Starting in the fall of 2007, emails went out from companies that didn't exist, offering work people could do from home. The companies had websites, applications, and they put the people who answered through what federal prosecutors would later call "what appeared to be a legitimate hiring process." The work was easy to explain. Payments from the company's business customers would arrive in your personal bank account, and you'd withdraw the money and wire it to the company's partners overseas.

More than 15,000 Americans took the job. Over the years they moved at least $10 million that hackers had stolen from more than 750 U.S. bank accounts, mostly accounts belonging to businesses. When the Justice Department described what those workers got in return, it wrote the cold sentence:

On October 8, a 42-year-old named Oleg Korniev pleaded guilty in federal court in North Carolina as one of the leaders of the operation. It called itself Your Mule Cashout, which tells you how long the branding meeting ran. It opened for business in September 2007, when the iPhone was about two months old and still couldn't copy and paste. Four of Korniev's co-conspirators were arrested overseas years ago, extradited, and sentenced to between roughly 37 and 63 months, and each was ordered to pay more than $9.1 million in restitution. Korniev was arrested in the Republic of Georgia. He faces a minimum of 2 years in prison and a maximum of 50.

The hackers got their money out. The organizers took their cut. The 15,000 got the account statements, the wire receipts, and their own names on every page.

Last week, we followed the gold. A 78-year-old woman in Marion, Illinois handed $318,459 in gold bars to a stranger in a Walmart parking lot, and when one of the couriers in that case was finally caught, a line came out of it that is worth remembering: "Lian is expendable to them."

This week is about the people even more expendable than the courier. A courier at least knows there's a box. A money mule often doesn't know what's moving through the account, and the people running the scheme are counting on that. The mule is the one piece of the machine with a real name and a real bank account, which is exactly why criminals rent mules instead of building their own, and the next three months are shaping up to be a good season for renting.

The Hiring Hall

Your Mule Cashout ran like a company because it was one. According to the Justice Department, Korniev helped write its policies and procedures, hired and fired its staff, rewarded and punished them, and arranged the "illegal services" the operation depended on. Hackers paid it a percentage of the money they stole. Everyone inside got something out of the arrangement except the 15,000 people whose names were on the bank accounts.

The hiring process was the con, and it worked for reasons that have nothing to do with how smart anyone was. Applying for a job is an act of commitment. You fill out the forms, answer the questions, wait to hear back, and when the yes comes, you've been chosen. People who've just been chosen rarely turn around and investigate the people who chose them.

Then the money arrives before you've sent a dime. That order matters more than it looks. Receiving first feels like being trusted, and it hides the fact that you're the only person in the chain taking a risk. The hackers are anonymous and overseas. The organizers are usernames on a server. You're the one walking into your bank branch, in your own name, on camera, to wire someone else's money out of the country.

I don't know how many of the 15,000 ever figured out what they'd been part of. The release doesn't say, and I doubt anyone counted.

The Squeeze

I'll be careful here, because "the economy is bad" is the kind of thing people say without checking. So I checked.

Unemployment was 4.2% in September. That isn't a crisis number, and anybody telling you this is 2009 wants something from you. But employers added only 29,000 jobs that month, and the Bureau of Labor Statistics cut its counts for July and August by a combined 60,000. Prices were up 3.4% over the year through August, with energy up 16.3%, and the average worker's hourly pay, adjusted for those prices, was down 0.3%. The University of Michigan's consumer sentiment index came in at 46.3 in early October, down from 53.6 a year ago.

The averages hide the households this story is about. In the Federal Reserve's latest survey of household finances, 37% of adults said they couldn't cover a surprise $400 expense entirely with cash or its equivalent, and 16% hadn't paid all of their bills in full the month before. Americans carry $1.263 trillion in credit card balances. More than 10% of student loan balances are at least 90 days past due. And Deloitte expects about $1.7 trillion in holiday retail sales, which means a lot of people are about to spend money they're still figuring out how to find.

That gap is where the recruiters work. The Federal Trade Commission says reports of job scams tripled between 2020 and 2024, and reported losses rose from $90 million to $501 million. The FBI's Internet Crime Complaint Center took 24,688 employment fraud complaints in 2025, totaling $362.9 million in losses, and its definition of employment fraud covers people who end up laundering money "during their employment."

The Offer

What follows is a composite. I built her from federal court records and Treasury Department advisories, and every step she takes below has happened to a real person.

She's 71 and widowed, and it's three weeks before Christmas. She has more grandchildren than budget this year. In the spring she met a man online, a contract engineer working overseas, and he's been kind to her every single day since. In early December he asks a favor. His customers' payments are stuck because his foreign accounts can't receive U.S. transfers before the holidays. Could a few of them land in her account? She'd send them on to his supplier, and he insists she keep 10% for her trouble.

The first deposit is $3,000. She keeps $300, sends $2,700 where he tells her, and buys the presents. It feels like being trusted.

The second deposit is $9,000. Then he asks her to open a new account, or register a small LLC, because her bank has been "difficult." The Treasury Department's Financial Crimes Enforcement Network, known as FinCEN, has described exactly this step in its warnings about elder exploitation: the scammer gets the victim to set up an account or a company "in the victim's own name to receive, withdraw, deposit, or transfer multiple third-party payments."

Then the bank calls about the deposits. Then it closes her account, and that can happen fast. In a Missouri case this year, a bank shut a woman's account less than a week after her first deposit. If the money came in as checks or other reversible payments, the bank takes it back. The money she already sent on is gone, so she owes the bank the difference. The FTC's warning about fake checks describes the same trap: "the scammer has any money you sent, and you're stuck paying the money back to the bank."

He's sympathetic about all of it. Banks are like this, he says. Try a different one.

The 10% comes from a real case. Theresa Chabot, a 58-year-old in Kalispell, Montana, according to federal prosecutors "funneled millions of dollars overseas, including to the United Arab Emirates, and received 10 percent of the funds into her accounts." Her scheme ran through more than 50 bank accounts and cost victims $5,449,395. The Secret Service told her in 2018 that she was acting as a money mule. She kept going. In 2023, she was sentenced to 57 months in federal prison and ordered to pay $2,043,340 in restitution, and the government took her 2021 Chevrolet Tahoe.

The FBI lists the same offer among its own warning signs, almost word for word: "You are allowed to keep a portion of the money you transfer."

Then there's the version with no romance at all, which is the straight rental. Someone pays you to open a bank account or an LLC in your name and hand over the debit card and login, or to let a "business partner" route payments through the account you already have. In April, a federal judge in Orlando sentenced Joseph Elegele Jr., 41, to 3 years and 10 months in prison for opening business bank accounts that received stolen money from business email compromise schemes, where criminals impersonate a company's executive or vendor by email to redirect payments, and for keeping portions of the proceeds. In Britain, where regulators publish the numbers, 47.1% of the suspected mule accounts that banks closed in 2025 were less than a year old.

Victims First

The cruelest version of this goes after people who've already been robbed. They lost money to a romance or a lottery scam, and now someone tells them the way to get it back is to help move a little money first, or to accept a "refund" and pass part of it along. The victim becomes the laundromat.

I couldn't find a federal number for how often this happens, because FinCEN doesn't count it separately. But it describes it without any hedging. In a review of 155,415 elder exploitation reports covering more than $27 billion in suspicious activity, the agency wrote: "Scammers may recruit other victims to move funds extracted from initial victims." It also wrote: "Unwitting money mules are often also scam victims." And the FBI warned last year that people who promise to recover lost money are usually running "a ruse to revictimize those who have already lost money to scams."

Samuel Marcus worked as a logistics specialist for the Department of Defense. He'd been a romance-scam victim himself. From July 2023 to December 2025 he laundered millions of dollars for a romance and business email compromise ring, converting the money to crypto and creating fake invoices to explain it, and he kept going after the FBI warned him. He pleaded guilty in July to concealment money laundering. He's scheduled to be sentenced this Friday, October 16, and he faces up to 20 years.

I don't know what Marcus believed when the FBI warned him. I know what the law did with what he did next.

What the Law Calls You

"Conspiracy" sounds like men in a back room. The federal crime is simpler than that, and it reaches a lot further.

A conspiracy is an agreement between two or more people to commit a crime, and under federal law the agreement itself is the offense. The Ninth Circuit's model jury instructions, which federal judges across the western states adapt for their juries, break it into parts. Prosecutors must prove there was an agreement to commit at least one crime, and that the defendant joined it "knowing of at least one of its objects and intending to help accomplish it." The general federal conspiracy statute adds a third requirement, that someone in the group took a step to carry out the plan. The charge mules face most often, conspiracy to launder money, doesn't require even that. The Supreme Court said so unanimously in 2005 in Whitfield v. United States, and the Second Circuit has said the same about conspiracy to commit wire or mail fraud.

What prosecutors don't have to prove is where most people's intuition fails. They don't have to show you knew who the victims were, who ran the scheme, how many others were in it, or how the money was stolen. The Supreme Court explained why in 1947, in Blumenthal v. United States, and the reasoning has held up for almost 80 years:

The jury instructions put it in kitchen-= table language: "one may become a member of a conspiracy without full knowledge of all the details of the unlawful scheme or the names, identities, or locations of all of the other members." The money laundering statute asks for even less. It requires only that you knew the money came from "some form, though not necessarily which form," of felony. And once you're in, the partners "may divide up the work, yet each is responsible for the acts of each other." That line is from the Supreme Court too, in 1997. So a person can be convicted of joining a crime they couldn't describe to you.

"But I Didn't Know"

This is the part that decides who goes home, so I'll be precise about it.

Being fooled isn't a crime. The same instructions tell juries that "one who has no knowledge of a conspiracy, but happens to act in a way which furthers some object or purpose of the conspiracy, does not thereby become a conspirator." Someone who believed the job was real, and stopped the moment something looked wrong, isn't a conspirator.

But the law has a name for the person who suspects and decides not to ask. It's willful blindness, and the Supreme Court described it in 2011 with two requirements: the person "must subjectively believe that there is a high probability that a fact exists" and "must take deliberate actions to avoid learning of that fact." A jury that finds both can treat that person as if they knew. The limit runs the other way too. The Ninth Circuit's instruction tells jurors they can't find knowledge if the defendant "was simply negligent, careless, or foolish."

That line is where most mule cases are fought, and the evidence prosecutors use is usually the mule's own record: a 10% fee for doing nothing, instructions to pull cash or feed a crypto kiosk, a cover story told to the bank, and above all, continuing after someone official said stop. In May, the federal appeals court in Boston upheld the money laundering conspiracy convictions of two men who had taken more than $3 million from a romance-scam victim into business accounts and moved it out through cash withdrawals and transfers. With no business records to explain that pattern, the court said, a jury could reasonably read it as concealment and conclude the men either knew or chose not to know.

The Letter

Most mules never get charged. When the Justice Department ran its nationwide money mule crackdown in 2024, it took action against more than 3,000 of them; about 2,970 of those actions were warning letters, and more than 20 people were charged. An earlier Justice Department fact sheet described what the letters do: they "informed recipients that they could be prosecuted if they continue aiding and abetting fraud schemes."

Think of the letter as the government handing you knowledge. Before it arrives, you can argue you were fooled. After it, every transfer is evidence that you weren't. Steven Ferrill, 72, of Sanbornville, New Hampshire, got his FBI letter in October 2019, and prosecutors say it "explicitly warned him that engaging in wire transfers on behalf of people he did not know could facilitate fraudulent schemes." He kept going and pleaded guilty to money laundering charges in 2023. Theresa Chabot got her warning from the Secret Service. Samuel Marcus got his from the FBI.

Sharon Dolisi, 79, who lives near St. James, Missouri, got hers over and over. Between April 2023 and June 2025, more than $1.9 million from 28 victims of a lottery scam moved through her account, and prosecutors say she did it "despite repeatedly being warned by investigators and bank officials." When a bank asked about three cash withdrawals totaling $64,500, she "falsely claimed that she buys and sells gold." She pleaded guilty to conspiracy to commit mail and wire fraud, and in June a federal judge sentenced her to 3 years of probation and ordered her to repay $1.97 million.

The Statute That Doesn't Ask What You Knew

One more charge catches the 10% crowd, and it's the one Chabot pleaded guilty to. Federal law makes it a crime, punishable by up to 5 years, to run an unlicensed money transmitting business, and "money transmitting" includes "transferring funds on behalf of the public by any and all means." In a state that requires a license, the statute applies "whether or not the defendant knew that the operation was required to be licensed or that the operation was so punishable." Moving strangers' money again and again for a percentage looks a great deal like a money transmitting business.

What It Costs

Conspiracy to launder money carries the same maximum as laundering itself: 20 years in prison and a fine of up to $500,000 or twice the money involved, whichever is greater. Fraud conspiracy carries the maximum for the fraud, which is 20 years for wire fraud. The general conspiracy statute tops out at 5.

The federal sentencing guidelines don't care about your 10%. The guidelines score a crime in "offense levels," and each level maps to a range of months. For someone who laundered money without committing the underlying fraud, the score starts at 8, adds levels from the fraud loss table based on the total value of the laundered money, and adds 2 more for a conviction under the main money laundering statute. Move $100,000 through your account, keep $10,000, and you start at level 18. For a first offender, before any credit for pleading guilty or for playing a minor role, level 18 means 27 to 33 months. The number driving it is the $100,000.

Restitution can follow the whole loss, not your share of it. Federal law lets a judge make each defendant "liable for payment of the full amount of restitution." Korniev's four co-conspirators were each ordered to pay more than $9.1 million.

Even if nobody ever charges you, the bank will close the account and can report you to ChexSystems or Early Warning Services, two of the companies banks check before they let anyone open an account. Early Warning says negative records drop off its reports after five years, which is five years of trying to get paid and pay rent without a normal bank account. And the IRS treats your cut as income. In North Carolina, Michon Griffin collected about $300,000 in commissions on more than $2 million she helped move for a romance scam. She was sentenced to 24 months, and she also pleaded guilty to making false statements on her 2021 tax return.

The Bank on the Other End

Every mule account sits inside a bank, and in this country that bank has very little financial reason to care what passes through it.

Britain decided otherwise. Since October 2024, when a customer there is tricked into sending money to a scammer, the customer's bank and the bank that received the money split the refund 50/50, up to £85,000. Banks have repaid 88% of the money lost in covered scams. And according to an evaluation done for the regulator, the banks that had been receiving the most scam money cut that inbound fraud by 52% to 94%, mostly by going after mule accounts. Once the receiving bank had to pay, it started looking at who was receiving.

In the U.S., the receiving bank pays nothing. Federal rules protect consumers from transfers they didn't authorize, not from transfers they were tricked into making. Since June, a rule from Nacha, the organization that runs the ACH payment network, has required banks to have processes for spotting incoming payments sent under false pretenses, and the rule says in writing that it doesn't change who's liable. The Consumer Financial Protection Bureau sued Early Warning Services, the company behind Zelle, along with three of the banks that own it, in December 2024, then dropped the case with prejudice in March 2025. New York's attorney general filed her own suit in August 2025, alleging more than $1 billion in Zelle fraud losses, and in July a state judge refused to dismiss nearly all of it. Early Warning, for those keeping score, is based in Scottsdale, and it's the same company that keeps the five-year file on the mule.

Speed is the other problem. Britain's Financial Conduct Authority reported in September that cash-out happens mostly between the second and fifth mule accounts, most often at the second. A study of one large British bank found that about 28% of the money left a mule account within 15 minutes, and another 25% within the hour. Here, the FBI team that tries to freeze stolen money succeeded 58% of the time in 2025, down from 66% in 2024 and 71% in 2023. If you've been robbed, report it the same hour you find out.

Field Manual

Six rules for the 10% offer.