Bank Drop Fraud Schemes and Ways to Prevent Them

Digital banking and instant payments have made transactions faster and more convenient. They have also shortened the time fraudsters need to move stolen money.

Bank drop schemes sit in the middle of this problem: whatever the original fraud – phishing, account takeover, a fake invoice or a loan taken out on a stolen identity – the money has to land in an account before it can be withdrawn or moved on.

In this article, we explain how bank drop fraud works, where drop accounts come from, and which controls help banks and lenders detect them.

What Is a Bank Drop?

Bank drop refers to a type of scam that involves the use of compromised bank accounts, known as "drop" accounts, to facilitate fraudulent transactions.

Drop accounts can be taken over from real customers, opened with stolen or synthetic identities, or rented or sold by their legitimate holders. When fraudsters take over an existing account, they typically gain access through phishing attacks or malware infections.

Once in control of a drop account, fraudsters use it to receive illicit funds from unsuspecting victims. These funds are often obtained through other fraudulent activities, such as online purchases made with stolen credit card information or unauthorized bank transfers.

Account holders who rent or sell access to their accounts are often called money mules. Some are recruited through fake job offers and may not know what the account is being used for.

How Do Bank Drops Work?

In the realm of cybercrime, digital currencies have become the currency of choice for fraudulent activities. However, since these cryptocurrencies are yet to achieve widespread acceptance in the mainstream business world, hackers face a crucial hurdle while converting their digital assets into traditional dollars.

To bridge this gap, they often use identity fraud. By using the bank accounts of unsuspecting victims, fraudsters gain access to their credentials and funds.

Once in control, the victims' accounts serve for deposits stemming from the conversion of the hackers’ digital currencies into fiat money. These funds are then swiftly transferred to the fraudsters’ bank accounts or, more commonly, redirected towards the purchase of other cryptocurrencies, tangible goods, or fraudulent services. It is a part of a meticulous money laundering process.

Alternatively, fraudsters may resort to a more elaborate scheme known as synthetic identity fraud. By combining real and fabricated identity data, they create a facade of legitimacy to open fake bank accounts to serve as “bank drops”.

Bank Drop Use Example Scenarios

Here are several examples of bank drop schemes that are common today. Most begin with social engineering:

• CEO Impersonation Fraud: an email lands in the inbox of an unsuspecting employee, purportedly from the CEO. Urgency drips from every word as the message demands an immediate transfer of funds to a specified bank account. Blinded by the authority figure’s apparent legitimacy, the employee complies, following fake CEO instructions.
• Marketplace Deception: online marketplaces attract scammers who pose as legitimate sellers. Armed with bank drop accounts, they entice buyers with tempting offers. Once payment is made for fictitious goods, the scammer swiftly withdraws the funds, leaving the buyer empty-handed.
• Invoice Misdirection: fraudsters utilize bank drop accounts to orchestrate elaborate schemes, acting as trusted suppliers. Through deceptive emails and counterfeit invoices, they dupe unsuspecting businesses into transferring funds to the wrong destination – the drop account – before vanishing.
• Loan Disbursement Fraud: a fraudster applies for an online loan using a stolen or synthetic identity and gives a drop account for disbursement. Once the loan is paid out, the money is moved on, and the lender is left with a debt that is unlikely to be repaid.

Across all these scenarios, the drop account is the point where stolen money becomes usable. By understanding the tactics employed by fraudsters and remaining vigilant, businesses can enhance their defenses against those seeking to exploit their trust and financial security.

Common Types of Fraud That Steal Bank Information

Phishing

Phishing scams involve fraudulent emails, text messages (smishing), phone calls (vishing) or websites that mimic legitimate financial institutions or businesses. Victims are tricked into providing sensitive information such as usernames, passwords, and bank account details by clicking on malicious links or providing information in response to fake requests.

Once obtained, this information is used by fraudsters to access bank accounts, make unauthorized transactions, or even commit identity theft.

Unsolicited Check Fraud

Unsolicited check fraud occurs when individuals receive unexpected checks in the mail, often accompanied by instructions to deposit them and wire a portion of the funds back to the sender.

These checks are typically counterfeit or stolen. By depositing them and sending money on, victims unknowingly let their own account act as a pass-through for the scammer – in effect, a drop.

After the victim wires funds to the scammer, the fraudulent check eventually bounces, leaving the victim responsible for the lost funds and potentially facing legal consequences.

Automatic Withdrawal Scam

In an automatic withdrawal scam, fraudsters gain unauthorized access to victims’ bank accounts – a form of account takeover – and set up automatic payments or withdrawals without their knowledge or consent.

This can be achieved through various means, such as phishing attacks, malware infections, or exploiting vulnerabilities in online banking systems.

Is Open Banking Good or Bad for Bank Drops?

Open banking, which lets customers share account data with licensed third parties and initiate payments through them via APIs, affects bank drops in two ways. On one hand, account data shared through open banking can help a lender or payment provider confirm that an account belongs to the applicant and see how it has been used. That can make a freshly opened drop account easier to spot.

On the other hand, payment initiation and account-to-account transfers make it faster to move money out of a drop once it arrives. Real-time payment systems such as Pix in Brazil and UPI in India settle transfers in seconds, which leaves little time to stop funds after they land. As a result, detection tends to move earlier – to account opening, login and the first transactions on a new account. Our article on Pix fraud prevention looks at how this plays out in Brazil.

Open banking’s value against drops depends on the controls around it – both within the institutions that use it and in how it is regulated.

Are Neobanks More at Risk?

Neobanks are the digital-only counterparts of traditional banks. They stand out for their sleek interfaces and mobile-first approach. However, this very convenience and agility also make them potential targets for illicit activities like bank drops. Unlike their brick-and-mortar counterparts, neobanks often operate with leaner infrastructure and no physical branches, relying heavily on technology for customer interactions and transaction monitoring.

This reliance on digital infrastructure is very efficient. However, it can pose a challenge in terms of security. Fully remote onboarding removes the in-person checks that branch-based banks can fall back on, so neobanks depend on digital signals to tell a genuine new customer from someone opening a drop.

Fast account opening with minimal friction is part of what makes neobanks attractive to customers. It can also attract people opening accounts to use as drops.

While neobanks undoubtedly bring innovation and accessibility to the banking landscape, they must also consider risks associated with digital finance and drop fraud in particular. To safeguard against illegal activities like bank drops, neobanks need controls that work at account opening and through the first weeks of account activity, when drop accounts are often put to use – without compromising user experience.

How Banks Can Protect Their Customers from Bank Drop Fraud

By implementing a multi-layered approach to security encompassing KYC protocols, two-factor authentication, and device intelligence solutions, banks and lenders can reduce the risk of bank drop fraud and protect their customers from financial harm.

Know Your Customer (KYC)

The KYC approach supposes the following:

- implement stringent KYC procedures to verify the identity of customers opening new accounts or conducting high-risk transactions;

- conduct thorough background checks and verification processes to ensure the legitimacy of customers and detect any suspicious activity;

- regularly update customer information and monitor account activity for any deviations from typical behavior patterns, flagging potential red flags for further investigation.

Two-factor authentication

The anti-fraud scenario requires financial institutions to:

- enforce two-factor authentication (2FA) or multi-factor authentication for all online and mobile banking transactions, adding an extra layer of security beyond traditional passwords;

- utilize multiple authentication methods such as SMS codes, biometric verification, or hardware tokens to ensure secure access to accounts;

- educate customers on the importance of enabling and using 2FA for all their banking activities, emphasizing the role it plays in protecting against unauthorized access and fraudulent transactions.

Device intelligence

Detecting suspicious transactions is essential to identify bank drops. Between behavioral analysis using algorithms to analyze patterns, deviations alerts, and risk scores, a transaction monitoring system can be a useful ally against bank drops.

They help to:

- leverage device intelligence solutions to analyze and track the devices used to access bank accounts, identifying any anomalies or suspicious behavior;

- utilize device fingerprinting technology to create unique identifiers for each device, enabling banks to detect and block fraudulent attempts to access accounts from unfamiliar or compromised devices;

- integrate device intelligence data with other fraud detection systems to enhance risk scoring and decision-making processes, allowing banks to proactively identify and mitigate potential threats before they escalate.

Conclusion

Preventing bank drop fraud is paramount for banks and lenders to safeguard their customers’ financial well-being and maintain trust in the financial system. By combining onboarding checks, authentication and device-level signals, they can detect more drop accounts before money passes through them and protect their business against financial losses.

Prioritizing fraud prevention not only preserves the integrity of the banking industry but also fosters a safer environment for customers to conduct their financial transactions with confidence.

Note from the editor: this article was updated with the latest insights in October 2026.

See how device intelligence fits your fraud controls

JuicyScore collects 65,000+ parameters from every device and uses 250+ parameters for device scoring. The resulting signals can be used as inputs for your existing fraud and credit-risk models, alongside KYC and bureau data rather than in place of them. Book a demo to see how they can support your onboarding, login and loan origination checks.

Get fraud and risk insights in your inbox

Subscribe to the JuicyScore newsletter for analysis of fraud patterns, device intelligence and risk practice in digital lending and banking.

FAQs

How do cybercriminals execute bank drop operations?

Fraudsters execute bank drop operations by exploiting vulnerabilities in online banking systems and onboarding processes. They use different tactics such as phishing, malware, identity theft and recruiting money mules to gain access to bank accounts and facilitate the transfer of illicit funds.

What is the difference between a bank drop and a money mule?

A bank drop is the account; a money mule is the person whose account is used, or who moves funds on a fraudster’s behalf. The terms overlap in practice. A drop account may be held by a mule, by a victim of account takeover, or by a synthetic identity that belongs to no real person.

Are bank drops always illegal?

The account itself is an ordinary bank account. Using it to receive and move proceeds of fraud is generally treated as part of money laundering in many jurisdictions. The account holder’s legal position can depend on what they knew, varies by country, and is a question for legal counsel.

What is the role of law enforcement in combating bank drops?

Its main mission is to investigate and prosecute individuals and fraudsters’ networks involved in orchestrating bank drop schemes. Additionally, law enforcement uses various techniques such as surveillance, forensic analysis, and collaboration with financial institutions to detect and prevent illicit operations.

Can individuals protect themselves from becoming victims of bank drops?

To protect themselves from bank drop fraud, individuals must stay vigilant: safeguarding personal and financial information, avoiding unsolicited requests for sensitive data, regularly monitoring their bank accounts for unauthorized transactions, and never letting anyone else use their account or receive money through it, whatever the offer.