Financial fraud

Fake job offers and money-mule recruitment

A 'remote, high-paying, no-experience' job that asks you to receive transfers and forward them. You become a mule without knowing.

9 min readIntermediate

Red flags to recognize

Vague ad with very high pay for a low-qualified role
Recruiter on Telegram, WhatsApp or LinkedIn with a recent profile and few contacts
Quick text-only interview, no HR video call
Task: receive transfers on your account and forward them keeping a percentage
No written contract, no declared corporate tax code
Company with very recent website, unverifiable VAT number
Asks you to lend your bank account or open new Revolut/N26 accounts

What to do now

Look up the company in trade registers and LinkedIn with caution
Verify the VAT number with VIES in the EU
No legitimate job asks to use your account as a payment channel
If you already received a suspicious transfer: DO NOT forward. Contact bank and police
Save every message, ad, fake contract and 'recruiter' data
Beware of those who pay in crypto for simple services (writing, translation, clicks)

Real case

Mule recruitment 'Logistics Italy Srl', 2025

A Milan student responds on Telegram to an ad for 'assistant payment processor, work from home, 2,500 EUR/month, no experience'. After a brief text interview he is hired and signs a PDF contract for 'Logistics Italy Srl', which does not exist in the trade register.

Over three weeks he receives four transfers totalling 18,700 EUR. He forwards 80% to Bulgarian and Georgian IBANs, keeping 20% as 'commission'. On the fourth transfer the bank flags the account. The student is investigated for money laundering.

Mythos analyzed the case: the company did not exist in any register, recipient IBANs were in a Europol-known mule cluster, the PDF contract used a pirated template. The dossier helped the prosecutor reclassify the young man from suspect to offended party with diminished awareness.

What Mythos can do on this case

VAT / trade-register verification for the company
Contract PDF analysis (metadata, template, signatures)
Recipient IBAN cross-check with known money-mule clusters
Recruiter profiling on Telegram/LinkedIn (account age, contacts, patterns)
Dossier for legal defense of the unaware victim

Next steps

Analyze the offer with Mythos Talk to Mythos