Cybercriminals selling verified bank and cryptocurrency mule accounts through Telegram channels for money laundering operations

Cybercriminals are increasingly using Telegram channels as marketplaces to sell verified bank accounts, fintech wallets, and cryptocurrency exchange accounts for large-scale money laundering operations. These “Mule-as-a-Service” networks use stolen identities, deepfake videos, and AI-generated personas to bypass KYC verification systems at financial institutions.

Cybercriminals selling verified bank and cryptocurrency mule accounts through Telegram channels for money laundering operationsCybercriminals selling verified bank and cryptocurrency mule accounts through Telegram channels for money laundering operations

Researchers found underground groups openly advertising mule accounts, forged identity documents, and laundering services across Telegram and dark web forums. Criminals use these accounts to move money from phishing attacks, ransomware, investment scams, and business email compromise operations while avoiding fraud detection systems.

AI-driven tools are making these operations more sophisticated by automating account creation, transaction “warming,” voice cloning, and adaptive money transfers designed to bypass anti-money laundering checks. NPAV Fraud Protector help organizations detect suspicious financial activity, prevent credential misuse, and strengthen protection against fraud and identity abuse.


NPAV offers a robust solution to combat cyber fraud. Protect yourself with our top-tier security product, FraudProtector.net