Every campus has sharp boys — and sharp girls. The ones who know phones inside out, who can flip a side hustle online, who understand crypto before their lecturers do, who can make money move. Being sharp is not the problem. Being used as a pipe for other people's money is.

In the Operation Ghostbusters allegation, the Justice Department says refunds were diverted to bank accounts controlled by foreign actors and facilitated by US-based money mules, including Kenyan nationals. A money mule is not a mastermind. A money mule is the person whose account receives money, holds it briefly, forwards it, converts it to crypto, or cashes it out — often for a small cut, often believing it is just a "job", a "forex deal" or a favour for a friend abroad.

That small cut is the trap.

How recruitment usually sounds

It rarely starts with "help me commit fraud". It starts with something that sounds normal to a young person hustling online:

  • "I need a US account to receive my payment, I will pay you a commission."
  • "Just receive this crypto and send it to this wallet, keep 10 percent."
  • "My account is blocked, use yours for a few days."
  • "I will send you money for a business, just forward it to these people."
  • "Do this coursework / application for me, I will pay you per task."

Each step feels small. Together, they can add up to handling proceeds of fraud, identity theft or money laundering — and investigators do not need to prove you designed the scheme to charge you for your part in moving the money.

Kenyan reporting on the wider fraud ecosystem also points to skills and networks built locally — SIM swapping, mobile-money fraud proceeds, and laundering networks — translating into transnational schemes. That history is why a young Kenyan with real tech skills needs to be extra careful about who rents those skills.

Five signs you are being recruited as a mule

  1. Someone else's money, your account. If the money is not yours, not from a job you did, and not from a business you own, ask why it needs your name on it.
  2. Speed and secrecy. "Do it now, don't tell anyone, delete the chats." Legitimate work does not need secrecy like that.
  3. A cut that makes no sense. A 10 or 20 percent commission just for forwarding money is not a normal payment-processing fee. It is a risk premium — because the sender knows it is risky.
  4. Crypto conversion in the middle. Receiving bank money, converting to crypto, sending to another wallet, with no clear goods or services in between, is a classic laundering pattern.
  5. Coursework or applications for a stranger. Doing assignments, exams or applications for a "student" you have never met, especially for a foreign college, can be part of a ghost-student chain — even if you are only paid per task.

What "sharp" actually looks like now

Sharp, in 2026, is not finding the cleverest shortcut. Sharp is:

  • Building something in your own name, with your own clients, that you can show a bank, an employer or an embassy without flinching.
  • Learning crypto, AI and remote work properly — and knowing the compliance side too: KYC, taxes, contracts, records.
  • Saying no to a quick cut when you cannot explain, in one sentence, where the money came from and where it is going.
  • Keeping records: contracts, invoices, chat histories with legitimate clients, proof of work done.

That is slower than a mule job. It is also the only version that survives a background check, a visa interview or a police inquiry.

If you have already forwarded money and you are worried

Do not delete everything and hope it goes away — that can make things worse. Stop forwarding, keep your records, do not take new transfers, and get independent advice — from a trusted adult, a legal aid clinic, a university counsellor or a lawyer — before you talk to investigators or to the person who recruited you. This article is not legal advice, and it does not accuse any reader of a crime. It is a warning, based on how money-mule cases are actually charged.

What we could not verify

No specific Kenyan youth, campus group or online community is named here as a money-mule network, because none is named as such in the primary sources used for this draft. The recruitment patterns described are general patterns reported in fraud cases, not a claim about any named Kenyan individual.

Sources