The UK government’s proposal aims to implement a targeted ban on ransomware payments for critical infrastructure operators, particularly in the energy, healthcare, and local council sectors. This proposal, aimed at enhancing national security, was unveiled by the Home Office on January 14, 2025.
Ransomware attackers typically demand cryptocurrency payments. The UK, echoing moves made by Australia and the US, seeks to disrupt cybercriminal funding. The initiative follows several HIGH-profile attacks that have significantly impacted public services and security, highlighting the urgent need for action.
In addition to the payment ban, the UK government is considering a mandatory reporting framework to improve law enforcement’s effectiveness against ransomware incidents. This approach aims to provide guidance to victims to prevent payments to known criminal groups and vulnerable entities.