WIREDGOV

The Nathan Gill case exposes the blurred line between corruption and foreign malign interference. Strategic resilience requires seeing the adversary’s wider campaign.

Nathan Gill, a former Member of the European Parliament and ex-leader of Reform UK in Wales, was sentenced to ten and a half years in prison after accepting bribes to promote pro-Russian narratives. His conviction, following an investigation by Counter Terrorism Policing, prompted the UK government to commission the Rycroft Review into foreign financial influence and interference in UK politics. That review reported in March 2026 and recommended tighter safeguards on political finance, party regulation, enforcement and online political influence.

NSA Convictions

Early convictions under the National Security Act 2023 (NSA) show that the UK can prosecute proxy subversion, destabilisation and sabotage operations as national security offences. Yet Gill’s case, prosecuted as bribery, raises the harder question of when should ordinary crime rather be framed as malign foreign interference, not only to punish wrongdoing, but to safeguard democratic processes through deterrence, attribution and denial?

The NSA was intended to strengthen homeland resilience against foreign malign interference operating below the threshold of armed conflict. In this context, the criminal justice system becomes a tool for signalling detection, attribution, denial and deterrence capabilities within the domestic political and social domains that hostile states target deliberately. Three recent cases illustrate the point. Gill involved foreign-linked elite capture, inducement and narrative laundering through elected office. Phillips involved attempted institutional penetration and espionage in support of individuals he believed to be acting for a foreign intelligence service. Earl and others involved criminal proxy networks recruited for deniable sabotage linked to Russia’s war against Ukraine.

In Phillips, the NSA framing aligned directly with the strategic character of the conduct. Phillips sought to assist individuals he believed were Russian agents, was in the process of seeking employment with Border Force and offered private information about the then Secretary of State for Defence. His conduct was human, access-based infiltration. The strategic logic was enablement, building proximity to systems, people and information that could later support disruption, coercion or intelligence exploitation. The strategic concern was not only the information offered in that case, but the wider enabling function of such access-building, namely the possibility that proximity to officials, systems and sensitive information could support future intelligence, disruption or coercive operations. The seriousness of that risk is underscored by the UK’s experience of Russian hostile-state activity, including the Litvinenko and Skripal attacks.

In Earl and others, the sabotage framing was even clearer. A warehouse containing humanitarian aid and Starlink equipment destined for Ukraine was attacked by local proxies recruited through networks linked to the Russian Wagner Group. The plot caused serious damage, risked life and was intended to disrupt support for Ukraine and intimidate those assisting it. Here, the legal and strategic narratives pointed in the same direction, namely foreign-linked sabotage on UK soil. Moreover, this case is a useful illustration of how hybrid threat actors can outsource disruption to local intermediaries while extending reach and complicating attribution.

Gill is more difficult. He was convicted for accepting payments originating from a pro-Russian political actor, delivered scripted parliamentary speeches, recruited other MEPs without disclosing his financial motive and used his elected position to advance narratives aligned with Russian interests. In sentencing, the judge found that his conduct compromised the integrity of a supranational legislative body in its dealings with Russia and eroded public confidence in democracy itself. That is not merely a corrupt transaction. It is access to decision-making nodes and the laundering of influence narratives through legitimate democratic platforms in order to subvert foreign policy and weaken defence and security alliances.

Click here for the full press release