Which of your flows look like a cash-out

Three checks on card acceptance, refunds and banking concentration, ordered by urgency.

DAILY SIGNAL  ·  PART 2  ·  FOUNDER REACTION

If fraud proceeds exit through card spend at local businesses, the SMB question is which of your own flows look like a cash-out, and what your bank sees when they do.

The signal, briefly

This morning’s SIG-A read the FCA’s money mule review: 238,396 suspected mules offboarded in 2025, cash-out concentrated in the second to fifth account, and card payments the most common exit, often as larger payments to local businesses. The control perimeter is widening from the mule account to the merchant flow. SMBs sit inside it without choosing to.

What this changes operationally

Two categories move: payments and customers. On payments, card acceptance and business accounts at challengers and e-money providers now sit under heavier monitoring. Challenger banks held half of offboarded business accounts in 2025, and EMIs closed most suspected mule accounts within six months of opening. The practical risk is an unexplained account freeze or a sudden acquirer reserve. On customers, high-value card payments from first-time buyers, split transactions and requests to refund to a different card are the patterns worth a second look.

Cash, credit, suppliers, hiring and contracts are unaffected. There is no new rule on SMBs, no change to reporting obligations, and nothing that alters your APP reimbursement position as a sender.

Founder actions, ordered by urgency

1. This week — ops lead, PSP dashboard (Stripe, Square, SumUp, Dojo). Pull the last 90 days of card payments above your normal ticket size from first-time customers. Decision criterion: any cluster of high-value first purchases, or payments split just under a round number, gets a named review before it becomes a pattern your acquirer finds first.
2. By Friday — finance lead, refund policy. Confirm refunds go back only to the original card. If your PSP settings allow refunds to a different card, a bank transfer or store credit on request, switch that off or route it to founder sign-off. Refunding to a different instrument is a well-worn laundering exit.
3. This month — founder, banking. If your primary business account sits with a challenger or e-money provider, open a secondary operating account elsewhere and hold at least one payroll cycle in it. Decision criterion: could you pay staff and your top three suppliers through a ten-working-day freeze on the primary account?

What not to do

Don’t bolt blanket friction onto every new customer’s checkout. It costs conversion, and the FCA finding is about patterns, not first purchases. And don’t move the whole business account to a high-street bank on the strength of one review: retail banks and building societies still accounted for 56.1% of suspected mules offboarded in 2025. The risk is concentration, not provider type.

Tomorrow’s Friday regulatory anchor picks up the policy trail, including what the PSR’s December APP consultation is set to cover.