PPI companies punished for sending spam texts
One company was fined £80,000 for sending 1.3 million texts to unsuspecting victims


PPI company UKMS Money Solutions Limited (UKMS) has been fined 80,000 for sending 1.3m spam text messages to mobile phone users in the ICO's crackdown on such companies.
UKMS bought the phone numbers from brokers, encouraging victims to apply for PPI, even if they were not aware they had signed up to such services when taking out credit cards or loans.
However, the company was fined for not first checking the mobile phone users had opted in to receive marketing messages and as such, was operating against the law.
The ICO said almost 1,500 people complained directly to the regulator and using the text message spam line 7726 set up by the organisation during UKMS's intensive marketing campaign between April and June this year.
"UKMS relied on their data suppliers' word that the people on the lists had agreed to be contacted. That's simply not good enough," Andy Curry, enforcement manager at the ICO, said.
"UKMS should have known that the responsibility to ensure they had the right consent to send messages to people rests with them."
The regulator intends to send out fines totalling 250,000 to three companies who have been sending out unsolicited text messages promoting their services. So far, the ICO has collected more than 1m in fines from companies sending unsolicited text messages to prospects.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Working with the Claims Management Regulation Unit (CMRU), the ICO will also audit an additional five claims management companies to ensure they are complying with the law.
The next stage in the ICO's crackdown on nuisance marketing text messages is to contact the brokers who sell such marketing lists to find out how they collect the data and comply with the law when it comes to selling these lists on.

Clare is the founder of Blue Cactus Digital, a digital marketing company that helps ethical and sustainability-focused businesses grow their customer base.
Prior to becoming a marketer, Clare was a journalist, working at a range of mobile device-focused outlets including Know Your Mobile before moving into freelance life.
As a freelance writer, she drew on her expertise in mobility to write features and guides for ITPro, as well as regularly writing news stories on a wide range of topics.
-
Bigger salaries, more burnout: Is the CISO role in crisis?
In-depth CISOs are more stressed than ever before – but why is this and what can be done?
By Kate O'Flaherty Published
-
Cheap cyber crime kits can be bought on the dark web for less than $25
News Research from NordVPN shows phishing kits are now widely available on the dark web and via messaging apps like Telegram, and are often selling for less than $25.
By Emma Woollacott Published
-
AI recruitment tools are still a privacy nightmare – here's how the ICO plans to crack down on misuse
News The ICO has issued guidance for recruiters and AI developers after finding that many are mishandling data
By Emma Woollacott Published
-
“You must do better”: Information Commissioner John Edwards calls on firms to beef up support for data breach victims
News Companies need to treat victims with swift, practical action, according to the ICO
By Emma Woollacott Published
-
LinkedIn backtracks on AI training rules after user backlash
News UK-based LinkedIn users will now get the same protections as those elsewhere in Europe
By Emma Woollacott Published
-
UK's data protection watchdog deepens cooperation with National Crime Agency
News The two bodies want to improve the support given to organizations experiencing cyber attacks and ransomware recovery
By Emma Woollacott Published
-
ICO slams Electoral Commission over security failures
News The Electoral Commission has been reprimanded for poor security practices, including a failure to install security updates and weak password policies
By Emma Woollacott Published
-
Disgruntled ex-employees are using ‘weaponized’ data subject access requests to pester firms
News Some disgruntled staff are using DSARs as a means to pressure former employers into a financial settlement
By Emma Woollacott Published
-
ICO reprimands Coventry school over repeated data protection failures
News The ICO said the academy trust failed to follow previous guidance, which caused a serious data breach
By Emma Woollacott Published
-
ICO dishes out fine to HelloFresh for marketing spam campaign
News HelloFresh failed to offer proper opt-outs, the ICO said, and customers weren’t warned their data would be used for months after they cancelled
By Emma Woollacott Published