BaFin Warns Against Money Mule Job Offers from Zaif Co. Ltd. Advertised via Telegram

Key Takeaways

• BaFin has issued a warning against Zaif Co.
• Ltd., which recruits "office clerks working from home" through Telegram chats to receive third-party payments in their own bank accounts and forward them or convert them to cryptocurrency.
• The funds likely derive from fraud victims, so the scheme presents money laundering and mule account risks.
• Compliance teams should treat the warning as a typology and monitoring input for transaction surveillance and customer education.

Deep Dive

BaFin has issued a warning against Zaif Co. Ltd., which recruits "office clerks working from home" through Telegram chats to receive third-party payments in their own bank accounts and forward them or convert them to cryptocurrency. The funds likely derive from fraud victims, so the scheme presents money laundering and mule account risks. Compliance teams should treat the warning as a typology and monitoring input for transaction surveillance and customer education.

The warning is not a new rule. It is a public notice issued under Section 10 Paragraph 7 of the Crypto Markets Supervision Act, and it flags an entity operating without the required authorization. The activity described, receiving funds into a domestic account and forwarding them as instructed or exchanging them for crypto, is a regulated payment or crypto service requiring a permit or license. BaFin notes it has repeatedly warned against this pattern, often described as "acting as a trustee." For compliance teams, the notice confirms that recruitment of money mules through social media and messaging platforms remains an active typology in Germany.

The key points are as follows. The recruited individuals are unwitting or complicit participants who move proceeds of fraud and other crimes. Their accounts therefore become channels for layering. The funds likely originate from victims of fraud, which raises the risk of authorized push payment fraud reports, recall requests, and account freezes. Participants may also face criminal exposure for money laundering or unlicensed services. The notice sets no deadline or implementation date, and it takes effect as of its publication on September 14, 2026.

Recommended actions for compliance professionals:
- Add Zaif Co. Ltd. to adverse media and watchlist screening, and review transactions or counterparties linked to the name.
- Update transaction monitoring scenarios to detect mule behavior. Examples include newly opened or dormant accounts receiving multiple third-party credits followed by rapid onward transfers or crypto purchases, and activity inconsistent with customer profiles.
- Review onboarding and KYC controls for retail customers, particularly students, job seekers, and recent account openers.
- Reinforce suspicious activity reporting procedures and escalation paths, including timely reports to the Financial Intelligence Unit.
- Refresh customer communications and staff training on work-from-home job scams and "financial agent" offers.
- Check BaFin's company database when assessing counterparties claiming to offer financial or crypto services.

The risk impact is moderate to high for retail banks, payment institutions, and crypto-asset service providers. Institutions whose accounts are used as mule accounts face AML compliance findings, reputational harm, fraud losses, and potential supervisory scrutiny if controls are found inadequate. Customers also face direct harm, including account closure and criminal liability. BaFin, the Federal Criminal Police Office, and state criminal police offices are coordinating on fraud warnings, which signals continued enforcement attention to this area.

Source: Federal Financial Supervisory Authority