

Foreign nationals recruited as money mules in Turkey may face fraud, money laundering, bank-account freezes and criminal investigations. Learn how knowledge, intent, digital evidence, money transfers and victimization affect the defense.
Foreign nationals in Turkey can become involved in criminal investigations after allowing another person to use their bank account, IBAN, debit card, mobile banking account, cryptocurrency account or payment account to receive and transfer money. The person may have been promised a commission, offered a supposed job, contacted through social media or told that their account was needed temporarily because another person’s banking account was unavailable. When the transferred money is later connected with fraud or another crime, the account holder can become a suspect even if they claim they did not know the money was criminal proceeds. For a foreign suspect, the defense should focus immediately on knowledge, intent, recruitment communications, control of the account, transaction history, the identity of the actual perpetrators and the complete digital evidence surrounding the transfers.
A “money mule” is commonly understood as a person whose bank, payment or cryptocurrency account is used to receive, move, withdraw or convert money for another person.
The expression itself does not determine criminal liability. Turkish criminal liability must be evaluated according to the specific offence alleged and the individual’s actual conduct, knowledge and intent.
Criminal networks may approach foreigners through job advertisements, messaging applications, social media, acquaintances or informal employment arrangements. A person may be offered money simply for receiving funds and transferring them elsewhere.
Some individuals understand that the arrangement is suspicious. Others may genuinely believe they are performing legitimate payment-processing, currency-exchange or employment-related work.
That factual distinction can become central to the criminal case.
Not automatically in every factual situation.
However, giving another person access to a bank account and allowing unexplained third-party funds to pass through it can create serious criminal exposure when those funds are linked to fraud or another offence.
The prosecution will examine what the account holder knew and intended.
A central defense question is whether the foreign account holder knew that the transferred money was connected with criminal activity.
Relevant evidence can include messages with the recruiter, promised commissions, transaction descriptions, frequency of transfers, amounts received, withdrawal behavior and instructions given to the account holder.
The recruitment process should be reconstructed from the beginning.
The defense should identify:
who first contacted the foreigner; what job or transaction was proposed; what explanation was given for using the account; whether payment was promised; whether identity documents were requested; who supplied transfer instructions; and whether the foreigner was pressured or deceived.
Messages can be among the most important evidence in a money-mule investigation.
Do not delete conversations with recruiters simply because they appear incriminating or embarrassing. The complete conversation may show that the suspect was given a false explanation about the source and purpose of the funds.
A few selected screenshots can remove important context. Preserve the complete conversation, dates, usernames, telephone numbers, attachments and voice messages where available.
Digital evidence should be evaluated as a whole.
If the arrangement began through Instagram, Telegram, Facebook, LinkedIn or another platform, preserve the account profile, advertisement, messages and any job description.
A fake employment advertisement may support the argument that the foreigner was also deceived.
Some money-mule schemes are presented as legitimate work involving payment processing, financial assistance, cryptocurrency, international transfers or online sales.
Preserve employment offers, contracts, emails and instructions that explain what the suspect believed they were doing.
Receiving a percentage or fixed payment can become important evidence, but it does not by itself resolve the criminal case.
The amount, frequency and explanation for the payment should be examined together with the surrounding circumstances.
If a person received substantial money merely for allowing strangers to use their account, investigators may question whether the arrangement should have appeared suspicious.
The defense should address these facts directly rather than ignoring them.
Determine who actually possessed the debit card, mobile phone, banking password and authentication codes.
In some cases, the account holder may have handed over complete control. In others, the account holder personally performed each transfer after receiving instructions.
The distinction can be important.
Investigators may examine login records, device information and authentication history.
If another person accessed the account, technical evidence may help establish who actually controlled transactions.
Where banking transactions depend on SMS authentication, identify who possessed the registered SIM card at the relevant time.
SIM replacement, additional devices or unauthorized access should be investigated where relevant.
Banking access records may help determine whether transactions were initiated from the foreigner’s own device or from another device.
Technical evidence should be preserved and requested promptly where it may support the defense.
If cash was withdrawn from an ATM or bank branch, camera recordings may help identify the person who physically received the money.
Because recordings may not be preserved indefinitely, relevant evidence should be requested without unnecessary delay.
Determine where and when withdrawals occurred and compare them with the suspect’s location.
If another person possessed the card, ATM records and available footage can become particularly important.
The investigation should not stop merely because fraudulent money first entered the foreigner’s account.
Determine where the money went afterward. Identify recipient accounts, cryptocurrency wallets, cash withdrawals and subsequent transfers.
The complete flow may help identify the persons who ultimately controlled the proceeds.
If money from several fraud victims entered the same account, investigators may suspect systematic participation.
The defense should analyze each transaction individually rather than treating the account history as a single undifferentiated allegation.
A foreigner who received one unexpected transfer may present a very different factual situation from someone who repeatedly received money from unrelated persons and immediately forwarded it.
Frequency and pattern matter.
Money-mule investigations frequently originate from fraud complaints. A victim may state that money was transferred to the foreign suspect’s IBAN after an online investment, marketplace, accommodation, employment or impersonation scam.
The fact that the money entered the account can be important evidence, but the suspect’s role in the underlying deception still requires examination.
Determine whether the foreign account holder ever contacted the complainant.
If the victim communicated exclusively with another person, preserve evidence identifying that person.
This can be particularly important when determining the foreigner’s actual role.
Call and communication records may show relationships among the foreign suspect, recruiter and other participants.
The defense should identify whether relevant records can help establish who directed the transactions.
Some schemes instruct the account holder to use incoming money to purchase cryptocurrency and transfer it to another wallet.
Preserve exchange-account records, wallet addresses, transaction hashes and communications containing transfer instructions.
A criminal or financial investigation can result in restrictions affecting the suspect’s bank accounts or funds.
The legal basis, authority issuing the measure, scope of the restriction and connection between the frozen assets and alleged offence should be examined promptly.
If an account contains salary, savings or other legitimate funds in addition to disputed transfers, preserve documents proving the source of those assets.
The defense should distinguish legitimate property from funds allegedly connected with the investigation.
Police may seize cash found during an investigation where it is considered relevant evidence or potentially connected with criminal activity.
Preserve evidence showing the legitimate source of cash where applicable.
A person recruited through deception may simultaneously be investigated as a suspect and have been exploited by the actual perpetrators.
Evidence of deception should therefore be presented clearly rather than merely stating, “I did not know.”
Potentially important evidence includes fake employment advertisements, recruiter messages, contracts, emails, promised salary information, instructions, identity information supplied by recruiters and evidence showing that the foreigner attempted to verify the arrangement.
The timeline matters.
Determine when the suspect first became aware that something was wrong and what they did afterward. Continuing transactions after discovering fraud can create a different evidentiary picture from immediately stopping activity and contacting the bank or authorities.
If the foreigner contacted the bank after noticing suspicious transfers, preserve call records, emails, branch applications and complaint numbers.
Contemporaneous conduct can be important when evaluating intent.
A suspect should not independently send disputed funds to unknown persons merely because someone demands repayment.
The legal status of the money and appropriate procedure should be evaluated before taking action.
Destroying or altering potential digital evidence can make the defense substantially more difficult.
Preserve the device and relevant data.
Foreign suspects should understand the exact allegation before giving a detailed statement.
The statement should accurately explain recruitment, account access, transfers, communications and the suspect’s understanding of the arrangement.
A foreign suspect who cannot adequately understand Turkish should request interpretation necessary to understand the proceedings and communicate effectively.
A statement should not be signed if the suspect does not understand its contents.
If the translated statement differs from what the foreigner actually said, the problem should be raised before signing.
Names, amounts, dates, account numbers and explanations concerning intent should be checked particularly carefully.
Because money-mule cases can involve fraud, financial transactions, digital evidence and potentially multiple suspects, early legal assistance can be important.
A lawyer can examine the allegations and identify evidence that should be preserved or requested.
If phones, computers, bank cards or documents were seized, determine the legal basis and prepare an inventory of the items taken.
Digital examination procedures may become important later in the case.
The same device that contains suspicious banking instructions may also contain messages showing that the foreigner was deceived.
The defense should therefore analyze the complete digital context.
Preserve every available identifier: telephone numbers, usernames, account details, photographs, cryptocurrency wallets, email addresses and bank accounts.
These details can help investigators identify the person who actually organized the scheme.
Being a foreign national does not itself establish involvement in fraud or money laundering.
The case must be assessed according to the individual’s conduct and the evidence.
A criminal investigation involving a foreign national can potentially interact with immigration procedures depending on the circumstances and subsequent administrative decisions.
Criminal defense and immigration strategy should therefore be coordinated where necessary.
The lawyer should immediately determine the alleged offence, obtain available procedural information, review the detention basis and identify evidence concerning recruitment and account control.
Family members should preserve the suspect’s banking and digital records rather than attempting to alter accounts or devices.
The receipt of allegedly criminal funds is important evidence, but criminal responsibility should be evaluated according to the elements of the offence alleged and the person’s actual role, knowledge and intent.
The defense should therefore go beyond the bank statement and reconstruct the complete transaction.
Potentially. Bank transfers, telephone records, digital communications, cryptocurrency transactions, IP information and ATM evidence can help reconstruct the network.
Requests for preservation and collection of relevant evidence should be considered promptly.
A foreign suspect should preserve bank statements, transfer receipts, recruiter communications, social-media profiles, job advertisements, employment documents, telephone numbers, cryptocurrency records, ATM information, emails, contracts and evidence showing the source of legitimate funds.
The objective is to create a chronological record showing how the relationship began, what the foreigner was told, what transactions occurred and who ultimately controlled the money.
Not automatically in every case. Criminal liability depends on the alleged offence and the person’s conduct, knowledge and intent.
Preserve the advertisement, messages, contract and payment instructions showing what you were told and why you believed the work was legitimate.
Notify your lawyer and preserve bank records immediately. The circumstances of the transfer and subsequent use of the money should be investigated.
Digital devices can become evidence in criminal investigations subject to the applicable criminal procedure. The legal basis and examination process should be reviewed in the individual case.
Preserve evidence identifying that person. ATM records, available camera footage, messages and account-access records may become important.
Financial restrictions may be imposed during certain criminal investigations depending on the legal basis and circumstances. The specific decision should be examined promptly.
The cryptocurrency transaction should be documented completely, including exchange records, wallet addresses, transaction information and instructions received from other persons.
No. Those messages may be essential evidence showing how you were recruited and what you were told.
Translation problems should be raised immediately and documented. The accuracy of a previous statement can also become an issue during the subsequent criminal proceedings.
Preserve the complete digital and financial evidence, stop further suspicious transactions, determine exactly what offence is alleged and reconstruct the entire chain from recruitment to the final destination of the money.
Money-mule investigations can involve fraud allegations, bank-account freezes, digital evidence, cryptocurrency transactions, searches, seized phones, police statements and multiple suspects. Fırat Fesih Kaya Law Office assists foreign nationals facing criminal investigations in Turkey involving suspicious bank transfers and alleged participation in financial fraud. Lawyer Fırat Fesih Kaya provides legal assistance during police and prosecutor statements, detention proceedings, digital-evidence review, bank-account and asset restrictions, investigation of the actual recipients of funds and preparation of criminal defense strategies based on knowledge, intent and the complete transaction history.
Phone: +90 312 434 22 22
Mobile: +90 532 769 22 22
Email: info@firatfesihkaya.av.tr
Address: Mevlana Boulevard No:221, Yıldırım Tower, Office No:148, 06520 Balgat, Çankaya, Ankara, Turkey