Bank drop, money mule and account takeover are three terms that can appear in the same fraud investigation, but they describe different parts of the problem.
A bank account takeover is the unauthorized control of a legitimate victim's financial account. A money mule is a person who receives or moves illegally acquired money for someone else. A bank drop, more commonly described in law-enforcement records as a drop account, is an account used to receive, funnel or transfer fraud proceeds.
Understanding the distinction matters because the victim whose account is taken over, the person acting as a money mule, and the account receiving stolen funds can all occupy different positions in the same fraud chain.
Quick answer: Account takeover describes unauthorized control of a victim's real account. A money mule is the person who moves criminal proceeds. A bank drop or drop account is the receiving or transit account used to hold or move those proceeds. One fraud scheme can involve all three.
Safety scope: This article explains the terminology for fraud awareness. It does not provide methods for acquiring accounts, recruiting mules, moving stolen funds, bypassing authentication or evading bank controls.
At a Glance: The Core Difference
Term | What it describes | Who/what is affected | Main defensive concern |
|---|---|---|---|
Account takeover | Unauthorized control of a legitimate account | Victim's real bank or financial account | Stop unauthorized access and protect funds |
Money mule | A person who moves illegally acquired money | Recruit may be unwitting, willfully blind or complicit | Prevent recruitment and stop movement of proceeds |
Bank drop / drop account | An account used to receive or transfer fraud proceeds | Receiving or transit account in the money trail | Identify suspicious receiving activity and freeze proceeds |
What Is a Bank Account Takeover?
Bank account takeover, often shortened to ATO, happens when an unauthorized person gains control of a legitimate customer's online banking or other financial account.
The FBI describes ATO fraud as unauthorized access to a financial, payroll or health-savings account with the goal of stealing money or information. Common high-level entry points include social engineering, phishing messages and fraudulent websites.
- The account belongs to a real victim.
- The victim may lose access after credentials or recovery details are changed.
- Unexpected MFA prompts, new devices or password resets can be early warning signs.
- Unauthorized transfers or account-setting changes can follow.
What Is a Money Mule?
The FBI defines a money mule as someone who transfers or moves illegally acquired money on behalf of another person.
Some mules knowingly participate. Others are recruited through fake jobs, romance scams or similar deception and may initially believe the activity is legitimate.
- A money mule is a person, not an account type.
- The person may use an existing personal account or an account opened for the supposed job or relationship.
- Mules can be unwitting, willfully blind or knowingly complicit.
- Their role creates distance between the original victim and the criminals controlling the scheme.
What Is a Bank Drop or Drop Account?
“Bank drop” is criminal slang. In court records and law-enforcement releases, the more common term is “drop account.” It refers to an account used to receive, funnel or transfer proceeds from fraud.
The U.S. Department of Justice has described drop accounts as bank accounts controlled by perpetrators or co-conspirators and used to receive money from victims of fraud schemes, including business email compromise and romance fraud.
- A drop account is an account, not necessarily a person.
- It can be controlled directly by a criminal or by a recruited money mule.
- It can receive funds from one or many fraud events.
- The same person can be both the mule and the controller of a drop account.
Why These Terms Are Often Confused
They frequently appear together in the same fraud chain. Stolen credentials may lead to account takeover; stolen funds may then be sent to a drop account; and a money mule may control that drop account or move the money onward.
Because one person can play several roles, casual discussions sometimes use the terms interchangeably. For fraud prevention, keeping the definitions separate makes the flow easier to understand.
How the Three Can Fit Into One Fraud Chain
1. Victim account is compromised.
A criminal gains unauthorized control of a legitimate account through phishing, impersonation or another credential-compromise method.
2. Fraudulent payment is initiated.
Money is moved or a victim is deceived into sending funds.
3. Funds reach a drop account.
The receiving account is used as a destination or transit point for fraud proceeds.
4. A money mule may control or operate the receiving account.
The mule may have been recruited knowingly or unknowingly.
5. Banks or law enforcement detect the activity.
Suspicious transaction monitoring, victim reports or linked investigations can expose the chain.
Important: The Same Account Can Play Different Roles
A single bank account can be the victim account in one incident and a receiving account in another, but the labels describe the role it plays in the specific fraud event.
Similarly, a money mule may own the drop account in their true name, or a criminal may control a drop account created through identity fraud or a sham business.
Bank Drop vs Money Mule
The simplest distinction is that a money mule is a person and a drop account is an account.
Question | Money mule | Drop account |
|---|---|---|
Is it a person or account? | Person | Account |
Can it be legitimate? | A person can be deceived into participation | The account itself may have been legitimately opened but later misused |
Primary fraud role | Moves or receives criminal proceeds | Receives, holds or transfers criminal proceeds |
Main warning sign | Asked to move money for someone else | Unusual incoming and onward movement inconsistent with normal use |
Money Mule vs Account Takeover
A money mule is generally downstream in the fraud chain, while account takeover is often an upstream way criminals obtain access to funds.
- Account takeover victim: loses control of their own account.
- Money mule: uses an account to receive or move proceeds for another person.
- A mule can also become an account-takeover victim if criminals later steal control of the mule's account.
- The two roles can overlap, but they describe different events.
Bank Drop vs Account Takeover
A drop account receives or moves fraud proceeds. An account-takeover victim account is the source or target of unauthorized access.
The distinction is especially important when investigating suspicious transfers: the sending account may be compromised, while the receiving account may be functioning as the drop.
Where Do “Bank Logs” Fit?
“Bank logs” is underground slang for compromised online-banking access or stolen banking credentials. It refers to account-access data, not to a mule or drop account.
In a high-level fraud chain, stolen credentials can be used in an attempted account takeover, while a separate drop account or money mule may later receive the proceeds.
Where Does APP Fraud Fit?
Authorised Push Payment fraud is different again: the victim themselves authorizes the transfer because they have been deceived.
The receiving account in an APP scam may still be a drop account or mule-controlled account, but the victim's sending account was not necessarily taken over.
Where Does Carding Fraud Fit?
Carding fraud concerns stolen payment-card credentials rather than direct control of a bank account. Fraud proceeds generated through card abuse can still be routed into mule-controlled or drop accounts.
Warning Signs You May Be Targeted for Account Takeover
- Unexpected login or password-reset alerts
- MFA codes or approval prompts you did not request
- Changes to phone number, email or recovery settings
- New payees or beneficiaries
- Unauthorized transfers or account activity
- Sudden loss of account access
Warning Signs You May Be Recruited as a Money Mule
- A remote job asks you to receive payments in your personal account.
- A stranger or online romantic partner sends money and asks you to forward it.
- You are told to open a bank account for a new job or client.
- You may keep a commission for moving money.
- The arrangement involves urgency, secrecy or unexplained third parties.
Warning Signs an Account May Be Used as a Drop
For consumers, the clearest concern is when another person wants to use your account as a temporary destination for money that does not belong to you.
Banks and businesses may also look for account behavior inconsistent with the customer's known profile, but exact monitoring rules should remain confidential.
- Unexpected incoming funds from unknown people or businesses
- Pressure to forward recently received money
- A supposed employer uses your personal account as a payment hub
- Multiple unrelated people are told to pay into your account
- You are warned not to explain the transactions to your bank
Who Is the Victim in Each Situation?
Scenario | Primary victim | Possible additional victim |
|---|---|---|
Account takeover | Account holder whose access or funds are stolen | Business or recipient affected by fraudulent payments |
Money mule recruitment | Original fraud victim; the recruited mule may also be deceived | Bank or business exposed to losses/investigation |
Drop account use | Person/business whose money was diverted | Account holder if the drop account was opened or used through identity fraud |
Why Money Mules Can Also Be Victims
Not every mule starts with criminal intent. The FBI notes that some are recruited through online romance schemes or fake job offers and may not initially realize they are moving criminal proceeds.
That does not make continued participation harmless, but it explains why prevention campaigns focus heavily on recruitment warning signs.
Why Drop Accounts Are High Risk
A receiving account linked to fraud can be frozen, restricted or investigated. The account holder can also face loss of banking access, financial liability or criminal exposure depending on the circumstances and level of knowledge.
DOJ cases show that drop accounts have been used in business email compromise, romance fraud and other schemes to receive money sent by victims.
How Banks and Investigators See the Differences
- Account takeover investigation asks: who gained unauthorized access and what changed inside the victim account?
- Mule investigation asks: who controlled the person or account that moved proceeds, and did the person know?
- Drop-account investigation asks: where did victim money land and where did it go next?
- Linked analysis can connect multiple accounts and victims into one fraud network.
What to Do If Your Account Was Taken Over
- Contact the financial institution immediately using a trusted number.
- Report unauthorized activity and request that the account be secured.
- Reset compromised banking and email credentials.
- Review recovery information, devices, beneficiaries and recent transactions.
- File the appropriate fraud or law-enforcement report for your jurisdiction.
What to Do If You Think You Were Recruited as a Mule
- Stop moving money immediately.
- Do not send additional funds or follow new instructions.
- Contact your bank and explain the situation.
- Preserve messages, job offers and transaction records.
- Report the scam through the appropriate official channels.
What to Do If Someone Wants to Use Your Account as a “Drop”
- Do not provide account access or allow your account to be used.
- Do not accept money on behalf of strangers or online-only contacts.
- Do not open an account for a supposed employer or client unless the arrangement has been independently verified and is legitimate.
- If funds arrive unexpectedly, contact your bank before moving them.
Frequently Asked Questions
What is the difference between a bank drop and a money mule?
A bank drop or drop account is the account used to receive or transfer fraud proceeds. A money mule is the person who moves or receives those proceeds.
What is the difference between a money mule and account takeover?
A money mule moves criminal proceeds, while account takeover is unauthorized control of a legitimate victim's account.
Can a money mule own a drop account?
Yes. A recruited or complicit mule may use an account they control as the receiving or transit account.
Can a drop account belong to an innocent person?
It can if the account is compromised, opened through identity fraud or used without the person's informed consent.
Is a bank drop the same as a stolen bank account?
No. A drop account describes its role in receiving or moving fraud proceeds. A stolen or taken-over account refers to unauthorized control.
What are bank logs?
Bank logs is underground slang for compromised online-banking credentials or account access. It is different from a mule or drop account.
Is APP fraud an account takeover?
Not necessarily. In APP fraud the victim authorizes the payment because they were deceived; the receiving account may still be mule-controlled or a drop account.
Can a money mule be unaware?
Yes. The FBI says some mules are recruited through fake jobs or romance scams and may initially be unaware of the criminal purpose.
What should I do if someone asks to use my account to receive money?
Do not agree. If money has already arrived, contact your bank before taking any action.
What should I do if my bank account has been taken over?
Contact the bank immediately, secure access, report unauthorized transactions and reset compromised credentials.
Final Thoughts
Bank drop, money mule and account takeover describe different positions in a fraud chain.
Account takeover is about unauthorized control of a victim's legitimate account. A money mule is a person who receives or moves illicit funds. A bank drop or drop account is the account used to receive or transfer those proceeds.
The same investigation can involve all three, which is why clear terminology helps consumers, businesses and security teams understand who was compromised, who moved the money and where the proceeds went.
Authoritative References
- FBI - Money Mules
- FBI - Account Takeover Fraud via Impersonation of Financial Institution Support
- U.S. Department of Justice - BEC Scheme Using Drop Accounts
- U.S. Department of Justice - Drop Accounts Used to Receive Fraud Proceeds
- U.S. Department of Justice - Bank Account Takeover Scheme and Stolen-Password Database
Editorial note: This article is educational and defensive. It explains fraud terminology and victim-protection concepts without providing ways to obtain accounts, recruit mules, move stolen funds, bypass authentication or evade financial-crime controls.
