The United Kingdom has initiated a consultation to consider implementing a ban that would prohibit operators of critical national infrastructure from paying ransomware to cyber criminals.
As part of a proposal introduced on January 14, the UK Home Office suggested a “targeted ban” on ransomware payments, extending existing restrictions on government departments to include public sector entities and essential infrastructure sectors such as energy, healthcare, and local councils.
Other countries have explored similar measures. In 2023, Australia debated outlawing ransomware payments following a cyberattack on Latitude Financial, a consumer lender. Around the same time, the United States also considered implementing a ban.
UK Security Minister Dan Jarvis said that the initiative aims to enhance national security by denying cybercriminals access to ransom payments, which are often requested in cryptocurrency.
Ransomware attacks threaten our national security & damage our economy.
We’re taking action to deter the cyber criminals responsible by disrupting & defeating their business models.
Our aim is simple: defend our national security & economic prosperity. pic.twitter.com/8DFrXtYlfI
— Dan Jarvis MP (@DanJarvisMBE) January 14, 2025
“These proposals enable us to address the scale of the ransomware threat by targeting the financial networks of these criminal organizations, depriving them of the funds they need to operate,” Jarvis stated.
The government is currently consulting with stakeholders on the proposed ban. The consultation period will run until April 8. The government will consider the feedback received during the consultation period before making a final decision on the ban.
