As banks face mounting strain to fight the rising menace of cash mules, the main focus has shifted in direction of steady, 24/7 monitoring for mule threat. Nevertheless, a fraud technique marketing consultant argues that for this strategy to be efficient, monetary establishments should transfer past blunt, mounted thresholds and undertake a extra adaptable, context-driven technique.

The commentary from Liese Rushton, a fraud technique marketing consultant at Synectics Options, comes as concern over the position of cash mules in fraud and cash laundering intensifies. A latest report from the UK regulator highlighted a surge in mule exercise final yr, involving at the very least 225,000 recognized accounts.

The problem of evolving mule techniques

In keeping with Rushton, the road between efficient and extreme monitoring is changing into tougher to search out because the techniques of economic criminals evolve alongside the behaviour of real shoppers. Analysis from Synectics reveals that cash mules typically stay dormant for a median of eight months earlier than their accounts present a spike in exercise, sometimes hitting between three and 4 completely different banks. These mules additionally goal merchandise with traditionally decrease ranges of anti-money laundering (AML) oversight to use intelligence gaps.

On the identical time, respectable prospects are altering how they financial institution, with behaviours like account-hopping and irregular revenue flows changing into extra widespread, additional blurring the excellence between dangerous and routine exercise. Rushton argues that conventional periodic monitoring, designed for a extra static world, is now not adequate, because it typically solely flags muling exercise after a transaction is full.

The pitfalls of perpetual KYC with out context

Whereas ongoing mule detection as a part of a perpetual Know Your Buyer (pKYC) technique is important, Rushton warns {that a} poorly applied system can create new issues. If screening is predicated on mounted thresholds and blunt logic, it may possibly generate unmanageable volumes of alerts, enhance the workload for already pressured fraud groups, and create a excessive variety of false positives that frustrate respectable prospects and harm belief.

“Within the face of a quickly evolving mule menace, mounted thresholds solely create an phantasm of certainty and management,” the commentary states. “In observe, they can’t preserve tempo with evolving techniques and threat producing loads of quantity, however not a lot relevance.”

Layered context for efficient detection

The proposed resolution is to gas ongoing mule detection with wealthy, layered context. Rushton suggests this permits for interventions which might be each immediate and exact, but versatile sufficient to adapt to new threats. The advisable layers of context embody:

• Consortium information: Utilizing cross-sector intelligence to see a buyer’s behaviour throughout all their monetary merchandise.
• Configurable controls: Aligning logic to a financial institution’s particular threat urge for food slightly than counting on generic thresholds.
• Explainability: Offering clear causes for every alert to construct confidence with each inner groups and regulators.

This contextual strategy may be notably priceless in complicated situations, resembling distinguishing a real Authorised Push Fee (APP) fraud sufferer from a mule colluding in a staged rip-off to abuse the obligatory reimbursement course of. Whereas a single financial institution would possibly see remoted exercise that seems respectable, a joined-up view utilizing consortium information may reveal a sample of orchestration.

The commentary concludes that the success of ongoing mule detection ought to be judged not by the variety of alerts raised, however by their relevance. This requires a shift in direction of smarter selections constructed on “steady context and shared vigilance.”