Cybercriminals Exploit French Fintech Accounts to Move Stolen Money Before Detection

Organized fraud networks are exploiting fast remote onboarding and business features of fintech platforms (Revolut, Wise, N26) to create and sell verified business 'mule' accounts—operated by an actor tracked as “Bastardaseller” within the ASGARD network—using a three-phase scheme: phishing to steal PII, abusing KYC with SIM/modem farms and social engineering, then transferring control for rapid cross-border money laundering; detection requires lifecycle linkage and network-level signals.