002Fwww.elliptic.co\u002Fblockchain-basics\u002Fwhat-is-a-crypto-mixer\u002F), which combine and redistribute cryptoassets to obscure the flow of funds.\n2. **Transaction patterns consistent with pig butchering.** On a monitoring system this often appears as inbound transfers from pool wallets, which are accounts whose activity is almost entirely for receiving, consolidating and quickly forwarding funds. According to our State of Crypto Scams report, any returns sent back to the victim are typically a round 4% to 5% of the amount received, designed to simulate genuine gains.\n3. **A new account with no prior cryptoasset history that immediately makes large deposits and rapid outbound transfers.** Mules may first test with small amounts to build a history, then scale up. Warning signs include near-immediate forwarding, volumes inconsistent with the stated account purpose and consistently low balances.\n4. **Customer profiles in jurisdictions associated with organized scam operations.** Southeast Asia (particularly Cambodia, Myanmar and Laos) hosts [large-scale scam compounds](https:\u002F\u002Fwww.elliptic.co\u002Fblog\u002F8-park-prince-and-huiones-role-in-a-scam-compound-still-operating-amid-crackdowns), but operations can and do relocate, so treat geography as a signal rather than proof.\n5. **Clusters of accounts sharing residential addresses, IP addresses or device fingerprints.** Supposedly unrelated accounts tracing back to the same device or location can point to mule account farming, where a single operator opens and controls many accounts to fragment and move illicit funds.\n6. **Account behavior inconsistent with the stated purpose at onboarding.** A customer who declares personal use but runs business-level volumes, or declares low income but makes six-figure transfers, merits scrutiny.","Crypto money mules exhibit six behaviors that warrant a closer look from compliance teams. None is conclusive on its own, but multiple of these behaviors will significantly strengthen a case for enhanced due diligence.\n\n1. Inbound payments from wallets linked to suspicious activity. Mules often receive deposits from wallets already flagged for scams, sanctions exposure, darknet markets or mixing services, which combine and redistribute cryptoassets to obscure the flow of funds.\n2. Transaction patterns consistent with pig butchering. On a monitoring system this often appears as inbound transfers from pool wallets, which are accounts whose activity is almost entirely for receiving, consolidating and quickly forwarding funds. According to our State of Crypto Scams report, any returns sent back to the victim are typically a round 4% to 5% of the amount received, designed to simulate genuine gains.\n3. A new account with no prior cryptoasset history that immediately makes large deposits and rapid outbound transfers. Mules may first test with small amounts to build a history, then scale up. Warning signs include near-immediate forwarding, volumes inconsistent with the stated account purpose and consistently low balances.\n4. Customer profiles in jurisdictions associated with organized scam operations. Southeast Asia (particularly Cambodia, Myanmar and Laos) hosts large-scale scam compounds, but operations can and do relocate, so treat geography as a signal rather than proof.\n5. Clusters of accounts sharing residential addresses, IP addresses or device fingerprints. Supposedly unrelated accounts tracing back to the same device or location can point to mule account farming, where a single operator opens and controls many accounts to fragment and move illicit funds.\n6. Account behavior inconsistent with the stated purpose at onboarding. A customer who declares personal use but runs business-level volumes, or declares low income but makes six-figure transfers, merits scrutiny.",{"__typename":711,"heading":752},[753],{"headingTextBlock":754,"headingType":716,"headingStyle":716,"animated":717},{"rawHtml":755},"\u003Cp>How is crypto money mule activity detected?\u003C\u002Fp>",{"__typename":705,"textBlock":757},{"html":758,"rawHtml":758,"markdown":759,"plainText":760},"\u003Cp>Mule networks are not unique to crypto, and they are not unbeatable. The controls that contain them elsewhere apply here too, starting with rigorous KYC at onboarding to raise the cost of opening or farming accounts. But as the compromised and farmed accounts above show, identity checks alone can be stolen or forged, so KYC is necessary rather than sufficient.\u003C\u002Fp>\u003Cp>What crypto adds is visibility. Because public blockchains keep permanent records, the patterns described above are traceable once they are identified. The practical challenge for compliance teams is recognizing them fast enough, and across enough accounts, without generating excessive false positives.\u003C\u002Fp>\u003Cp>This is what blockchain analytics solutions like Elliptic are built for: screening wallets and transactions for exposure to known illicit sources and tracing mule networks across blockchains and cryptoassets to produce an evidence-based trail.\u003C\u002Fp>\u003Cp>Knowing what to look for matters as much as knowing how to trace it. Most scam proceeds don't stay hidden for long. Around 80% pass through a regulated service first, which is exactly where mule activity becomes visible. Read our \u003Ca href=\"https:\u002F\u002Fwww.elliptic.co\u002Fresources\u002Fthe-state-of-crypto-scams-2025\">State of crypto scams 2025 report\u003C\u002Fa> to see where the money typically goes and the typologies mules move through.\u003C\u002Fp>","Mule networks are not unique to crypto, and they are not unbeatable. The controls that contain them elsewhere apply here too, starting with rigorous KYC at onboarding to raise the cost of opening or farming accounts. But as the compromised and farmed accounts above show, identity checks alone can be stolen or forged, so KYC is necessary rather than sufficient.\n\nWhat crypto adds is visibility. Because public blockchains keep permanent records, the patterns described above are traceable once they are identified. The practical challenge for compliance teams is recognizing them fast enough, and across enough accounts, without generating excessive false positives.\n\nThis is what blockchain analytics solutions like Elliptic are built for: screening wallets and transactions for exposure to known illicit sources and tracing mule networks across blockchains and cryptoassets to produce an evidence-based trail.\n\nKnowing what to look for matters as much as knowing how to trace it. Most scam proceeds don't stay hidden for long. Around 80% pass through a regulated service first, which is exactly where mule activity becomes visible. Read our [State of crypto scams 2025 report](https:\u002F\u002Fwww.elliptic.co\u002Fresources\u002Fthe-state-of-crypto-scams-2025) to see where the money typically goes and the typologies mules move through.","Mule networks are not unique to crypto, and they are not unbeatable. The controls that contain them elsewhere apply here too, starting with rigorous KYC at onboarding to raise the cost of opening or farming accounts. But as the compromised and farmed accounts above show, identity checks alone can be stolen or forged, so KYC is necessary rather than sufficient.\n\nWhat crypto adds is visibility. Because public blockchains keep permanent records, the patterns described above are traceable once they are identified. The practical challenge for compliance teams is recognizing them fast enough, and across enough accounts, without generating excessive false positives.\n\nThis is what blockchain analytics solutions like Elliptic are built for: screening wallets and transactions for exposure to known illicit sources and tracing mule networks across blockchains and cryptoassets to produce an evidence-based trail.\n\nKnowing what to look for matters as much as knowing how to trace it. Most scam proceeds don't stay hidden for long. Around 80% pass through a regulated service first, which is exactly where mule activity becomes visible. Read our State of crypto scams 2025 report to see where the money typically goes and the typologies mules move through.",[],[],[],[765,786,813,831,858,886,911],{"id":766,"uri":767,"title":768,"postDate":769,"__typename":650,"asset":770,"categoryTopics":780,"categoryNewsTypes":782,"categoryIndustries":783,"categoryRegions":784,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":785,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},"150122","blockchain-basics\u002Fwhat-is-blockchain-forensics","What is blockchain forensics?","2026-08-25T13:56:23+01:00",[771],{"__typename":382,"image":772,"mobileImage":779},[773],{"title":774,"url":775,"alt":776,"width":777,"height":778},"Blockchain forensics","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002FHero-bb-blockchain-forensics.png","Colorful nodes connecting",4000,2250,[],[781],{"title":687,"slug":688},[],[],[],[],{"id":787,"uri":788,"title":789,"postDate":790,"__typename":650,"asset":791,"categoryTopics":801,"categoryNewsTypes":803,"categoryIndustries":804,"categoryRegions":805,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":806,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},"146272","blockchain-basics\u002Fwhat-is-address-poisoning","What is address poisoning?","2026-08-11T10:56:05+01:00",[792],{"__typename":382,"image":793,"mobileImage":800},[794],{"title":795,"url":796,"alt":797,"width":798,"height":799},"What is address poisoning","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002F2026-July-What-is-address-poisoning.png","A wallet moving funds to another wallet",1501,793,[],[802],{"title":687,"slug":688},[],[],[],[807],{"title":651,"uri":663,"plainText":11,"textBlock":808,"image":809,"externalLink":11,"plainText2":672,"entry":811},{"rawHtml":665},[810],{"title":668,"url":669,"alt":670,"width":671,"height":671},[812],{"uri":192},{"id":653,"uri":652,"title":654,"postDate":656,"__typename":650,"asset":814,"categoryTopics":819,"categoryNewsTypes":821,"categoryIndustries":822,"categoryRegions":823,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":824,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},[815],{"__typename":382,"image":816,"mobileImage":818},[817],{"title":679,"url":680,"alt":681,"width":682,"height":683},[],[820],{"title":687,"slug":688},[],[],[],[825],{"title":651,"uri":663,"plainText":11,"textBlock":826,"image":827,"externalLink":11,"plainText2":672,"entry":829},{"rawHtml":665},[828],{"title":668,"url":669,"alt":670,"width":671,"height":671},[830],{"uri":192},{"id":832,"uri":833,"title":834,"postDate":835,"__typename":650,"asset":836,"categoryTopics":846,"categoryNewsTypes":848,"categoryIndustries":849,"categoryRegions":850,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":851,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},"11554","blockchain-basics\u002Fwhat-is-a-crypto-exploit","What is a crypto exploit?","2026-05-20T11:25:10+01:00",[837],{"__typename":382,"image":838,"mobileImage":845},[839],{"title":840,"url":841,"alt":842,"width":843,"height":844},"16 Bybit exploit 12 months on 720x380","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Farticle-images\u002F16_Bybit-exploit-12-months-on_720x380_2026-07-14-161829_rurg.png","Abstract digital illustration featuring a bug icon at the center with binary code, lightning bolts, and warning symbols surrounding it.",3000,1584,[],[847],{"title":687,"slug":688},[],[],[],[852],{"title":651,"uri":663,"plainText":11,"textBlock":853,"image":854,"externalLink":11,"plainText2":672,"entry":856},{"rawHtml":665},[855],{"title":668,"url":669,"alt":670,"width":671,"height":671},[857],{"uri":192},{"id":859,"uri":860,"title":861,"postDate":862,"__typename":650,"asset":863,"categoryTopics":871,"categoryNewsTypes":876,"categoryIndustries":877,"categoryRegions":878,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":879,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},"15464","blockchain-basics\u002Fwhat-are-ofac-crypto-sanctions","What are OFAC crypto sanctions?","2026-01-22T09:04:03+00:00",[864],{"__typename":382,"image":865,"mobileImage":870},[866],{"title":867,"url":868,"alt":869,"width":843,"height":844},"What are OFAC crypto sanctions 720x380 01","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Farticle-images\u002FWhat-are-OFAC-crypto-sanctions__720x380_01_2026-07-14-162634_vitf.png","A digital globe surrounded by icons, representing finance, regulation, security, and alerts, with binary code overlay.",[],[872,875],{"title":873,"slug":874},"Regulation","regulation",{"title":687,"slug":688},[],[],[],[880],{"title":651,"uri":663,"plainText":11,"textBlock":881,"image":882,"externalLink":11,"plainText2":672,"entry":884},{"rawHtml":665},[883],{"title":668,"url":669,"alt":670,"width":671,"height":671},[885],{"uri":192},{"id":887,"uri":888,"title":889,"postDate":890,"__typename":650,"asset":891,"categoryTopics":899,"categoryNewsTypes":901,"categoryIndustries":902,"categoryRegions":903,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":904,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},"15963","blockchain-basics\u002Fwhat-is-crypto-wallet-screening","What is crypto wallet screening?","2026-01-14T15:14:49+00:00",[892],{"__typename":382,"image":893,"mobileImage":898},[894],{"title":895,"url":896,"alt":897,"width":843,"height":844},"What is crypto wallet screening blog 720x380","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Farticle-images\u002FWhat-is-crypto-wallet-screening_blog_720x380_2026-07-14-162732_fnoh.png","Digital wallet graphic with binary code and cryptocurrency symbols, illustrating secure transactions and financial technology.",[],[900],{"title":687,"slug":688},[],[],[],[905],{"title":651,"uri":663,"plainText":11,"textBlock":906,"image":907,"externalLink":11,"plainText2":672,"entry":909},{"rawHtml":665},[908],{"title":668,"url":669,"alt":670,"width":671,"height":671},[910],{"uri":192},{"id":912,"uri":913,"title":914,"postDate":915,"__typename":650,"asset":916,"categoryTopics":926,"categoryNewsTypes":928,"categoryIndustries":929,"categoryRegions":930,"categoryWebinarTypes":11,"categoryEventTypes":11,"authorSelect":931,"date":11,"date2":11,"plainText":11,"externalUrl":11,"private":11},"20470","blockchain-basics\u002Fwhat-is-an-exploit","What is an exploit?","2024-08-23T12:43:15+01:00",[917],{"__typename":382,"image":918,"mobileImage":925},[919],{"title":920,"url":921,"alt":922,"width":923,"height":924},"LI Blog Typologies 24 Exploit 02 1","https:\u002F\u002Fd13k95gd4bp92z.cloudfront.net\u002Fimages\u002Farticle-images\u002FLI_Blog_Typologies_24_Exploit-02-1_2026-07-14-163716_aybo.png","A stylized illustration of a figure reaching out from a smartphone, with a backdrop of light blue and the word \"ELLIPTIC\" in the corner.",2500,1307,[],[927],{"title":687,"slug":688},[],[],[],[932],{"title":651,"uri":663,"plainText":11,"textBlock":933,"image":934,"externalLink":11,"plainText2":672,"entry":936},{"rawHtml":665},[935],{"title":668,"url":669,"alt":670,"width":671,"height":671},[937],{"uri":192},{"id":653,"categoryTopics":939,"sectionHandle":659,"backLink":941,"header":944,"asset":952,"navBlock":956,"contentArea":975,"shareBlock":1001,"articleSelect":1003},[940],{"title":687,"slug":688},{"link":942,"text":114},{"url":943},"\u002Fblockchain-basics\u002F",{"articleTags":945,"heading":654},{"tagsBlock":946},{"tags":947},[948],{"text":687,"style":949,"link":950},"green",{"url":951},"\u002Fblockchain-basics\u002F?category=crypto-crime",{"type":953,"picture":954},"image",{"source":955},{"src":680,"alt":681,"width":682,"height":683},{"tag":957,"items":959},{"text":958},"Jump to…",[960,963,966,969,972],{"text":961,"anchorId":962},"How do people become crypto money mules?","how-do-people-become-crypto-money-mules",{"text":964,"anchorId":965},"Is it illegal to be a crypto money mule?","is-it-illegal-to-be-a-crypto-money-mule",{"text":967,"anchorId":968},"Which fraud typologies use crypto mules?","which-fraud-typologies-use-crypto-mules",{"text":970,"anchorId":971},"Red flags compliance teams should look out for","red-flags-compliance-teams-should-look-out-for",{"text":973,"anchorId":974},"How is crypto money mule activity detected?","how-is-crypto-money-mule-activity-detected",{"blocks":976,"navItems":995},[977,979,982,983,985,986,988,989,991,992,994],{"type":978,"textBlock":707},"textBlock",{"type":980,"heading":981,"anchorId":962},"headingBlock",{"text":961,"type":716,"style":716,"animated":717},{"type":978,"textBlock":720},{"type":980,"heading":984,"anchorId":965},{"text":964,"type":716,"style":716,"animated":717},{"type":978,"textBlock":729},{"type":980,"heading":987,"anchorId":968},{"text":967,"type":716,"style":716,"animated":717},{"type":978,"textBlock":738},{"type":980,"heading":990,"anchorId":971},{"text":970,"type":716,"style":716,"animated":717},{"type":978,"textBlock":748},{"type":980,"heading":993,"anchorId":974},{"text":973,"type":716,"style":716,"animated":717},{"type":978,"textBlock":758},[996,997,998,999,1000],{"text":961,"anchorId":962},{"text":964,"anchorId":965},{"text":967,"anchorId":968},{"text":970,"anchorId":971},{"text":973,"anchorId":974},{"heading":1002},"Share",[1004,1011,1025,1039],{"id":766,"uri":767,"title":768,"postDate":769,"__typename":650,"asset":1005,"categoryTopics":1009},[1006],{"__typename":382,"image":1007},[1008],{"title":774,"url":775,"alt":776,"width":777,"height":778},[1010],{"title":687,"slug":688},{"id":787,"uri":788,"title":789,"postDate":790,"__typename":650,"asset":1012,"categoryTopics":1016,"authorSelect":1018},[1013],{"__typename":382,"image":1014},[1015],{"title":795,"url":796,"alt":797,"width":798,"height":799},[1017],{"title":687,"slug":688},[1019],{"title":651,"uri":663,"textBlock":1020,"image":1021,"plainText2":672,"entry":1023},{"rawHtml":665},[1022],{"title":668,"url":669,"alt":670,"width":671,"height":671},[1024],{"uri":192},{"id":832,"uri":833,"title":834,"postDate":835,"__typename":650,"asset":1026,"categoryTopics":1030,"authorSelect":1032},[1027],{"__typename":382,"image":1028},[1029],{"title":840,"url":841,"alt":842,"width":843,"height":844},[1031],{"title":687,"slug":688},[1033],{"title":651,"uri":663,"textBlock":1034,"image":1035,"plainText2":672,"entry":1037},{"rawHtml":665},[1036],{"title":668,"url":669,"alt":670,"width":671,"height":671},[1038],{"uri":192},{"id":859,"uri":860,"title":861,"postDate":862,"__typename":650,"asset":1040,"categoryTopics":1044,"authorSelect":1047},[1041],{"__typename":382,"image":1042},[1043],{"title":867,"url":868,"alt":869,"width":843,"height":844},[1045,1046],{"title":873,"slug":874},{"title":687,"slug":688},[1048],{"title":651,"uri":663,"textBlock":1049,"image":1050,"plainText2":672,"entry":1052},{"rawHtml":665},[1051],{"title":668,"url":669,"alt":670,"width":671,"height":671},[1053],{"uri":192},[],1788434084317]