UK firm bombarded debt-ridden people with 5.5M texts

Jump to main content

Search

REG AD

public sector

UK firm bombarded debt-ridden people with 5.5M texts

KRA Consultancy Ltd fined £300K over fake bailiff threats in 'calculated' scheme that caused 'real fear and distress'

Jude Karabus

Jude<br>Karabus

Published<br>mon 29 Jun 2026 // 10:15 UTC

"Am I confident on the data set? As long as I'm doing the cases, I don't really give a f*** if it's old as long as it's making money."<br>According to the UK's Information Commissioner's Office (ICO), this was part of a message sent by the director of a company fined for targeting financially vulnerable people with unlawful texts, including fake bailiff messages.<br>The message, sent by KRA Consultancy Ltd (KRA) director Khuram Rezvan Ahmad, appeared in the watchdog's monetary penalty notice, which said the firm did not check "the loan decline data was accurate" or whether the recipients had consented to receive marketing messages.

REG AD

The regulator fined KRA £300,000 last week, saying it had targeted people who were already in financial difficulty and had been turned down for loans. The watchdog described the operation as a "calculated, unlawful scheme," saying the fake bailiff messages had left recipients fearing that bailiffs were coming to their homes to remove their family's belongings.

REG AD

The ICO said KRA sent fabricated bailiff threats in the hope of scaring recipients so much that they would then engage with the company's debt services. The fake messages were sent using the sender ID "DEMAND."<br>It read: "We have attempted on numerous occasions to contact you without any success. This matter has escalated further and an Enforcement agent will attend ****** within 48 hours to remove your goods as per Court Order. If you are on any legal/debt plan you will need proof readily available."<br>The ICO also claimed the company deliberately tried to evade detection. It alleged that Ahmad had contacted a telecoms provider based in China and sought assurances from the telco that the mass text messages would be "completely untraceable."<br>KRA promoted debt "solutions" to people, sending 5,575,715 unsolicited direct marketing texts between April 2022 and May 2025, the watchdog said.<br>The campaign generated more than 60,000 complaints to the ICO and Mobile UK's 7726 spam-reporting service.<br>The company was not registered with the Financial Conduct Authority, despite directing people towards debt solutions, the ICO added.<br>In internal WhatsApp messages uncovered during its investigation, the ICO said Ahmad used the term "coaching" as a euphemism for the threats.<br>"Get through as much as and pitch whatever. Don’t worry about forcing anything back because the coaching will take care of that tomorrow morning."

REG AD

During the ICO's investigation, search warrants were executed at KRA's offices and Ahmad’s home. The watchdog said KRA resumed its unlawful marketing activity following the searches, leading to 161 new complaints.<br>Andy Curry, head of investigations at the ICO, said:

MORE CONTEXT

Microsoft accidentally kills epic Outlook email threads

Britain's privacy watchdog quits after 'poor judgment' admission

KDE Plasma 6.7 brings the X11 era to a close

Munch Museum Windows display gives visitors something to scream about

"People in financial difficulty deserve support, not exploitation. KRA deliberately sought these people out – knowing they might be especially susceptible to this kind of high-pressure marketing – and bombarded them with illegal texts. When that wasn't enough, it sent fake threats telling people bailiffs were coming to their homes to remove their belongings. This was a calculated, unlawful scheme, and it caused real fear and distress to people who were already struggling with debt.<br>"KRA showed complete disregard for the law throughout our investigation and this £300,000 fine – one of the largest for nuisance marketing in recent years – reflects that. It should leave no doubt that we will pursue any company that thinks it can evade the law and prey on the public."<br>Alongside the Monetary Penalty, the ICO also issued KRA with an Enforcement Notice, ordering the company to stop sending marketing messages without consent within 30 days. ®

telecommunications<br>public sector<br>ico<br>financial services

REG AD

networks

Microsoft to assist European Commission in defense of EU-US data-sharing agreement

Court says Redmond can file briefs, take part in hearings amid challenge to the current path Big Tech's data spice uses to legally flow

security

AI may be good at finding security vulnerabilities, but it can't beat human stupidity

You don't need Mythos or GPT-5.5-Cyber to find a vuln to exploit when the world's password habits are so sloppy

ZTE released all-in-one FTTR-B solution for SME AI and connectivity at MWC Shanghai 2026

PARTNER CONTENT: • Supporting on-premise local AI large model operation, the solution cuts cloud costs and secures sensitive corporate...