Reform UK Leaders Sue NCA Over Alleged STR Leak

Reform UK leader Nigel Farage and deputy leader Richard Tice have sued the UK National Crime Agency, alleging that confidential information about donations flagged by banks was leaked to the media.

The pair are seeking more than £25,000 in damages after information concerning suspicious donations was reported by The Guardian, Public reporting indicates that . The allegations are contested and will be determined through legal proceedings.

Suspicious reporting depends on confidentiality

Suspicious transaction and activity reports contain sensitive financial intelligence. Their confidentiality protects customers from improper disclosure, reduces tipping-off risks and supports trust between reporting institutions and law enforcement.

Financial institutions should strictly limit access to reporting decisions, supporting records and communications with authorities. Role-based permissions, audit logs, secure channels and clear escalation processes are important controls, particularly where politically exposed persons or high-profile organisations are involved.

The dispute also illustrates the reputational consequences that can follow even an alleged disclosure. Compliance teams should review who can access STR-related data, how extracts are shared internally and whether investigations can be reconstructed through reliable logs. Confidentiality is not simply an administrative rule; it is part of the integrity of the financial intelligence system.

Legal protections around suspicious reporting

The UK suspicious activity reporting system depends on banks being able to submit information to the National Crime Agency without alerting the subject. Unauthorised disclosure can undermine an investigation, expose reporters and discourage institutions from providing detailed intelligence.

Firms should keep SAR data outside ordinary customer files where appropriate, restrict exports and screenshots, and monitor access by privileged users. High-profile cases also require clear communication rules: media enquiries, political sensitivity or reputational pressure should not change the confidentiality standard applied to the report.

Confidentiality control checklist

• Separate suspicious reporting records from routine customer correspondence.
• Limit access according to investigative need rather than seniority.
• Log viewing, downloading and sharing of sensitive case data.
• Route external enquiries to authorised legal and communications staff.