A new report from Cloud SEK has shed light on a disturbing trend in the world of cybercrime: the use of ordinary individuals as unknowing participants in money laundering schemes. This exploitation is made possible through the use of user-friendly apps, one of which is known as “XHelper,” a platform designed to facilitate the transfer of stolen funds to shadowy third-parties with ease and discretion.
XHelper, which operates on the Android platform, has become a popular tool among scammers in India who are involved in various illegal activities such as pig butchering, investment scams, loan scams, ecommerce scams, and illegal gambling operations. The app boasts a clean and easy-to-use interface, attracting around 37,000 active users with approximately 16,000 verified bank accounts. It is reported that XHelper moves a staggering 160 million rupees per day, which amounts to just under US $2 million.
According to CloudSEK researcher Sparsh Kulshehtra, similar schemes utilizing unsuspecting individuals have been identified in other countries as well. This highlights the urgent need for a united effort to combat money laundering through the exploitation of innocent people.
The operation of XHelper is carried out through a network of fake “money transfer” businesses that recruit new members via agents posing as representatives of successful businesses in need of assistance in managing their daily transactions. These agents earn bonuses for each new recruit, contributing to the growth and resilience of the money laundering network.
Users of XHelper, akin to participants in a gig economy app, register their payment information and undertake jobs that involve receiving money from one party and promptly transferring it to another. Individuals involved in these transactions receive a small percentage of the funds transferred as payment, with higher-level users handling larger sums and earning more substantial rewards.
Despite the significant volumes of money being moved through XHelper, the question arises as to why these money mules are not being caught by authorities. The app provides tutorials to users on how to carry out transactions effectively and discreetly, including registering corporate bank accounts to avoid suspicion from financial institutions. Additionally, the app instructs users to utilize different payment systems for incoming and outgoing transfers, potentially complicating the detection of illicit activities.
To address the issue of money laundering through unsuspecting individuals, Kulshehtra emphasizes the importance of collaboration between banks, governments, regulators, and targeted organizations. He suggests that educating employees and customers about the threats posed by these scams through training and awareness campaigns can help in recognizing and avoiding such schemes. By strengthening internal defenses and building user awareness, a robust defense can be established against cyber scams.
In conclusion, the use of user-friendly apps like XHelper in money laundering operations underscores the need for increased vigilance and coordinated efforts to combat this growing threat. With the collective action of various stakeholders, steps can be taken to prevent the exploitation of innocent individuals for criminal activities.