Money mule detection: what APAC banks need to change now

TL;DR: The HKMA’s June 2026 blueprint shows AI is helping banks detect money mules and hidden syndicates, while static rules-based controls keep misclassifying high-risk shell accounts and missing cross-channel patterns, according to Feedzai. The control problem is no longer model sophistication alone; it is whether institutions can see, score, and intervene across the full customer lifecycle.

Editorial analysis by NHI Mgmt Group, based on content published by Feedzai: “What the HKMA’s AI Blueprint Tells Us About the Future of Mule Detection Across APAC”.

By the numbers:

• The bank’s machine learning model rated 42% of customers as high risk, while the rules-based model had previously rated those same customers as medium risk.
• The digital bank increased mule account detection by 30% after using photo irregularities and related signals during onboarding.
• The same bank reduced transaction monitoring alerts by 25% after stopping bad actors at onboarding.

Key questions

Q: What breaks when mule detection relies only on rules-based controls?

A: Rules-based controls break when mule networks spread activity across onboarding, products, and institutions faster than thresholds can connect the dots.

Q: Why does AI improve money mule detection in financial institutions?

A: AI improves mule detection because it can combine weak signals that look harmless on their own, such as repeated identities, device patterns, onboarding anomalies, and account behaviour.

Q: What are the signs that a bank’s mule detection programme is failing?

A: Common signs include repeated misclassification of high-risk accounts as medium risk, rising alert volumes without better outcomes, and cases that only surface after funds have moved.

Practitioner guidance

• Implement onboarding-first mule detection Prioritise application-stage controls that can reject, review, or score risky accounts before they are fully operational.
• Correlate signals across the full customer lifecycle Connect onboarding, transaction monitoring, device intelligence, and portfolio behaviour into one fraud view so medium-risk entities can be reassessed when patterns change.
• Escalate from rules to network-level pattern detection Use machine learning to identify repeated attributes across accounts, shell companies, and related behaviour, then feed confirmed cases back into model training and review queues.

Bottom line: Static rules-based controls are missing mule networks because they cannot reliably connect onboarding signals, account behaviour, and cross-institution movement.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →