The Information Commissioner's Office (ICO) has fined KRA Consultancy Ltd, a Manchester-based company, £300,000 for sending unlawful spam texts that included fake bailiff threats. The regulator said the company sent 5,575,715 unsolicited direct marketing texts between April 2022 and May 2025, promoting debt solutions to people who had already been turned down for loans.
Spam texts caused real fear and distress
The ICO reported that the texts led to more than 60,000 complaints to its spam reporting service. Some messages were fabricated bailiff threats designed to frighten recipients into engaging with the company's debt services. These fake messages were sent using the sender ID 'DEMAND'. An example text read: "We have attempted on numerous occasions to contact you without any success. This matter has escalated further and an enforcement agent will attend ****** within 48 hours to remove your goods as per court order. If you are on any legal/debt plan you will need proof readily available."
ICO investigation uncovered internal messages
During its investigation, the ICO discovered internal WhatsApp messages that used the term 'coaching' as a euphemism for threats. Search warrants were executed at the company's offices and at the home of a director at the time. Andy Curry, Head of Investigations at the ICO, said: "People in financial difficulty deserve support, not exploitation. KRA deliberately sought these people out - knowing they might be especially susceptible to this kind of high-pressure marketing - and bombarded them with illegal texts. When that wasn't enough, it sent fake threats telling people bailiffs were coming to their homes to remove their belongings. This was a calculated, unlawful scheme, and it caused real fear and distress to people who were already struggling with debt."
Fine one of the largest for nuisance marketing
Curry added: "KRA showed complete disregard for the law throughout our investigation and this £300,000 fine - one of the largest for nuisance marketing in recent years - reflects that. It should leave no doubt that we will pursue any company that thinks it can evade the law." The ICO also issued an Enforcement Notice, ordering the company to stop sending marketing messages without consent within 30 days.
