The UK's National Crime Agency has partially won an important legal battle in a case that challenged the warrants used to obtain messages from cyber crook hangout EncroChat.

EncroChat offered an encrypted phone and mobile service for just $1,500 a month – and you thought your mobile bill was bad – which was chiefly used by criminals to organize their schemes and scams out of reach of the cops. The service was [1]busted in an international operation in 2022. This led to arrests, and the seizure of drugs, guns, and tens of millions of quid in cash. There were over 60,000 accounts to look through, too.

In a [2]decision issued Thursday, the Investigatory Powers Tribunal ruled that the National Crime Agency (NCA) "did not fail in any material respect in fulfilling the duty of candour" when it obtained a targeted equipment interference (TEI) warrant allowing the plod to access tons of private messages stored on EncroChat devices.

[3]

These communications were eventually used as evidence to arrest nearly 3,000 people in Britain.

[4]

[5]

The tribunal also said the NCA was not legally required to obtain a bulk equipment interference warrant to obtain the EncroChat messages lawfully.

However, while the TEI warrant allowed the cops to collect communications stored on a device – and thus, according to the tribunal, was obtained legally – there's a [6]different type of warrant that UK authorities must obtain to intercept messages in transit.

[7]

The tribunal said it didn't reach a determination about whether the NCA illegally intercepted communications while they were being transmitted, and decided to "defer further consideration of this chapter of the case" until after the Crown Court's criminal proceedings in a related EncroChat case have wrapped.

"It is clear that a TEI warrant cannot authorise conduct in relation to communications other than stored communications," the decision stated. "It will be necessary to determine whether the interception was of communications in the course of their transmission."

EncroChat hack

This, and other similar [8]legal challenges , date back to 2020, when the NCA learned that French and Dutch police compromised EncroChat's servers and used that access to deploy malware to all EncroChat handsets. That in turn allowed the cops to receive cleartext copies of users' messages in real time.

Upon learning about their European counterparts' efforts to spy on the alleged gangsters, the NCA wanted in, and so they obtained a warrant to access the messages between criminals.

The law enforcement agencies ultimately used information gleaned from the chats to make [9]tens of thousands of arrests amid [10]failed court challenges over the legality of that evidence.

[11]EncroChat defendants' lawyers make bid to halt trial

[12]Hard cheese: Stilton snap shared via EncroChat leads to drug dealer's downfall

[13]Eurocops shut down Exclu encrypted messaging app, arrest dozens

[14]Signal says it'll shut down in UK if Online Safety Bill approved

In Britain alone, the NCA had [15]arrested 2,864 people as of June 2022 directly because of the EncroChat surveillance.

Just yesterday, a man described as the "kingpin" of an organized crime group that controlled "one of the largest amphetamine laboratories ever found in the UK," was [16]jailed as a result of data obtained from EncroChat.

[17]

John Keet, 42, of Chalfont St Giles in Buckinghamshire, was sent down for 18 years after he pleaded guilty to drug-related charges.

"National Crime Agency investigators identified encrypted messaging platform EncroChat was being used to run the lab near Redditch – capable of producing 400 kilos of amphetamine per month, worth £2 million at wholesale and up to £10 million at street level," the police said. ®

Get our [18]Tech Resources



[1] https://www.theregister.com/2020/07/02/encrochat_op_venetic_encrypted_phone_arrests/

[2] https://investigatorypowerstribunal.org.uk/judgement/sf-and-ors-v-nca-ipt-21-05-ch/

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZF4ORFbCESe4tVt0v7msJgAAANI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZF4ORFbCESe4tVt0v7msJgAAANI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZF4ORFbCESe4tVt0v7msJgAAANI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[6] https://www.theregister.com/2021/02/08/encrochat_court_appeal_ruling/

[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZF4ORFbCESe4tVt0v7msJgAAANI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[8] https://www.theregister.com/2020/11/13/encrochat_hack_judicial_review_judgment/

[9] https://www.theregister.com/2020/07/02/encrochat_op_venetic_encrypted_phone_arrests/

[10] https://www.theregister.com/2020/11/13/encrochat_hack_judicial_review_judgment/

[11] https://www.theregister.com/2022/02/22/encrochat_lawyers_complain_unfair_trials/

[12] https://www.theregister.com/2021/05/25/cheese_fingerprint_prison/

[13] https://www.theregister.com/2023/02/07/police_exclu_encrypted/

[14] https://www.theregister.com/2023/02/25/signal_uk_online_safety_bill/

[15] https://public-newsroom-nca-01.azurewebsites.net/news/operation-venetic-operational-statistics-update-on-behalf-of-all-uk-law-enforcement-2

[16] https://www.nationalcrimeagency.gov.uk/news/operation-venetic-prison-for-ringleader-of-gang-which-ran-10-million-a-month-drugs-lab

[17] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZF4ORFbCESe4tVt0v7msJgAAANI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[18] https://whitepapers.theregister.com/