How to Obtain a Norwich Pharmacal Order in the UK, Tests, Procedure, Bankers Trust Comparison, Service on Banks and Crypto Exchanges

Understanding how to obtain a Norwich Pharmacal order is essential for any civil fraud litigator who needs to unmask a wrongdoer, trace stolen assets, or compel a third party to disclose information that is otherwise unobtainable. Rooted in a 1974 House of Lords decision, the Norwich Pharmacal order (NPO) remains one of the most powerful investigative tools in English law, and its relevance has only intensified as banks, payment processors, and cryptocurrency exchanges increasingly find themselves holding critical evidence in fraud cases.

This guide sets out the legal test, step-by-step application process, comparison with Bankers Trust and CPR 31 routes, the jurisdictional gateway for serving overseas respondents under Practice Direction 6B, data-protection considerations, and realistic cost expectations for practitioners handling these applications in 2026.

Legal Origin and Core Test for a Norwich Pharmacal Order

A Norwich Pharmacal order is a court order compelling an innocent third party who has become “mixed up” in wrongdoing to disclose information or documents that will enable the applicant to pursue the wrongdoer. The jurisdiction derives from the inherent equitable power of the court and was authoritatively established by the House of Lords in Norwich Pharmacal Co v Commissioners of Customs & Excise [1974] AC 133.

In that case, the claimant patent-holder sought the identities of importers who had infringed its patent. The Customs Commissioners held importation records but were not themselves wrongdoers. The House of Lords held that where a person, through no fault of their own, becomes involved in the tortious acts of another, a duty arises to assist the injured party by providing the information needed to pursue the wrongdoer.

The Norwich Pharmacal order test, as refined by subsequent authorities, requires the applicant to establish three cumulative elements:

• A wrong has been carried out, or arguably carried out. The applicant must show a good arguable case that a wrong (civil or criminal) has occurred. It is not necessary to prove the wrong conclusively at this stage.
• The respondent is mixed up in the wrongdoing. The third party need not be a wrongdoer, but it must have facilitated the wrong or become involved in it in more than a merely passive or ministerial way, for example, a bank that processed fraudulent payments or a crypto exchange through which stolen funds were routed.
• The order is necessary to enable the applicant to bring or advance proceedings. The information sought must not be obtainable by other reasonable means. The court exercises a residual discretion, weighing necessity against the burden on the respondent and any countervailing public interest.

Key Authorities and Judicial Statements

Beyond the foundational Norwich Pharmacal decision, several authorities shape modern applications. Lord Woolf MR in Ashworth Hospital Authority v MGN Ltd [2002] UKHL 29 emphasised the court’s broad discretion and confirmed that the jurisdiction extends to identifying sources who breach confidence. The Court of Appeal in Mitsui & Co v Nexen Petroleum [2005] EWCA Civ 1124 clarified that the threshold is a “good arguable case” rather than a prima facie case, and that the exercise of discretion must weigh proportionality. These principles continue to guide the High Court and King’s Bench Division in crypto-fraud and asset-tracing claims brought against persons unknown.

How a Norwich Pharmacal Order Fits with CPR Non-Party Disclosure

Practitioners preparing a Norwich Pharmacal application must first consider whether a statutory disclosure route under the Civil Procedure Rules (CPR) would suffice. Part 31 of the CPR provides two principal mechanisms for obtaining documents from non-parties.

CPR 31.17 empowers the court to order disclosure by a non-party once proceedings have been commenced, provided the documents sought are likely to support the applicant’s case or adversely affect another party’s case, and disclosure is necessary for a fair disposal of the claim. CPR 31.18 (read with s.33(2) of the Senior Courts Act 1981) allows pre-action disclosure against a likely party, but not against a mere third-party witness or intermediary.

The Norwich Pharmacal jurisdiction fills the gap that CPR 31 cannot reach. It is available both before and during proceedings, and, critically, it can be deployed against a respondent who will never be a party to the substantive claim. Where the applicant does not yet know the identity of the wrongdoer, CPR 31.17 is unavailable because no proceedings exist and no defendant can be named. Equally, CPR 31.18 pre-action disclosure applies only against persons who are likely to become parties, not innocent intermediaries such as banks or exchanges.

Practical Checklist: CPR Route vs NPO vs Pre-Action Disclosure

• Use CPR 31.17, if substantive proceedings are already on foot and the non-party holds documents relevant to a pleaded issue.
• Use CPR 31.18 / s.33(2), if seeking pre-action disclosure from someone who is likely to become a defendant.
• Use a Norwich Pharmacal order, if the respondent is an innocent third party, the wrongdoer’s identity is unknown, no proceedings yet exist against the wrongdoer, or the information is needed to trace assets rather than to prove a pleaded issue.

How to Obtain a Norwich Pharmacal Order: Step-by-Step Application Process

The process of making a Norwich Pharmacal application follows the general Part 23 procedure for interim applications, but with several distinctive features reflecting the equitable origin of the jurisdiction.

1. Prepare the application notice. The application is issued under CPR Part 23. Where the wrongdoer’s identity is unknown, the claim form is typically issued against “Persons Unknown” with the respondent bank or exchange named as a third party required to give disclosure.

2. Draft the supporting evidence. The applicant must file a witness statement (or affidavit) that sets out: the nature of the alleged wrong; the basis on which the respondent is said to be mixed up in it; the specific information or documents sought; the steps already taken to obtain the information by other means; and why those steps have proved inadequate. In crypto-fraud cases, this frequently includes a blockchain-tracing report from a specialist firm, demonstrating the flow of funds from the victim’s wallet through the respondent exchange.

3. Prepare a draft order. The draft should specify the categories of information or documents sought with precision, for example, account-holder identity, KYC records, transaction histories for defined wallet addresses during a defined period, and IP login data. Overly broad requests risk refusal on proportionality grounds.

4. Consider confidentiality measures. In many fraud cases, applicants seek anonymity orders (to prevent the wrongdoer being tipped off) or request that the hearing be held in private. The court may impose reporting restrictions where there is a real risk of dissipation or flight.

Urgency and Without-Notice Practice

Where there is a genuine risk that the wrongdoer will dissipate assets or destroy evidence if forewarned, the application may be made without notice (ex parte). The applicant owes a duty of full and frank disclosure, a failure to disclose material facts can result in the order being set aside. Without-notice applicants should expect to provide a cross-undertaking in damages to compensate the respondent if the order is later found to have been wrongly granted. The court will normally fix a return date, typically within seven to fourteen days, for the respondent to be heard.

Norwich Pharmacal Order Example: Key Drafting Elements

A well-drafted Norwich Pharmacal order will typically contain recitals identifying the alleged wrong, the respondent’s involvement, and the basis for the court’s jurisdiction; operative paragraphs specifying the information to be disclosed and the deadline for compliance; provisions for the applicant’s cross-undertaking in damages; confidentiality undertakings restricting the use of disclosed material; and a costs provision reserving the respondent’s right to apply for costs of compliance. A Norwich Pharmacal order template and affidavit checklist, tailored for crypto-fraud and banking respondents, is an essential resource for practitioners handling these matters regularly.

Bankers Trust Order vs Norwich Pharmacal, When to Choose Which

A Bankers Trust order and a Norwich Pharmacal order are often discussed together, but they serve distinct purposes. The Bankers Trust jurisdiction, deriving from Bankers Trust Co v Shapira [1980] 1 WLR 1274 (CA), is specifically directed at tracing and preserving assets. It compels a third party (typically a bank) to disclose information about the whereabouts of misappropriated funds, enabling the claimant to trace and recover those assets.

The critical distinction is one of focus. A Norwich Pharmacal order is primarily identity-directed: it seeks to discover who the wrongdoer is. A Bankers Trust order is asset-directed: it seeks to discover where the money went. In practice, the two are frequently sought together in the same application, particularly in crypto-fraud claims where the applicant needs both to identify the persons behind pseudonymous wallet addresses and to trace the flow of funds through exchange accounts.

Tactically, where the applicant already knows the wrongdoer’s identity but needs to trace stolen funds held by a bank or exchange, a Bankers Trust order alone may suffice. Where the wrongdoer is unknown and the primary objective is unmasking, a Norwich Pharmacal order is the appropriate route. In many contemporary fraud claims, especially those involving cryptocurrency, the applicant will seek both orders in a single application, supported by a combined blockchain-tracing and KYC-disclosure request.

Service and Jurisdiction, Banks and Crypto Exchanges

Serving a Norwich Pharmacal order on an overseas bank or crypto exchange raises jurisdictional questions that have been addressed with increasing frequency by the English courts. Practice Direction 6B, paragraph 3.1(25) provides a gateway for service out of the jurisdiction where the claim is made for an order requiring a party to provide information about the identity and whereabouts of a person or the location of property. This gateway was introduced to facilitate precisely the type of information order that Norwich Pharmacal and Bankers Trust applications involve.

To obtain permission for service out under PD6B, the applicant must satisfy the court that: there is a serious issue to be tried (or a good arguable case); England and Wales is the proper forum; and the case falls within one of the enumerated gateways. In crypto-fraud claims, the English courts have shown a readiness to grant service out against exchanges domiciled overseas where funds were routed through UK-connected wallets or where victims are UK-based. In Wilden v Person Unknown [2026] EWHC 1355 (KB), the High Court confirmed the availability of disclosure orders against overseas crypto exchanges and approved service via PD6B, reflecting a pragmatic approach to jurisdictional challenges in digital-asset fraud.

Practical Checklist for Serving Banks and Overseas Exchanges

• Blockchain tracing report. Commission an expert report demonstrating the flow of funds from the victim’s address to the exchange. This report is central to establishing that the exchange is “mixed up” in the wrongdoing.
• Identify registered address and legal entity. Exchanges frequently operate through multiple corporate entities across jurisdictions. Identify the correct entity and its registered address for service.
• Apply for alternative service where necessary. Where a registered office is opaque or the exchange operates without a transparent corporate structure, apply under CPR 6.15 for permission to serve by alternative means, typically by email to the exchange’s legal or compliance department.
• Consider enforcement risk. Even after obtaining an order, enforcement against a non-UK exchange may require recognition proceedings in the exchange’s home jurisdiction. Weigh this against the value of information likely to be disclosed.
• Persons Unknown claims. In many crypto-fraud cases, the anchor claim is issued against “Persons Unknown” with the exchange joined as a respondent. This structure enables the court to exercise jurisdiction over the disclosure application without needing to identify the ultimate defendant at the outset.

Privacy, Data Protection, and Public Interest Limits

Norwich Pharmacal applications inevitably engage data-protection obligations, particularly where the respondent holds personal data about account holders subject to the UK GDPR. The Information Commissioner’s Office (ICO) has issued guidance confirming that compliance with a court order constitutes a lawful basis for sharing personal data with parties pursuing legal claims. Respondent institutions can therefore rely on the legal obligation basis (Article 6(1)(c) UK GDPR) or the legitimate-interests basis (Article 6(1)(f)) when disclosing information pursuant to an NPO.

The court balances the applicant’s need for disclosure against the account holder’s Article 8 right to privacy. In practice, this balancing act is managed through the terms of the order itself, for example, by restricting the use of disclosed material to the identified proceedings, prohibiting onward dissemination, and requiring the applicant to destroy disclosed data once it is no longer needed for the litigation.

A separate statutory limitation arises under the Justice and Security Act 2013, which restricts Norwich Pharmacal relief where disclosure would involve sensitive intelligence material or compromise national security. Section 17 of the Act requires the Secretary of State to issue a certificate if a Norwich Pharmacal application risks disclosing material subject to a closed-material procedure. This limitation is relevant in a narrow category of cases involving state actors or terrorism-related claims, but practitioners should be aware of it when the underlying wrong has a security dimension.

Norwich Pharmacal Order Cost: Cross-Undertakings, Security, and Likely Budget

The Norwich Pharmacal order cost is driven by the urgency and complexity of the application. A straightforward, on-notice application against a single UK-based bank will be materially less expensive than an ex parte application involving multiple overseas crypto exchanges, blockchain-tracing experts, and service-out applications under PD6B.

Key cost components include counsel’s fees for drafting the application and attending the hearing; solicitor time for preparing the evidence, corresponding with respondents, and managing service; expert fees for blockchain-tracing or forensic-accounting reports; and court fees. Applicants should also budget for a cross-undertaking in damages, while not a cash outlay, the undertaking represents a contingent financial exposure that should be assessed and, in some cases, fortified by security.

Estimates only, actual costs vary significantly by case complexity, number of respondents, and counsel seniority. Practitioners should obtain detailed fee estimates from their instructed team.

Risk, Strategic Alternatives, and Enforcement

Before making a Norwich Pharmacal application, practitioners should weigh several strategic considerations. First, if the information sought is obtainable through police enquiries, subject-access requests, or voluntary disclosure by the respondent, the court may refuse the order on the ground that it is not “necessary.” Second, an unsuccessful application exposes the applicant to adverse costs orders, and where the application was made without notice, a failed duty of full and frank disclosure can result in the order being set aside with indemnity costs.

In appropriate cases, a Norwich Pharmacal order may be combined with a freezing injunction (Mareva order) or a proprietary injunction to prevent dissipation of assets while the disclosure process unfolds. This combined approach is particularly common in crypto-fraud claims, where the speed of digital transfers creates an acute dissipation risk.

If the respondent refuses to comply with a Norwich Pharmacal order, enforcement options include committal for contempt of court (for individuals) or sequestration of assets (for corporate respondents). Where the respondent is outside the jurisdiction, enforcement may require recognition of the English order in the respondent’s home courts, a process that adds cost and delay but remains viable in many common-law and treaty jurisdictions.

Practical Annex, Sample Checklist, Application Timeline, and Order Language

The following checklist and timeline provide a practical framework for instructing teams preparing a Norwich Pharmacal application.

Pre-application checklist:

• Confirm that a good arguable case of wrongdoing exists and is supported by evidence.
• Identify the respondent(s) and confirm their involvement (“mixed up”) in the wrongdoing.
• Verify that the information is not obtainable by other reasonable means.
• Commission any necessary expert reports (blockchain tracing, forensic accounting).
• Prepare a draft order specifying precisely the information or documents sought.
• Assess whether the application should be made without notice and, if so, prepare full and frank disclosure.
• Prepare the cross-undertaking in damages and assess whether security is needed.
• Where service out is required, identify the correct PD6B gateway and prepare the service-out application.

Typical timeline (urgent ex parte application):

• Day 1–3: Instruction, preliminary assessment, commission tracing report.
• Day 4–7: Draft application notice, witness statement, and draft order.
• Day 7–10: Issue and obtain hearing date (urgent applications can be listed within 24–48 hours).
• Day 10–14: Hearing; order granted; service on respondent(s).
• Day 14–28: Return date for any without-notice order; respondent’s compliance or challenge.

Sample order recitals (illustrative):

UPON the Applicant’s application by Application Notice dated [date], supported by the witness statement of [name] dated [date]; AND UPON the Court being satisfied that there is a good arguable case that a wrong has been carried out; AND UPON the Court being satisfied that the Respondent is mixed up in the said wrongdoing; AND UPON the Applicant giving the cross-undertaking set out in Schedule A hereto; IT IS ORDERED THAT the Respondent shall, within [14] days of service of this Order, disclose to the Applicant’s solicitors [specified information/documents].

Conclusion

Understanding how to obtain a Norwich Pharmacal order, from satisfying the three-part test to navigating PD6B gateways for overseas crypto exchanges, is an indispensable skill for civil fraud practitioners in 2026. The jurisdiction continues to evolve as courts adapt equitable principles to digital-asset fraud and cross-border intermediaries. Choosing correctly between a Norwich Pharmacal order, a Bankers Trust order, and statutory CPR disclosure routes can determine whether a fraud claim succeeds or stalls at the investigation stage. Practitioners facing these decisions should seek specialist civil fraud counsel through the Global Law Experts lawyer directory to ensure that applications are drafted precisely, served effectively, and enforced robustly.

Sources

1. Norwich Pharmacal Co v Commissioners of Customs & Excise, House of Lords (BAILII)
2. Civil Procedure Rules, Part 31 (Disclosure and Inspection of Documents)
3. Practice Direction 6B, Service Out of the Jurisdiction
4. Wilden v Person Unknown [2026] EWHC 1355 (KB), Approved Judgment
5. ICO Guidance, Sharing Personal Data with Law Enforcement Authorities
6. Justice and Security Act 2013, Explanatory Notes (legislation.gov.uk)