Account Trap — Protect & Recover Your Accounts

A mule account is a bank account that is used — knowingly or unknowingly — to receive and transfer proceeds of crime, especially cyber fraud. Victims are often lured through job offers ("process payments from home"), relationship scams, or offers of easy money ("rent your account for Rs. 5,000/month"). The danger is severe: when police trace the fraud, the mule account holder is the first person investigated. Your account will be frozen by the police, you may be arrested and charged under the IPC (cheating, criminal conspiracy) and PMLA (money laundering), and it is extremely difficult to prove innocence once large sums of crime money pass through your account. Never share your bank account with anyone for any reason.

Act immediately: (1) Call your bank's helpline to block net banking, UPI, and the debit/credit card, (2) Change all passwords from a secure device, (3) Call the Cyber Crime Helpline 1930 within the first few hours — the faster you report, the higher the chance of freezing the fraudster's account and recovering money, (4) File a complaint on cybercrime.gov.in, (5) File an FIR at the police station, (6) Write to the bank's nodal officer requesting reversal of unauthorized transactions, (7) Under RBI guidelines, if you report an unauthorized transaction within 3 working days and the fraud was not due to your negligence, your liability is zero (the bank must credit the amount back within 10 working days).

SIM swap fraud occurs when a fraudster obtains a duplicate SIM card of your mobile number by visiting a telecom operator's outlet with fake documents or by bribing an insider. Once activated, the duplicate SIM receives all your calls, SMS, and crucially — OTPs for banking transactions. Your original SIM stops working. The fraudster then uses the OTPs to drain your bank account, make UPI transfers, change passwords, and take over online accounts. Warning sign: if your phone suddenly shows "No Network" or "SIM not registered" without reason, immediately contact your telecom operator and bank. SIM swap fraud is punishable under Sections 66, 66C, and 66D of the IT Act and Section 420 of IPC.

Yes, under the Prevention of Money Laundering Act (PMLA), 2002, the account holder can be investigated and prosecuted even if they were not directly involved in the crime. The burden of proving innocence shifts to the account holder once the Enforcement Directorate (ED) establishes that proceeds of crime passed through the account. However, if you can demonstrate that you were a victim (filed an FIR, reported to cyber crime cell, had no knowledge of the illegal activity), you have a strong defence. This is why it is critical to: (1) Never rent or sell your bank account, (2) Report immediately if you notice unknown credits to your account, (3) File a proactive complaint if you suspect your account has been misused.

Under RBI's circular on "Limiting Liability of Customers in Unauthorised Electronic Banking Transactions" (2017): (1) If the fraud is due to the bank's negligence (system breach, bank-side technical failure), the customer has zero liability regardless of when it is reported, (2) If it is a third-party breach (not due to customer or bank negligence), the customer has zero liability if reported within 3 working days, maximum Rs. 10,000 if reported within 4-7 days, and the liability is determined by the bank if reported after 7 days, (3) If the fraud is due to the customer's negligence (sharing OTP, password), the customer bears the entire loss. Banks must credit the disputed amount within 10 working days of receiving the complaint and complete investigation within 90 days.