> I would not be surprised if bank account numbers are compromised as well.
I don't that works too well for this kind of scam. What do you do with the money? ACH it to a totally traceable other account? This scam relies on a network of trust, that the mules will draw out the cash and take their cut (and only their cut) and walk the funds to another location for tender.
That’s what I don’t understand about this kind of scam. It seems like an awful lot of work. Juggling all of your fake internet significant others or employees and then building up enough trust to make the ask. I can’t imagine the payout is that substantial given how much effort would be required.
Think about the mule more like a drug mule. Someone who doesn’t have much to lose, is recruited by gangsters, work is ok as long as they do what they’re supposed to do, and they are beaten or killed if they go off script.