India's Digital Fraud Network Expands: 524,000 Mule Accounts Flagged in March 2026

Post Views: 6

India’s digital fraud network expands with over 524,000 mule accounts identified in March 2026, revealing vulnerabilities in the UPI system.

A Cyber Intelligence Analysis Reveals Proliferation of Mule Accounts

A cyber intelligence analysis has revealed the identification of 524,121 suspected mule accounts and digital identities within India during March 2026, highlighting the proliferation of structured fraud operations within the Unified Payments Interface (UPI) system. The findings, disclosed by the fraud detection company mFilterIt, coincide with the anticipated rapid expansion of India’s digital payments infrastructure over the coming decade. Among the flagged entries, 520,559 were Virtual Payment Addresses (VPAs) linked to illicit activity.

Cybercriminals increasingly exploit UPI VPAs due to their ease of creation, instant sharing capabilities, and the ability to transfer illicit funds across accounts before financial institutions can intervene.

Key Vulnerabilities in the Ecosystem

The report’s analysis identifies critical weaknesses within the UPI ecosystem. Payments banks accounted for approximately 41% of all suspicious VPA activity, attributed to their streamlined onboarding processes that prioritize speed over rigorous verification. UPI merchant accounts contributed another 11% of flagged transactions. Some of these accounts, particularly those registered through payment aggregators, were reportedly used to funnel fraudulent proceeds disguised as legitimate commerce.

This integration of criminal and genuine transactions complicates detection, as fraudulent merchant accounts often appear indistinguishable from legitimate small businesses in transaction records.

Regulators Addressing a Growing Threat

The March 2026 data aligns with broader trends. By early 2026, the Indian Cyber Crime Coordination Centre had already documented over 2.47 million Layer-1 mule accounts nationwide. Authorities had deactivated 1.2 million fraudulent SIM cards and frozen 1.33 million mule accounts by the end of 2025. The Reserve Bank of India has deployed measures to counter this threat, including its Digital Payments Intelligence Platform, developed in collaboration with the National Payments Corporation of India.

This tool employs AI-driven analytics to share verified fraud signals across banks and fintech firms in real time. A dedicated system, MuleHunter.AI, has also been implemented to detect anomalous account behavior before funds progress further in money laundering chains.

Enforcement Challenges and Legal Constraints

Despite advancements in detection, regulatory enforcement faces legal hurdles. The Andhra Pradesh High Court recently ruled that a merchant’s bank account cannot be frozen solely based on a fraudster’s use of it for a minor UPI transaction, citing the impracticality of verifying the criminal history of every customer. This decision mirrors similar rulings in Kerala and Rajasthan, reflecting a broader conflict between aggressive account freezes and due process protections.

The implications are significant: a 2024 Parliamentary Standing Committee report revealed that only ₹0.57 crore of the ₹2,294.79 crore lost to cyber fraud in 2022 was recovered, underscoring the difficulty of reclaiming funds once they are layered through multiple mule accounts.

A System Racing Against Its Own Growth

The scale of the challenge is immense. Digital transaction values are projected to rise from ₹300 lakh crore in FY2025 to nearly ₹907 lakh crore by FY2030, with UPI transaction volumes expected to grow from ₹189 lakh crore to ₹485 lakh crore during the same period.

Prof. Triveni Singh, a former IPS officer and cybercrime expert, emphasized that mule accounts have become central to large-scale financial crimes. Fraudsters typically acquire or rent bank accounts, UPI IDs, and mobile connections to rapidly transfer stolen funds through multiple accounts, a method designed to evade manual tracking.

Industry Warnings and Calls for Action

mFilterIt’s chief executive, Amit Relan, echoed these concerns, describing mule accounts as the foundation of organized digital fraud in India. He warned that fraudsters are leveraging the very attributes that make UPI effective globally—its speed and accessibility—to execute large-scale operations. As transaction volumes approach a near-tripling by 2030, the critical question remains whether detection and enforcement mechanisms can scale adequately to match the pace of growth.