UK Police Hire Law Firms To Tackle Cyber Criminals

Private law firms will be hired by police to pursue criminal suspects for profit, under a radical new scheme to target cyber criminals and fraudsters.

In a pilot project by the City of London Police, the lead force on fraud in England and Wales, officers will pass details of suspects and cases to law firms, which will use civil courts to seize the money.

The force says the scheme is a way of more effectively tackling fraud – which is now the biggest type of crime, estimated to cost £193bn a year. It is overwhelming police and the criminal justice system.

The experiment, which is backed by the government and being closely watched by other law enforcement agencies, is expected to lead to cases reaching civil courts this year or early next year.

Officers will use the private law firms to attempt to seize suspects’ assets. If unsuccessful, police could decide to leave it at that or pursue the case themselves through the criminal courts.

Commander Chris Greany, head of economic crime at City of London police, said: “It is a huge shift … Civil recovery allows us to get hold of a criminal’s money sooner, and repay back victims sooner.”

One prominent criminal law firm was sceptical about the plans, expressing concern that a profit motive could damage the fairness of the process.

Currently, police pursue people suspected of making millions through financial crimes by prosecuting them in the criminal courts, and need to prove their case beyond reasonable doubt. After conviction, a lengthy process starts to seize the proceeds of crime, which can take years. Police believe some suspects use the delay to hide their assets.

Under the shakeup being piloted, a law firm will pursue the suspect in the civil courts before any conviction and possibly even without a criminal charge. The burden of proof is lower in civil courts, and they will only have to show that the suspect stole the money on the balance of probabilities.

Katie Wheatley, joint head of criminal law at Bindmans, a London law firm, expressed unease over the proposals, which she said gave police “what they would regard as an easy deterrent, without having the inconvenience of proving an offence to a criminal standard”.

Greany said the law firm and others in the private sector would bear the risk, in return for a share of the money taken off the criminal suspect.

The lead law firm taking part in the pilot is Mischon de Reya, best known for representing Princess Diana in her divorce from Prince Charles.

Greany said: “Who benefits from this? The victim will benefit, because they will get their money back. We’ll benefit because the criminal will be skint and they will be brought back down to having nothing again, and have to get about their normal lives, and they won’t have status in the community.”

What evidence would they be using to strip somebody of their assets? Money from fraud is being hidden around the world and getting a conviction and then seizing the assets of criminals can be very complex and lengthy. Greany said: “You can destabilise a criminal gang much faster by taking their asset off them [rather] than chasing them around the world for five years.”

But Wheatley asked of the police: “What evidence would they be using to strip somebody of their assets? If a criminal prosecution has failed, well OK, the burden of proof is slightly different, but you still have to wonder whether evidence that has been rejected by a criminal court ought to be the first port of call for a civil forfeiture or a civil confiscation order.”

Wheatley said the plan risked creating a conflict between private firms’ profit motive and the fairness of the process. “We’ve seen privatisation in this context in other ways, for example prison privatisation,” she said. “We all know how badly that’s gone wrong, particularly for young offenders. I appreciate they are not talking about convictions or detentions, but having possibly life savings, large assets stripped from you is a life-changing event. Whereas for the companies that the role was subcontracted to, it would just be a job.”

Robert Wynn Jones, a specialist in fraud at Mishcon de Reya, said the “novel and pragmatic” scheme would boost the deterrent to criminals. Wynn Jones said victims might be asked to pay legal costs, or specialist insurers could fund the fees in return for a 20-30% share of the money taken off criminals.

He said it would have to be financially worthwhile, meaning the scheme would only work for cases where losses ran into the hundreds of thousands. The use of private investigators would push up the cost.

There are two main downsides. If the suspect appeals and wins, or is cleared in a criminal case, then the money seized has to be repaid with interest added.

The second controversial aspect is the transfer of what was essentially punishment carried out through the state system, with established methods of accountability, to private firms, where it would be done for profit. However, Greany said: “It is a public-private partnership.”

Wynn Jones accepted that the new scheme would “throw up some ethical, political and philosophical questions”, but added: “There is no way the police can investigate and pursue this level of fraud – they don’t have the resources.”

The Office for National Statistics said in July that there had been more than 5.8m incidents of cybercrime in the past year, enough to virtually double the headline crime rate in England and Wales.

A working group to oversee the experiment has been set up by the City of London police, officers from the National Crime Agency, and Metropolitan police, and law and private investigation firms.

Greany said fraudsters were renting luxury items, such as cars, so they had no visible assets to be taken off them if they were caught.

The Labour MP Keith Vaz, chair of the home affairs select committee, said a key problem in recovering the proceeds of crime was the “way recovery is incentivised”. He said: “The Asset Recovery Incentivisation Scheme does not appear to us, or the NAO [National Audit Office], to be fit for purpose. It does not sufficiently reward those who have to lay out the resources to recover ill-gotten gains. We suggested in the report that recovered assets be distributed differently to better incentivise recovery, and if the numbers of these pilots work out this could well be an effective way to do increase the proportion of proceeds of crime we recover.

“We also recommend that a higher percentage should be returned to the communities affected by the crimes in question: if using commercial law firms enables us to net recover more, that is a win-win situation.”

Guardian:

« Exploring Alternatives: Terrorism Converging With Cyber Crime
Shadowbrokers Steal NSA Hacking Tools »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Okta

Okta

Okta is an enterprise-grade identity management service, built from the ground up in the cloud to address the challenges of a cloud-mobile-interconnected world.

IP Performance

IP Performance

IP Performance Limited is a leading supplier of customised network infrastructure and security solutions.

Deep Identity

Deep Identity

Deep Identity is a boutique system integrator, with expertise in tailored identity governance & administration (IGA) and identity access management (IAM) solutions.

SlashNext

SlashNext

The SlashNext Internet Access Protection System (IAPS) provides Zero-Day protection against all internet access threats including Social Engineering & Phishing, Malware, Exploits and Callback Attacks.

Cybertron

Cybertron

Cybertron services include real-time monitoring and incident response and a cyber range for competency development.

Asia Data Destruction (ADD)

Asia Data Destruction (ADD)

ADD is the leading IT Assets Disposal and Data Destruction Company in Thailand.

Huntress Labs

Huntress Labs

Huntress provides managed threat detection and response services to uncover and address malicious footholds that slip past your preventive defenses.

Injazat

Injazat

Injazat Data Systems is an industry recognized market leader in the Gulf region for Information Technology, Data Center and Managed Services.

Hazy

Hazy

Hazy specialises in financial services, helping some of the world’s top banks and insurance companies reduce compliance risk.

Evina

Evina

Evina offers the most advanced cybersecurity and fraud protection for mobile payment.

Seadot Cybersecurity

Seadot Cybersecurity

Seadot offer cybersecurity services to organizations with a high demand for regulatory compliance and security.

Yogosha

Yogosha

Yogosha is a crowdsourced cybersecurity platform enabling a win-win collaboration with the most talented hackers to detect and fix vulnerabilities on your most critical systems.

Arcanna.ai

Arcanna.ai

Using a wide range of out-of-the box integrations, Arcanna.ai continuously learns from existing enterprise cybersecurity experts and scales your team’s capacity to deal with threats.

SRG Security Resource Group

SRG Security Resource Group

SRG Security Resource Group is a Canadian company dedicated to providing world-class Physical and Cyber Security services.

Dropzone AI

Dropzone AI

Dropzone AI are creating a generational leap in SecOps by using AI to automate cyber expertise and tooling.

Xcelerate Solutions

Xcelerate Solutions

Xcelerate Solutions is a leading defense and national security company, providing integrated solutions in three service areas – Enterprise Security, Digital Transformation, and Strategic Consulting.