UK Police Hire Law Firms To Tackle Cyber Criminals

Private law firms will be hired by police to pursue criminal suspects for profit, under a radical new scheme to target cyber criminals and fraudsters.

In a pilot project by the City of London Police, the lead force on fraud in England and Wales, officers will pass details of suspects and cases to law firms, which will use civil courts to seize the money.

The force says the scheme is a way of more effectively tackling fraud – which is now the biggest type of crime, estimated to cost £193bn a year. It is overwhelming police and the criminal justice system.

The experiment, which is backed by the government and being closely watched by other law enforcement agencies, is expected to lead to cases reaching civil courts this year or early next year.

Officers will use the private law firms to attempt to seize suspects’ assets. If unsuccessful, police could decide to leave it at that or pursue the case themselves through the criminal courts.

Commander Chris Greany, head of economic crime at City of London police, said: “It is a huge shift … Civil recovery allows us to get hold of a criminal’s money sooner, and repay back victims sooner.”

One prominent criminal law firm was sceptical about the plans, expressing concern that a profit motive could damage the fairness of the process.

Currently, police pursue people suspected of making millions through financial crimes by prosecuting them in the criminal courts, and need to prove their case beyond reasonable doubt. After conviction, a lengthy process starts to seize the proceeds of crime, which can take years. Police believe some suspects use the delay to hide their assets.

Under the shakeup being piloted, a law firm will pursue the suspect in the civil courts before any conviction and possibly even without a criminal charge. The burden of proof is lower in civil courts, and they will only have to show that the suspect stole the money on the balance of probabilities.

Katie Wheatley, joint head of criminal law at Bindmans, a London law firm, expressed unease over the proposals, which she said gave police “what they would regard as an easy deterrent, without having the inconvenience of proving an offence to a criminal standard”.

Greany said the law firm and others in the private sector would bear the risk, in return for a share of the money taken off the criminal suspect.

The lead law firm taking part in the pilot is Mischon de Reya, best known for representing Princess Diana in her divorce from Prince Charles.

Greany said: “Who benefits from this? The victim will benefit, because they will get their money back. We’ll benefit because the criminal will be skint and they will be brought back down to having nothing again, and have to get about their normal lives, and they won’t have status in the community.”

What evidence would they be using to strip somebody of their assets? Money from fraud is being hidden around the world and getting a conviction and then seizing the assets of criminals can be very complex and lengthy. Greany said: “You can destabilise a criminal gang much faster by taking their asset off them [rather] than chasing them around the world for five years.”

But Wheatley asked of the police: “What evidence would they be using to strip somebody of their assets? If a criminal prosecution has failed, well OK, the burden of proof is slightly different, but you still have to wonder whether evidence that has been rejected by a criminal court ought to be the first port of call for a civil forfeiture or a civil confiscation order.”

Wheatley said the plan risked creating a conflict between private firms’ profit motive and the fairness of the process. “We’ve seen privatisation in this context in other ways, for example prison privatisation,” she said. “We all know how badly that’s gone wrong, particularly for young offenders. I appreciate they are not talking about convictions or detentions, but having possibly life savings, large assets stripped from you is a life-changing event. Whereas for the companies that the role was subcontracted to, it would just be a job.”

Robert Wynn Jones, a specialist in fraud at Mishcon de Reya, said the “novel and pragmatic” scheme would boost the deterrent to criminals. Wynn Jones said victims might be asked to pay legal costs, or specialist insurers could fund the fees in return for a 20-30% share of the money taken off criminals.

He said it would have to be financially worthwhile, meaning the scheme would only work for cases where losses ran into the hundreds of thousands. The use of private investigators would push up the cost.

There are two main downsides. If the suspect appeals and wins, or is cleared in a criminal case, then the money seized has to be repaid with interest added.

The second controversial aspect is the transfer of what was essentially punishment carried out through the state system, with established methods of accountability, to private firms, where it would be done for profit. However, Greany said: “It is a public-private partnership.”

Wynn Jones accepted that the new scheme would “throw up some ethical, political and philosophical questions”, but added: “There is no way the police can investigate and pursue this level of fraud – they don’t have the resources.”

The Office for National Statistics said in July that there had been more than 5.8m incidents of cybercrime in the past year, enough to virtually double the headline crime rate in England and Wales.

A working group to oversee the experiment has been set up by the City of London police, officers from the National Crime Agency, and Metropolitan police, and law and private investigation firms.

Greany said fraudsters were renting luxury items, such as cars, so they had no visible assets to be taken off them if they were caught.

The Labour MP Keith Vaz, chair of the home affairs select committee, said a key problem in recovering the proceeds of crime was the “way recovery is incentivised”. He said: “The Asset Recovery Incentivisation Scheme does not appear to us, or the NAO [National Audit Office], to be fit for purpose. It does not sufficiently reward those who have to lay out the resources to recover ill-gotten gains. We suggested in the report that recovered assets be distributed differently to better incentivise recovery, and if the numbers of these pilots work out this could well be an effective way to do increase the proportion of proceeds of crime we recover.

“We also recommend that a higher percentage should be returned to the communities affected by the crimes in question: if using commercial law firms enables us to net recover more, that is a win-win situation.”

Guardian:

« Exploring Alternatives: Terrorism Converging With Cyber Crime
Shadowbrokers Steal NSA Hacking Tools »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Hyve

Hyve

Hyve provide a wide range of managed web hosting services including private, hybrid and public VMware cloud hosting.

CSA Events

CSA Events

Cloud Security Alliance conducts a series of conferences around the world. This listing provides a link to details of upcoming events.

CSIRT Panama

CSIRT Panama

CSIRT Panama is the national Computer Incident Response Team for Panama.

SecureDevice

SecureDevice

SecureDevice is a Danish IT Security company.

Paygilant

Paygilant

Paygilant’s disruptive technology is designed to protect mobile payment  financial transactions against fraudulent attacks, whether executed by NFC, QR code, P2P or in-app.

Horangi

Horangi

Horangi provides security products and services that enable the rapid delivery of Incident Response and threat detection for our customers who lack the scale, expertise, or time to do it themselves.

GovCERT Austria

GovCERT Austria

GovCERT Austria is the Austrian Government Computer Emergency Response Team. Its constituency consists of Austria's public administration.

United Biometrics

United Biometrics

United Biometrics is an anonymous and real-time authentication platform designed to stop the fraud for mobile payments, e-Commerce and applications.

Empiric

Empiric

Empiric is a multi-award winning technology and transformation recruitment agency specialising in data, digital, cloud and security.

Ingenio Global

Ingenio Global

Ingenio is a specialist recruitment business for SaaS companies. Our purpose is to source exceptional talent in areas including cyber security for leading SaaS companies in the UK and Ireland.

North American International Cyber Summit

North American International Cyber Summit

The North American International Cyber Summit brings together experts from around the globe to provide timely content and address a variety of cybersecurity issues impacting the world.

Experis

Experis

Experis provide IT resourcing, project solutions and managed services. We enable organizations to cultivate individuals and teams prepared for the digital age.

Green Radar

Green Radar

Green Radar is a next generation cybersecurity company which combines technologies and services together to deliver Threat Detection for Emails and Deep Threat Analytics and Response.

Devolutions

Devolutions

Devolutions make best-in-class Privileged Access Management, Password Management, and Remote Connection Management solutions available to ALL organizations — including SMBs.

SoftwareONE

SoftwareONE

SoftwareONE is a leading global provider of end-to-end software and cloud technology solutions.

Muscope Cybersecurity

Muscope Cybersecurity

Muscope CYSR platform performs a risk assessment and offers a comprehensive overview of the potential cyber attack risks.

Fusion5

Fusion5

Fusion5 is a leading ANZ Business Services and IT Solutions provider. Our customers trust us to make their potential reality by providing advisory, IT project deployment, and managed services.

CyTwist

CyTwist

CyTwist is an early warning attack detection platform that complement your existing security suite and provides your security teams with unique detection capabilities of stealth targeted attacks.