Lorraine Williamson
The Guardia Civil has shut down a TikTok account used to recruit people into a banking fraud network operating in Spain. Two people have been arrested and a third is under investigation in Granada and Almería, with officers identifying at least 162 victims and recovering €38,000 linked to the criminal activity.
The investigation, known as Operation Black-Account, has exposed how offers of quick money on social media can draw people into financial crime. Those recruited were allegedly promised up to €100 to open bank accounts in their own names before handing over access to individuals who used them to move money obtained through online scams.
According to the Guardia Civil’s official statement published on 14 November, one of those arrested administered the TikTok profile used to attract account holders. Investigators say the network relied on ordinary-looking videos and promises of easy earnings to recruit people who might not have understood the consequences of allowing strangers to control their bank accounts.
How the TikTok banking scam worked
The recruitment process began with videos offering payment to anyone willing to open a new account. Interested viewers were directed to a telephone number published in the comments, where they could arrange to participate in the scheme.
After opening an account, recruits completed the bank’s normal identity checks, including facial verification and providing their identity documents. They were then instructed to share security codes received by SMS, allowing other people to take effective control of accounts that remained registered in the recruits’ names.
These accounts could subsequently receive money stolen through online fraud before transferring it elsewhere. Investigators say funds were moved between different banking services, financial platforms and cryptocurrency services, making it more difficult to establish where the money originated and who ultimately controlled it.
One person linked to 26 bank accounts
The scale of the operation became apparent as investigators examined the financial records. One account holder under investigation had accumulated 26 bank accounts across eight financial institutions, while approximately €80,000 had passed through a single account with a digital banking provider.
The investigation began around a year ago after a complaint was filed in Granada. Officers from the Guardia Civil’s technological investigation team, EDITE, subsequently examined financial transactions and digital evidence to trace the movement of money and identify the recruitment network.
So far, the operation has resulted in two arrests, one additional person being investigated and the recovery of €38,000. At least 162 victims have been identified, although the authorities have not established in their announcement whether every affected person was a fraud victim, an account holder or someone connected to another part of the operation.
What is a money mule and why is it dangerous?
The method uncovered in Andalucia is commonly known as money muling. It involves using a person’s bank account to receive or transfer money on behalf of someone else, often to conceal the proceeds of fraud and make transactions harder for investigators to follow.
Not everyone recruited into such schemes necessarily understands how their account will be used. However, the Guardia Civil warns that allowing others to use an account to receive or transfer criminal funds can expose its registered holder to criminal liability.
The warning is particularly relevant to people who encounter offers of quick earnings through social media, messaging applications or supposed online employment opportunities. A legitimate job should not require someone to surrender control of their personal bank account or share confidential banking security codes with a stranger.
What to do if you have shared your banking details
The Guardia Civil advises people never to open bank accounts on behalf of strangers or allow third parties to operate accounts registered in their names. Bank passwords, verification codes and other security information should also remain private, regardless of how convincing an offer may appear.
Anyone who has already handed over account access should contact their bank immediately, explain what has happened and request appropriate security measures. They should also report the circumstances to the Guardia Civil, either by contacting the authorities directly or calling 062.
The investigation remains open, and officers have not ruled out further arrests. For residents in Spain, the case highlights how an apparently harmless offer of €100 on TikTok can create serious financial and legal consequences long after the payment has been received.