ICO raids five companies responsible for 170 million nuisance texts

The Information Commissioner's Office (ICO) has confirmed that it has executed a series of search warrants across the UK as part of a joint regulatory crackdown on suspected nuisance marketing linked to car finance mis-selling claims. Working alongside the Financial Conduct Authority (FCA), the Advertising Standards Authority (ASA), and the Solicitors Regulation Authority (SRA), as part of a taskforce announced in March, the ICO targeted five companies across Bolton, Burnley, Liverpool, London, and Swansea.

The companies under investigation are believed to have sent a combined 170 million unsolicited text messages between September 2025 and May 2026. The action follows more than 12 million data protection complaints about nuisance text messages submitted by the public since September 2025, with daily complaint volumes reaching up to 100,000.

Exercising its powers under the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations), the ICO seized evidence from residential and business premises. 

In a statement, Andy Curry, ICO Head of Investigations, said: "People are fed up with being bombarded by unwanted calls, texts and emails about car finance claims, and we're taking action. This week's searches send a clear message to the claims management sector: comply with the law or expect to hear from us."

The regulator has urged all organisations within the claims management sector, including lead generators and law firms, to comply with regulatory standards. Members of the public receiving unwanted communications are advised to register with the Telephone Preference Service and report unsolicited messages to the regulator or via the 7726 reporting service.

Additional reporting by The Guardian.

Training announcement: Freevacy provides comprehensive training for new and existing practitioners on the changes introduced by the DUA Act to the UK General Data Protection Regulation (GDPR), the Data Protection Act 2018 (DPA18), and the Privacy and Electronic Communications Regulations 2003 (PEC-Regulations). Our courses are always up to date and provide a forum for learning and discussing how to ensure your data protection processes remain compliant. Find out more.