Cybercrime Lawyers

Experts in Cybercrime Investigations and Prosecutions

Cybercrime is one of the fastest-growing threats facing businesses and individuals. From hacking, cyber fraud and cryptocurrency scams to data theft, online harassment and the misuse of confidential information, cybercrime can cause significant financial losses, operational disruption and lasting reputational damage.

When an offence occurs, taking swift legal action is often critical. Digital evidence can be deleted or altered, funds can be transferred across multiple accounts or jurisdictions, and perpetrators may use technology to conceal their identity and location. That’s why a quick and coordinated legal and investigative response is often essential to preserve evidence, identify those responsible, recover assets and minimise the wider commercial impact of an attack.

The types of cybercrime we advise on

Our cybercrime lawyers are recognised leaders in this evolving area of law, with EMM partner, Tamlyn Edmonds, serving as a founding member and Treasurer of the Cybercrime Practitioners Association. As such, we act for businesses and individuals across a broad range of cybercrime matters, including:

• Hacking and Computer Misuse Act offences – advising on unauthorised access to computer systems, compromised accounts, malware, hacking and related offences under the Computer Misuse Act 1990.
• Cyber fraud and financial crime – pursuing fraudsters through investigations, private prosecutions and asset recovery.
• Cryptocurrency and cryptoasset crime – investigating offences involving digital assets and advising on recovery, restraint and confiscation proceedings.
• Cyberstalking, harassment and malicious communications – advising victims of sustained online abuse and pursuing legal action where appropriate.
• Data theft and data protection breaches – acting in matters involving the theft or misuse of confidential information by current or former employees.
• Online impersonation and identity fraud – investigating the use of false identities, accounts, email addresses or digital profiles to facilitate fraud or other criminal conduct.

Every cybercrime case presents unique challenges. That’s why our cybercrime investigation and litigation teams work closely with clients to develop a strategy that reflects the nature of the offence, the available evidence and the desired outcome.

Our experience in cybercrime and cyber-enabled fraud

We have acted in complex cybercrime and technology-enabled fraud matters involving sophisticated investigations, prosecutions and asset recovery. Examples of our experience include:

Major digital asset hack and cross-border recovery (2026)

Following a series of significant DAO and digital asset exploits in the first half of 2026, EMM was instructed in connection with a major cyberattack affecting a prominent Web3 ecosystem.

The attack resulted in the misappropriation of over $13 billion in native digital asset tokens and affected a substantial number of users across the world, including more than 500,000 UK residents.

EMM was instructed as part of the coordinated incident response and asset recovery effort. The matter required urgent engagement with multiple cryptocurrency exchanges and other centralised service providers that had received or subsequently held the misappropriated assets.

Through rapid tracing, freezing and recovery efforts, the substantial majority of the compromised assets were successfully recovered, enabling the affected users to recover their losses in full.

EMM continues to act in relation to a residual tranche of approximately US$110,000 in digital assets currently frozen at two centralised exchanges, pursuing their recovery and return.

The matter demonstrates EMM’s experience in responding at speed to complex, cross-border digital asset fraud, including blockchain tracing, engaging with exchanges, asset freezing and recovery following large-scale protocol exploits.

Macmillan Cancer Support – sophisticated cyber-enabled fraud (2025)

Our cybercrime lawyers investigated and prosecuted an organised fraud against Macmillan Cancer Support, in which a group of defendants exploited the charity’s cancer grant system.

Over a 15-month period, the offenders used hundreds of aliases, telephone numbers, addresses and corporate and personal bank accounts as part of the offending and subsequent laundering of its proceeds.

EMM was instructed in August 2022 and worked with Macmillan’s Counter Fraud Team on a complex investigation. Within three months, five connected defendants had been charged and hundreds of bank accounts had been restrained. The defendants ultimately pleaded guilty to money laundering offences.

This case demonstrates how relatively conventional fraud can become cyber-enabled at scale, with technology being used to create identities, communicate with victims, operate multiple accounts and conceal the movement of criminal proceeds.

Read more about this case

Recovery of nearly US$900,000 following an online romance and cryptocurrency fraud

EMM acted for a victim of a sophisticated online romance fraud after she was induced to transfer substantial pension savings in cryptocurrency to a person posing as a high-net-worth professional.

Working with blockchain tracing specialists at Grant Thornton UK, the stablecoin issuer Tether and US federal law enforcement, EMM helped facilitate the recovery of nearly US$900,000 in USDT.

The recovery used a Tether burn-and-remint process and is believed to have been the first known recovery of its kind involving a UK-instructed asset recovery team.

This case demonstrates the importance of combining legal strategy, blockchain tracing, and international cooperation in cryptocurrency fraud cases.

Read more about this case

Cross-border cybercrime investigations

Cybercrime rarely stops at national borders. Offenders often operate across multiple jurisdictions, using overseas infrastructure, anonymous payment methods and sophisticated techniques to conceal their identity. Successfully investigating these offences frequently requires coordinated legal action across different countries.

Our team has extensive experience tracing cybercriminals internationally and working alongside specialist investigators, overseas authorities and law enforcement agencies. We regularly advise on cross-border investigations, mutual legal assistance and extradition procedures, helping clients pursue offenders wherever they are located.

Cybercrime investigations also generate significant volumes of digital evidence. We manage every stage of the evidence-gathering process, including electronic disclosure, forensic document review and the presentation of complex digital evidence to support investigations and prosecutions.

Cybercrime prosecutions and recovery

Identifying those responsible for cybercrime is just one part of the process. For many organisations and individuals, recovering financial losses, protecting valuable assets and preventing further harm are equally important priorities. Where appropriate, legal action can help achieve these objectives by holding offenders to account, disrupting ongoing criminal activity and improving the prospects of a successful recovery.

Our cybercrime solicitors advise clients on the full range of legal remedies available following cybercrime, including private prosecutions, restraint orders and confiscation orders. We have extensive experience tracing and recovering stolen assets, including cryptocurrency and other cryptoassets, to help clients restore financial losses and move forward with confidence.

Cybercrime prosecution FAQs