What Private Investigators Cannot Legally Do in the UK

Why this matters

The UK private investigation industry is not at present regulated by a statutory licensing scheme. The government has considered regulation multiple times, most recently through proposed amendments to the Security Industry Authority’s remit, but as of 2026, anyone can set up as a private investigator without qualifications, training or oversight.

This means the industry includes highly professional operators with law enforcement backgrounds and recognised accreditations alongside people with no training, no insurance, and no understanding of legal boundaries. The consequences of hiring the wrong one can be severe, not just for the investigator, but for the client who instructed them.

Understanding what investigators cannot do protects you from legal liability, ensures any evidence gathered is admissible, and helps you distinguish between legitimate professionals and cowboys.

Illegal methods that rogue investigators use

Phone tapping and communication interception

Intercepting telephone calls, emails, text messages or any other form of communication without lawful authority is a criminal offence under the Regulation of Investigatory Powers Act 2000 and the Investigatory Powers Act 2016. Only law enforcement and intelligence agencies can authorise interception, and only under strict judicial oversight.

A private investigator who claims they can “get your partner’s text messages” or “monitor their calls” is either lying or proposing to commit a serious criminal offence. The penalty for unlawful interception is up to two years’ imprisonment.

The phone-hacking scandal that engulfed News International demonstrated the consequences at scale, but the same laws apply to individual investigators. If your investigator obtains communication data illegally, you could face criminal charges as a co-conspirator if you knowingly instructed or encouraged the activity.

This includes accessing voicemail. Listening to someone’s voicemail by guessing their PIN or exploiting default settings is interception under the Act, as several journalists and investigators discovered when they were prosecuted during Operation Weeting.

Computer and device hacking

Accessing a computer, phone, tablet or any other digital device without authorisation is an offence under the Computer Misuse Act 1990. This includes guessing or obtaining passwords, using spyware or keyloggers, accessing someone’s email or social media accounts, and extracting data from devices without the owner’s consent.

The Act does not make exceptions for suspicious spouses, concerned parents (of adult children), or employers. Even if you own the device, such as a company phone, accessing the personal content on it without the user’s knowledge may still constitute an offence depending on the circumstances.

Spyware and stalkerware applications, which can be installed on a phone to monitor messages, calls, location and browsing activity, are readily available online. Installing them on someone else’s device without their knowledge is illegal. Advertising the ability to do so, as some investigators do, is advertising criminal services.

Covert recording in private places

Installing hidden cameras or recording devices in private spaces, including someone’s home, hotel room, car, or workplace areas where privacy is expected, is illegal without proper authority. This includes fitting GPS trackers to vehicles you do not own.

Some investigators market “bug detection” services alongside covert recording capabilities. A legitimate bug sweeper detects surveillance devices. They do not install them. If someone offers to put a tracker on your partner’s car or a camera in their flat, they are proposing illegal activity.

The legal position on vehicle trackers deserves specific mention because it causes confusion. Fitting a GPS tracker to a vehicle you own (for example, to monitor a company fleet) is generally lawful, provided employees are informed. Fitting a tracker to a vehicle owned by someone else, such as a partner’s car or an employee’s personal vehicle, is not lawful without their consent. The tracker may constitute a surveillance device under RIPA, and fitting it may involve interference with the vehicle.

Impersonating officials

Pretending to be a police officer, government official, utility worker, or any other authority figure to gain access to information, property, or a person’s cooperation is illegal. Professional investigators may use pretext calls in limited circumstances, but they do not impersonate officials.

There is a distinction between legitimate pretext (calling a company’s reception to confirm someone works there) and illegal impersonation (claiming to be from HMRC to obtain financial information). The line is whether you are claiming to have authority or powers you do not possess.

Trespass and breaking and entering

Private investigators have no right to enter private property without permission. They cannot climb fences, pick locks, enter through unlocked doors, or access any area where they do not have the occupier’s consent. Doing so is trespass at minimum, and potentially burglary if the intent is to steal information or goods.

Legitimate surveillance is conducted from public spaces: streets, pavements, public car parks, and other areas where anyone has a right to be. If evidence can only be obtained by entering private property, it cannot be obtained by a private investigator.

Bribery and corruption

Paying police officers, council employees, bank staff, telephone company employees, or anyone else for access to confidential records is an offence under the Bribery Act 2010. This was once a common practice in parts of the investigation industry. It is now a serious criminal offence carrying up to ten years’ imprisonment.

The Bribery Act has extraterritorial reach: a UK-based investigator who bribes an official abroad is still committing an offence under UK law. This is relevant for international investigations where corruption may be more common or culturally normalised.

Harassment and stalking

Surveillance that is conducted in a way that causes the subject alarm or distress can constitute harassment or stalking under the Protection from Harassment Act 1997. This includes following someone so closely or frequently that they become aware and frightened, making repeated contact, or conducting surveillance that is disproportionate to the matter being investigated.

Professional surveillance is discreet by definition. If the subject knows they are being followed, the surveillance has failed. Operatives who are spotted typically withdraw rather than continuing in a way that could constitute harassment.

What happens when investigators break the law

The consequences fall on everyone involved, not just the investigator.

Criminal prosecution

Investigators who use illegal methods face criminal charges. Depending on the offence, penalties range from fines to imprisonment. In recent years, several UK investigators have been prosecuted for offences including unlawful interception, computer misuse, and bribery.

Evidence becomes inadmissible

Evidence obtained illegally is likely to be excluded from court proceedings. This means that even if the evidence proves your case, the court may refuse to consider it. In family court proceedings, judges have discretion to exclude evidence obtained through illegal or disproportionate means. In criminal proceedings, the court may exclude evidence under section 78 of the Police and Criminal Evidence Act 1984 if admitting it would have an adverse effect on the fairness of proceedings.

Client liability

If you instruct an investigator and they use illegal methods, you may face charges as an accessory or co-conspirator, particularly if you knew or should have known that the methods were illegal. “I did not know they would break into the phone” is not always a defence if the price was suspiciously low or the promised results were clearly unachievable through legal means.

Courts take a dim view of willful blindness. If an investigator promises to deliver text message transcripts within 24 hours for £200, a reasonable person should question how that is possible through legal means. Instructing the work despite obvious red flags does not absolve you of responsibility.

How to protect yourself

Check accreditations

Look for membership of recognised professional bodies: the Institute of Analytical and Applied Research (IAAR), the UK Professional Standards Authority (UK-PSA), or the Society of Financial Investigators (SoFI). These organisations require members to adhere to codes of conduct, carry professional indemnity insurance, and maintain ethical standards.

Ask the right questions

Before instructing an investigator, ask how they will conduct the investigation, what methods they will use, and what legal limitations apply. A professional will be transparent about what they can and cannot do. Anyone who promises guaranteed results or implies access to confidential systems should be avoided.

Get everything in writing

A legitimate firm will provide terms of engagement, a clear description of the investigation scope, and a written estimate or fixed quote. They will explain their complaints procedure and provide evidence of insurance.

Trust your instincts

If something sounds too good to be true, it probably is. “I can get you their phone records by tomorrow” is not a service. It is a crime in progress.

Check their online presence

A legitimate investigation firm will have a professional website, verifiable contact details, a registered business address, and a visible track record. Be wary of investigators who operate solely through social media, use only mobile numbers, or have no verifiable business history. These are not definitive red flags, but they should prompt further questions about the person you are entrusting with sensitive work.

The case for regulation

The lack of statutory regulation in the UK investigation industry has been debated for over two decades. The arguments for regulation are strong: it would establish minimum standards of competence and conduct, protect consumers from unqualified operators, provide a complaints mechanism with real enforcement powers, and professionalise an industry that plays an important role in the justice system.

Several countries, including many US states, Australia, and parts of Europe, regulate private investigators through licensing schemes. These typically require applicants to demonstrate relevant training or experience, pass background checks, carry appropriate insurance, and adhere to a code of conduct. Breach of the code can result in licence revocation, effectively preventing the person from operating.

In the UK, the Private Security Industry Act 2001 originally included provisions for regulating private investigators through the Security Industry Authority. These provisions were enacted but never brought into force. The coalition government shelved the plans in 2010, and successive governments have not revived them despite periodic calls from industry bodies and consumer groups.

Until regulation arrives, the responsibility for distinguishing between professional investigators and cowboys falls on the consumer. The accreditation bodies mentioned in this article, particularly IAAR, UK-PSA and SoFI, provide the closest thing to a quality standard that the industry has at present. Choosing an accredited investigator does not guarantee perfection, but it significantly reduces the risk of encountering illegal methods, incompetent work, or unethical behaviour.

At UKPI, we have always operated as though regulation were already in place. Our standards, procedures, and conduct would meet or exceed any likely regulatory requirements. We believe this is the right way to operate, regardless of whether the law requires it.

The consequences of using an unethical investigator extend beyond the immediate case. A criminal record, a failed court case, or a successful counter-claim by the person you investigated can follow you for years. Choosing properly at the outset protects you long after the case is closed.

UKPI operates within strict legal and ethical boundaries, as we have done since 1997. We hold IAAR, UK-PSA and SoFI accreditations and our methods are designed to produce evidence that stands up in court. Call 0800 043 1754 for a confidential discussion about your case.