Crime and Policing Bill (Eleventh sitting) Debate

Full Debate: Read Full Debate
Department: Home Office
Matt Vickers Portrait Matt Vickers
- Hansard - - - Excerpts

A SIM farm is a system used to manage and operate a large number of SIM cards simultaneously, often using multiple mobile devices or modems controlled by central software. Farms can contain hundreds or even thousands of SIM cards, and they are typically used to send or receive a high volume of messages, calls or mobile data across networks.

While there can be legitimate uses for SIM farms, such as in telecoms testing or large-scale communication platforms, they are commonly associated with illicit and fraudulent activities. One of their most concerning uses is in the spread of spam and phishing texts, where mass messages with links to scams or malware are sent to unsuspecting individuals. They are also frequently used to bypass verification systems by creating large numbers of fake accounts on social media, messaging apps or online services. In other cases, SIM farms are employed in SIM box fraud, a scheme in which international calls are rerouted and disguised as local calls, depriving telecom providers and Governments of revenue and making the original caller harder to trace.

According to research carried out by Ofcom in August 2022, the scale of nuisance and potentially fraudulent communications across UK mobile networks remains alarmingly high. An overwhelming 75% of mobile users reported receiving suspicious texts or calls in just a three-month period, highlighting the widespread nature of the issue. These figures demonstrate the persistent and pervasive threat posed by scam communications, underlining the urgent need for more robust protections and enforcement mechanisms to safeguard the public.

SIM farms pose serious risks to national security and digital infrastructure. Their use can lead to network congestion, overwhelming mobile networks and disrupting legitimate communications. More critically, they are often exploited by organised crime networks to co-ordinate illegal activity as they are cheap, disposable and difficult to trace. That makes it significantly harder for law enforcement to monitor communications or link messages to specific individuals. The previous Conservative Government committed to banning SIM farms as part of their fraud strategy announced in May 2023. They subsequently launched a consultation on how best to implement the ban, although, interestingly, there were only 50 responses, many from businesses or individuals identifying as legitimate SIM farm users who opposed a ban.

In response to the 2023 Home Office consultation on SIM farms, Mobile UK, the trade body representing the UK’s four major mobile network operators, raised concerns that the proposed ban risked being ineffective due to evolving fraud tactics and technological advancements, including the fact that single-SIM devices, rather than SIM farms, are now the most common tools used to send spam SMS messages, according to data from one mobile operator. Mobile UK further warned that the proposed measures would not eliminate large-scale spam or scam messaging, and urged the Government to broaden the definition of SIM farm to include software-based or e-SIM-enabled methods used to achieve the same fraudulent outcomes.

In the Criminal Justice Bill in the 2023-24 Session, the previous Government included provisions to criminalise the possession or supply of devices capable of holding five or more SIM cards, targeting the infrastructure used in large-scale scams. I welcome the Government’s carrying forward the provisions in the Criminal Justice Bill to amend the definition of SIM farm and prohibit other electronic devices used to commit fraud via secondary legislation.

Clause 80 introduces the new criminal offence of possessing a SIM farm, reflecting growing concerns about their misuse in fraudulent and criminal activity. The clause makes it an offence for an individual to possess such a system unless they can demonstrate that they have a lawful authority or good reason for doing so. That shifts the burden to the defendant to prove the legitimacy of their possession, aiming to deter misuse while protecting legitimate operations.

The clause also provides examples of what may constitute a good reason, including the use of SIM farms for broadcasting services, public transport operations, communications network maintenance or freight tracking. Those carve-outs are designed to safeguard industries with genuine operational needs for such technology, while still targeting the widespread abuse seen in mass-messaging scams, SIM box fraud and illegitimate telecommunications activity. The clause is a key part of the broader effort to close regulatory gaps and strengthen the legal tools available to tackle modern digital fraud.

Clause 81 makes it a criminal offence to supply a SIM farm to another person. Clause 82 offers a meaningful definition of what constitutes a SIM farm for the purposes of clauses 80 and 81, and provides the Secretary of State with the power to amend the definition by regulation. Schedule 10 provides for powers of entry and other investigatory powers relating to offences involving SIM farms. Clauses 83 to 85 create the offence of possessing a “specified article”; criminalise the supply of such articles, with appropriate exemptions; set out the sanctions; and allow for the Secretary of State to amend the definition of a specific article via amendment to keep the legislation in line with technology and changing criminal behaviours.

Will there be a formal review mechanism to assess the effectiveness and proportionality of these offences, particularly regarding the number of prosecutions under clauses 80 to 85? Given Mobile UK’s concerns that fraudsters are increasingly using single-SIM devices, e-SIMs and apps such as WhatsApp to bypass traditional SMS channels, is the Minister confident that the measures in the Bill and the Government’s current definition of SIM farm are sufficiently future-proof to tackle emerging forms of fraud?

Joe Robertson Portrait Joe Robertson (Isle of Wight East) (Con)
- Hansard - -

It is a pleasure to serve under your chairship, Ms Lewell. I support the clauses, which outlaw the use of SIM farms and the supply of SIM farms to others.

It is a defence for a person to show that they have “good reason” to use a SIM farm. Examples are given in the Bill, including providing broadcasting services, operating or maintaining a public transport service and tracking freight. I do not suggest that amendments are necessary, but I wonder whether the Minister can help us understand the provisions. What are examples of legitimate use in broadcasting services or tracking freight? These are areas of legitimate commercial activity that lay people are not particularly familiar with. I would be interested to know why a company would want to use multiple SIMs and phone numbers to track freight, for example. It is not meant to be a complex question.

Diana Johnson Portrait Dame Diana Johnson
- Hansard - - - Excerpts

I am glad that there is cross-party support for these measures. The clauses were, on the whole, included in the Criminal Justice Bill introduced by the previous Government.

Fighting fraud is a top priority for this Government and tackling it is really important not only for our safer streets mission but for our growth agenda. We want to address the full range of fraud threats that occur. We want to close the systemic enablers that criminals are able to exploit to operate at scale and without detection, such as SIM farms.

The hon. Member for Stockton West is right that such a provision was included in the Criminal Justice Bill, but we have updated the definition of SIM farm to reflect newly emerging use cases. In response to feedback from stakeholders, we are creating an additional offence for the possession and supply of additional technologies, to be specified in the future, with appropriate exceptions to avoid unnecessary restrictions on legitimate businesses and professionals. I hope that goes some way to reassuring the hon. Member about why we are trying to future-proof these clauses. On the issue of review, the provisions will be reviewed two years after commencement.

On the point about legitimate activity, as I said, the list in the Bill is not exhaustive; it gives some indication of legitimate reasons why a business or organisation might have a SIM farm in its possession. Whether a reason is reasonable and stands up to scrutiny will obviously be a matter for the court to decide. The list is not exhaustive, in order to provide flexibility; as I said, this area is changing rapidly. In the coming weeks, months and years there may be new legitimate reasons for businesses to possess a SIM farm to assist them in providing a service or selling something. The clauses are constructed as they are in order to allow that flexibility.

Question put and agreed to.

Clause 80 accordingly ordered to stand part of the Bill.

Clauses 81 and 82 ordered to stand part of the Bill.

Schedule 10 agreed to.

Clauses 83 to 85 ordered to stand part of the Bill.

Clause 86

Offence of concealing identity at protests