A while ago I was contacted by an old friend who wished to borrow my bank account to do online transactions, which has online banking enabled, while theirs is not. They want to confirm payments before sending the digital goods, so the plan is: whenever a payment is made, I told them and transfer the money, then they release the goods. I agreed and there were several payments, which I promptly transferred to them as soon as I received them. All of this happens in just one day, and no payment made and no further contact, until a few weeks then, my account got frozen.
It turned out that they seem were advertising selling tickets in Instagram, in which they provided my account number and told buyers to send the money there. The tickets were never sent, and the day after the money was sent the Instagram account was deleted. This was the day after I was contacted, so it matched out.
This 'friend' denied the connection with the seller account. The complication was that I've never met in-person with them.
I can prove the chat requesting the borrowing, via Messenger and Whatsapp.
What should I do? Can I be prosecuted if the victim of the fraud reported this to the police? What are my options?
This happened in Indonesia, but I'm interested if this happens in other countries.