EMMA 9 UK action: Investigate the account—and the recruitment story

← All case files

LCF-013 · Digital fraud

Investigate the account—and the recruitment story

Ask how the account holder became involved, who supplied instructions and who controlled access. A claimed job offer may be relevant evidence rather than a complete explanation.

EMMA 9 UK action · Intermediate · About 5 minutes

The documented case

What the official sources say

Historical event: November 2023
Outcome at that date: Coordinated enforcement activity reported
Jurisdiction: United Kingdom / Europe

The NCA reported that UK action during November 2023 contributed to Europol-led European Money Mule Action 9. Over three weeks, UK teams made 14 arrests and obtained freezing orders over five accounts containing more than £500,000. [1]

The NCA described money-mule recruitment as a route for moving criminal proceeds and highlighted the risk of young people being recruited or exploited. The activity also included warnings and public awareness work. [1]

Read the outcome precisely

This is an operation case, not a judgment against every identified account holder. Arrests, freezing orders and warning letters have different meanings. Age or student status alone does not establish knowledge, criminality or liability.

What to learn from it

Original LearnAML teaching analysis. The following controls and exercises are not additional findings against the named parties.

  1. Examine recruitment, account control and fund movement separately.
  2. Identify safeguarding concerns without prejudging culpability.
  1. 01Recruitment approach
  2. 02Incoming funds
  3. 03Onward instruction
  4. 04Investigation and safeguarding

Simplified LearnAML control map; not a reconstruction of every transaction in the case.

Examine how control was obtained

Ask how the account holder became involved, who supplied instructions and who controlled access. A claimed job offer may be relevant evidence rather than a complete explanation.

Connect activity to corroboration

Review sender relationships, transaction purpose, onward movement and available communications using authorised processes. Do not replace individual investigation with a demographic assumption.

Consider vulnerability alongside risk

Escalate indicators of coercion or exploitation through appropriate safeguarding procedures. That does not remove the need to assess transactions and reporting obligations.

Your decision · Fictional practice

What would you do next?

Fictional exercise: A young account holder receives several unrelated credits and is told by an online “employer” to forward most of the money while keeping a fee. They contact support after becoming worried and say the employer now threatens them. The bank has not established the source of the credits.

Which response is best supported?

Put the decision into words

Use fictional details only. Do not enter customer information. Optional saves remain on this device, not your LearnAML account.

Compare your reasoning

Use this checklist to improve your answer. It is not an automatically marked essay.

  • Investigate account control and the recruitment explanation alongside money movement.
  • Separate observed conduct from conclusions about intent.
  • Use appropriate safeguarding and escalation routes without promising an outcome.

Take one lesson back to work

In your own environment: Investigate account control and the recruitment explanation alongside money movement.

Educational analysis, not instructions for a live customer or transaction. Consider your role, authorised procedures and current local requirements.

Sources and editorial record

  1. NCA: money-mule action and prevention ↗NCA · November 2023Evidence location: Paragraphs describing November 2023 UK activity and recruitment risks; Paragraphs describing November 2023 UK activity and recruitment risks

Sources accessed and educational analysis prepared: 27 October 2026. Historical snapshot; subsequent proceedings, present custody, current controls and present law are not asserted. Original LearnAML educational analysis. Version 1.0.

About LearnAML