UK Police Hire Law Firms To Tackle Cyber Criminals

Private law firms will be hired by police to pursue criminal suspects for profit, under a radical new scheme to target cyber criminals and fraudsters.

In a pilot project by the City of London Police, the lead force on fraud in England and Wales, officers will pass details of suspects and cases to law firms, which will use civil courts to seize the money.

The force says the scheme is a way of more effectively tackling fraud – which is now the biggest type of crime, estimated to cost £193bn a year. It is overwhelming police and the criminal justice system.

The experiment, which is backed by the government and being closely watched by other law enforcement agencies, is expected to lead to cases reaching civil courts this year or early next year.

Officers will use the private law firms to attempt to seize suspects’ assets. If unsuccessful, police could decide to leave it at that or pursue the case themselves through the criminal courts.

Commander Chris Greany, head of economic crime at City of London police, said: “It is a huge shift … Civil recovery allows us to get hold of a criminal’s money sooner, and repay back victims sooner.”

One prominent criminal law firm was sceptical about the plans, expressing concern that a profit motive could damage the fairness of the process.

Currently, police pursue people suspected of making millions through financial crimes by prosecuting them in the criminal courts, and need to prove their case beyond reasonable doubt. After conviction, a lengthy process starts to seize the proceeds of crime, which can take years. Police believe some suspects use the delay to hide their assets.

Under the shakeup being piloted, a law firm will pursue the suspect in the civil courts before any conviction and possibly even without a criminal charge. The burden of proof is lower in civil courts, and they will only have to show that the suspect stole the money on the balance of probabilities.

Katie Wheatley, joint head of criminal law at Bindmans, a London law firm, expressed unease over the proposals, which she said gave police “what they would regard as an easy deterrent, without having the inconvenience of proving an offence to a criminal standard”.

Greany said the law firm and others in the private sector would bear the risk, in return for a share of the money taken off the criminal suspect.

The lead law firm taking part in the pilot is Mischon de Reya, best known for representing Princess Diana in her divorce from Prince Charles.

Greany said: “Who benefits from this? The victim will benefit, because they will get their money back. We’ll benefit because the criminal will be skint and they will be brought back down to having nothing again, and have to get about their normal lives, and they won’t have status in the community.”

What evidence would they be using to strip somebody of their assets? Money from fraud is being hidden around the world and getting a conviction and then seizing the assets of criminals can be very complex and lengthy. Greany said: “You can destabilise a criminal gang much faster by taking their asset off them [rather] than chasing them around the world for five years.”

But Wheatley asked of the police: “What evidence would they be using to strip somebody of their assets? If a criminal prosecution has failed, well OK, the burden of proof is slightly different, but you still have to wonder whether evidence that has been rejected by a criminal court ought to be the first port of call for a civil forfeiture or a civil confiscation order.”

Wheatley said the plan risked creating a conflict between private firms’ profit motive and the fairness of the process. “We’ve seen privatisation in this context in other ways, for example prison privatisation,” she said. “We all know how badly that’s gone wrong, particularly for young offenders. I appreciate they are not talking about convictions or detentions, but having possibly life savings, large assets stripped from you is a life-changing event. Whereas for the companies that the role was subcontracted to, it would just be a job.”

Robert Wynn Jones, a specialist in fraud at Mishcon de Reya, said the “novel and pragmatic” scheme would boost the deterrent to criminals. Wynn Jones said victims might be asked to pay legal costs, or specialist insurers could fund the fees in return for a 20-30% share of the money taken off criminals.

He said it would have to be financially worthwhile, meaning the scheme would only work for cases where losses ran into the hundreds of thousands. The use of private investigators would push up the cost.

There are two main downsides. If the suspect appeals and wins, or is cleared in a criminal case, then the money seized has to be repaid with interest added.

The second controversial aspect is the transfer of what was essentially punishment carried out through the state system, with established methods of accountability, to private firms, where it would be done for profit. However, Greany said: “It is a public-private partnership.”

Wynn Jones accepted that the new scheme would “throw up some ethical, political and philosophical questions”, but added: “There is no way the police can investigate and pursue this level of fraud – they don’t have the resources.”

The Office for National Statistics said in July that there had been more than 5.8m incidents of cybercrime in the past year, enough to virtually double the headline crime rate in England and Wales.

A working group to oversee the experiment has been set up by the City of London police, officers from the National Crime Agency, and Metropolitan police, and law and private investigation firms.

Greany said fraudsters were renting luxury items, such as cars, so they had no visible assets to be taken off them if they were caught.

The Labour MP Keith Vaz, chair of the home affairs select committee, said a key problem in recovering the proceeds of crime was the “way recovery is incentivised”. He said: “The Asset Recovery Incentivisation Scheme does not appear to us, or the NAO [National Audit Office], to be fit for purpose. It does not sufficiently reward those who have to lay out the resources to recover ill-gotten gains. We suggested in the report that recovered assets be distributed differently to better incentivise recovery, and if the numbers of these pilots work out this could well be an effective way to do increase the proportion of proceeds of crime we recover.

“We also recommend that a higher percentage should be returned to the communities affected by the crimes in question: if using commercial law firms enables us to net recover more, that is a win-win situation.”

Guardian:

« Exploring Alternatives: Terrorism Converging With Cyber Crime
Shadowbrokers Steal NSA Hacking Tools »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Covenco

Covenco

Covenco is a data management and IT infrastructure specialist. Working with customers to transform their IT environments, with data protection and security at the forefront of everything we do.

Sucuri

Sucuri

Sucuri have offered holistic website security solutions since 2008 including malware removal, malware monitoring and website protection services.

VNCERT

VNCERT

VNCERT is the national Computer Emergency Response Team for Vietnam.

CommuniTake

CommuniTake

CommuniTake builds security, enablement, and management solutions to provide people and organizations with better, and more secure mobile device use.

Database Cyber Security Guard

Database Cyber Security Guard

Database Cyber Security Guard (aka Don't Be Breached) informs Security Professionals and DBAs of Zero Day, Ransomware and Data Breach attacks within milli-seconds

Jumio

Jumio

Jumio’s end-to-end identity verification and authentication solutions fight fraud, maintain compliance and onboard good customers faster.

Quantea

Quantea

Our multi-patented solutions - QP Series Network Analytics Accelerator appliance and PureInsight Analytics Software Suite allows you to capture, analyze, store, replay, network traffic data.

Quantum Security

Quantum Security

Quantum's game-changing approach to cybersecurity brings you performance and peace-of-mind, with a raft of additional benefits: it's non-proprietary, comprehensive, scalable, and affordable.

Censys

Censys

Our customers rely on Censys data to get the global visibility they need of their attack surfaces in order to proactively prevent nation-state attacks and emerging threats.

Sevco Security

Sevco Security

Sevco Delivers Real-time Asset Intelligence to Identify and Close Unknown Security Gaps.

Valency Networks

Valency Networks

Valency Networks provide cutting edge results in the areas of Vulnerability Assessment and Penetration Testing services for webapps, cloud apps, mobile apps and IT networks.

Quantropi

Quantropi

Quantropi is bound to be the standard for quantum-secure data communications – forever unbreakable, no matter what.

Com Olho

Com Olho

Com Olho provides the measurement, analytics, quality assurance, and fraud protection technologies brands need for their business and customers.

Cyber Security Partners (CSP)

Cyber Security Partners (CSP)

Cyber Security Partners specialise in the provision of Cyber Security Consultancy, Data Protection and Certification and Compliance services.

NetScout Systems

NetScout Systems

NetScout assures digital business services against disruptions in availability, performance, and security.

SignMyCode

SignMyCode

SignMyCode is a one-stop shop for trusted and authentic code signing solutions to safeguard software.