Money-Mule Accounts: Risks for Company Bank Accounts in Malaysia

What Is a Money-Mule Account?

A money-mule account is a bank account used to receive and transfer proceeds of fraud or other criminal activity. Scammers recruit individuals or exploit businesses to move stolen funds through legitimate accounts, making the money harder to trace. When a company bank account is used this way, whether the directors knew or not, serious legal consequences follow.

Malaysian authorities have strengthened enforcement against money-mule activities. Banks now freeze suspicious accounts rapidly, often before the account holder knows anything is wrong.

The Penal Code Offences: Sections 424B to 424I

Amendments to the Penal Code introduced specific money-mule offences under sections 424B to 424I. These provisions target anyone who allows a bank account, payment card or SIM card to be used for fraud-related transactions.

Key Offences

Section 424B creates an offence for any person who provides or lends a bank account, credit card, debit card or SIM card to another person, knowing or having reason to believe it will be used to facilitate fraud. This applies whether the account belongs to an individual or a company.

Section 424C addresses persons who allow their accounts to be used to receive proceeds of fraud. Even passive involvement, such as permitting someone else to operate the account, may attract liability.

Section 424D deals with recruiting others to become money mules, while subsequent sections address related conduct including receiving benefits from these activities.

Penalties

The penalties under these provisions are substantial. Depending on the section and circumstances, offenders may face imprisonment of up to ten years and may also be liable to a fine or whipping. For companies, individual officers who consented to or connived in the offence may be personally liable.

How Companies Become Involved

Companies do not always become money mules through deliberate wrongdoing. Common scenarios include:

• A staff member is deceived into providing account access to criminals posing as clients or partners
• A dormant company account is compromised through identity theft or forged documents
• A business receives payment from what appears to be a legitimate transaction, but the funds originated from fraud victims
• A director is manipulated through a business email compromise scheme into receiving and forwarding funds

Regardless of how it happens, once tainted funds enter a company account, the company and its directors face scrutiny.

Director Exposure and Personal Liability

Directors face personal risk when a company account is used for money-mule activity. Under sections 424B to 424I, a director may be investigated and charged if there is evidence they knew or had reason to believe the account would be used for fraud.

Even where criminal intent cannot be proved, directors may face:

• Questioning by police and Bank Negara Malaysia investigators
• Inclusion in financial crime databases that affect future banking relationships
• Civil claims from fraud victims seeking to recover their losses
• Regulatory consequences if the company holds any licence

The Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA) provides additional powers for authorities to investigate and seize assets connected to unlawful activity.

What Happens When the Bank Freezes Your Account

Banks may freeze accounts based on internal suspicion, reports from other financial institutions, or directions from Bank Negara Malaysia or law enforcement. The freeze often happens without prior notice.

When an account is frozen:

• All transactions are halted, including salary payments, supplier payments and operating expenses
• The company may not be told the reason for the freeze initially
• Funds in the account cannot be accessed until the freeze is lifted or a court orders otherwise
• The freeze may last weeks or months while investigations proceed

A frozen account does not mean the company or its directors have been charged with an offence. However, it signals that suspicious activity has been detected and an investigation is underway.

Practical Steps If Your Account Is Frozen

If your company's bank account is frozen, prompt action is important:

• Contact the bank immediately to understand the nature of the freeze and what information they require
• Gather transaction records showing the source and purpose of incoming funds
• Identify the suspicious transactions and prepare a timeline of what occurred
• Obtain legal advice before responding to any requests from investigators
• Cooperate with authorities but understand your rights, including the right to remain silent in criminal matters
• Preserve all communications including emails, invoices and contracts related to the flagged transactions

Do not attempt to move funds through other accounts or destroy records. Such actions may constitute obstruction and create additional liability.

Preventive Controls for Businesses

Companies can reduce the risk of being used as money mules by implementing practical controls:

Know Your Customers and Counterparties

Before accepting payment from a new source, verify who is paying and why. Be cautious of payments that arrive unexpectedly or from parties with no clear connection to your business.

Question Unusual Payment Patterns

Watch for payments significantly larger than normal, requests to forward funds to third parties, or pressure to act quickly without verification. These are common indicators of fraud.

Maintain Segregation of Duties

Ensure that no single person has unchecked control over receiving and disbursing funds. Require approvals for unusual transactions.

Train Staff

Employees handling finances should understand money-mule risks and know how to escalate suspicious requests.

Review Dormant Accounts

Close bank accounts that are no longer needed. Dormant accounts are attractive targets for criminals.

The Importance of Acting Quickly

Money-mule investigations move fast. Funds are often traced and frozen within days of a fraud being reported. Companies that respond promptly, preserve evidence and obtain proper advice are better positioned to demonstrate their lack of involvement and seek the release of frozen funds.

Delays or poor handling can prolong the freeze, increase legal exposure and cause lasting damage to banking relationships.

Common questions

Can my company be charged even if we did not know the funds were from a scam?

Possibly. The offences under sections 424B and 424C apply if you knew or had reason to believe the account would be used for fraud. Wilful blindness may be treated as knowledge.

How long can a bank freeze my company's account?

There is no fixed limit. Freezes may last weeks or months depending on the investigation. You may apply to court to challenge a prolonged freeze in certain circumstances.

Will directors be personally liable if the company account is used as a money mule?

Directors may face personal criminal liability if they consented to, connived in or neglected to prevent the offence. They may also face civil claims from fraud victims.

What should I do first if my account is frozen?

Contact the bank to understand the freeze, gather all transaction records, and obtain legal advice before responding to investigators or making any statements.

Can we recover funds frozen in a money-mule investigation?

Legitimate funds may be released once authorities are satisfied they are not proceeds of crime. This requires cooperation, documentation and sometimes a court application.