Scams and mule accounts are the dominant threat in Asia Pacific banking

A recent survey by analytics software firm FICO reveals a significant shift in the landscape of financial crime across the Asia Pacific (APAC) region: scams and mule accounts have overtaken other types of fraud as the primary concern for banks. This surge is largely driven by the pervasive use of social media, posing unprecedented challenges for financial institutions and victims alike.

According to the FICO survey, 69% of senior banking executives in APAC identified scams and mule accounts as their primary worry. This reflects a growing trend where victims are manipulated into authorizing payments directly to criminals, making these transactions difficult to trace or reverse. Unlike traditional fraud involving unauthorized transactions that banks can often block, scams bypass existing defenses because the victim approves the transfer. Once funds are transferred, criminals rapidly move them through mule accounts across various institutions and borders, severely hindering recovery efforts.

The financial impact of these scams has reached historic highs across the region. In 2024, Singapore alone reported over S$1.1 billion (US$860 million) in scam-related losses, a 70% increase from the previous year. Thailand experienced an estimated ฿60 billion (US$1.7 billion) in damages, while Malaysia’s losses were estimated at RM54 billion (US$12.78 billion), or nearly 3% of its GDP. Similar patterns of dominant scam activity in cybercrime reports have been observed in the Philippines and Indonesia.

Social media has emerged as the leading external threat vector for scams, identified by 52% of respondents, followed by messaging apps at 35%. Platforms like Facebook, TikTok, and Telegram are frequently exploited by criminal syndicates to impersonate officials, promote fake investments, advertise bogus job offers, and recruit money mules. Disturbingly, some victims are even persuaded to “rent out” their bank accounts for quick cash, often unaware that they are facilitating financial crime. The scale of this issue is evident in Thailand, where over 200,000 mule accounts were shut down in a single year. In response, Singapore has introduced legislation that criminalizes the supply of mule accounts and grants banks and authorities real-time intervention powers.

Despite the escalating threat, banks face significant operational barriers in detecting and responding to these sophisticated scams. The FICO poll highlighted siloed data as the biggest issue, cited by 46% of executives. This is compounded by a lack of connected insights across various products and channels (28%) and limited real-time integration with third-party systems (13%). As Dattu Kompella, Managing Director of Asia Pacific for FICO, emphasizes, “Scam activity is often fast, fluid, and fragmented. To respond effectively, banks need connected systems that provide a complete, real-time view of risk. Without breaking down internal silos and unifying insights across teams, many institutions will remain on the back foot.”

The survey also revealed a split among banking executives regarding victim compensation. Only 14% believe banks should fully reimburse customers in all scam cases. Half of the respondents felt that reimbursement should only apply when the bank is at fault, while 36% supported a shared responsibility model between banks and customers. This ongoing debate underscores the complexity of assigning liability in an environment where victims are often unknowingly complicit in authorizing fraudulent transactions.

Governments in the APAC region are actively responding to this growing menace. Singapore’s recently passed Protection from Scams Bill empowers authorities to issue Restriction Orders (ROs) that can temporarily freeze bank transactions for individuals identified as potential scam victims. This aims to protect vulnerable individuals while balancing concerns about financial autonomy. Similarly, the Philippines enacted the Anti-Financial Account Scamming Act (AFASA) in July 2024, which seeks to prevent and penalize digital financial cybercrime, including money mule activities and social engineering schemes.

As scams continue to evolve in sophistication and scale, a concerted effort involving robust technological solutions, enhanced inter-bank collaboration, proactive regulatory measures, and ongoing public education will be crucial in mitigating this pervasive threat to the financial stability of the Asia Pacific region.