A mule account may have a complete customer file, moderate amounts and recent activity. The risk becomes visible when the account is viewed as part of a network.
Look for shared elements
Several accounts may use the same device, converge on one beneficiary or withdraw funds through the same agent over a short period.
No single relationship proves fraud. Their combination does provide a precise pattern for review.
Move from account to subgraph
An investigation becomes clearer when only entities related to the case are shown. Analysts can follow the pivot account, its direct neighbours and the paths carrying the signal.
This view reduces manual searches across separate screens and makes it easier to retain relevant facts in the evidence register.
Keep human decisions legible
The graph guides the review. The decision also depends on institutional policy, data quality and further checks.
The analyst note should connect the observed pattern, checks performed and selected action.