Malicious communications: offence, penalties and defence

Sent an angry message, or received one that crossed the line? In the UK, a single message can trigger a police complaint, but many cases never reach court. The real issue is not whether the message felt abusive, but whether it crosses the legal threshold for malicious communications. This guide explains what counts under the Malicious Communications Act 1988, what police and the CPS usually do in practice, and whether it is worth pursuing, defending, or dropping. If you are unsure whether a message meets the criminal threshold, tailored advice from a criminal defence solicitor can help you decide your next step.

Quick answer: Is malicious communications illegal in the UK?

Malicious communications is a criminal offence in the UK where a person sends a grossly offensive or indecent message to someone with intent to cause distress or anxiety.

• It must be sent to a person, not just posted generally.
• The content must be indecent or grossly offensive.
• There must be intent to cause distress or anxiety.
• The offence is either way, not summary-only.
• Maximum sentence: up to 2 years’ imprisonment.

In practice: many complaints are not charged because intent, context, or sender identity cannot be clearly proven.

Do you have a valid malicious communications claim or defence?

Use this quick check to judge whether the case looks strong in practice.

A complaint is usually stronger if:

• you have the full thread, not one screenshot.
• there was repetition, humiliation, or escalation.
• the message was direct, targeted, or clearly aimed at you.
• the sender can be linked to an account, number, or device.
• the wording clearly points to distress, fear, or degradation.

A defence is usually stronger if:

• identification is weak or disputed.
• intent is being assumed rather than proved.
• it was a mutual argument or heated exchange.
• the wording was rude, but not criminally offensive.
• the message was not clearly sent to a specific person.

The strongest cases are not the most emotional ones. They are the ones that can actually be proved.

What does the Malicious Communications Act say in plain English?

The law is narrower than most people think. It does not criminalise every abusive or upsetting message.

In simple terms, a message may become a malicious communications offence where:

• it is sent to another person.
• it is indecent or grossly offensive.
• one purpose is to cause distress or anxiety.

The hardest part is usually intent. This is where many cases fail. Feeling upset is not enough. Police and prosecutors usually look for timing, repetition, prior conflict, and escalation to work out why the message was sent.

Since the Online Safety Act 2023, older parts of the law dealing with threats or false messages are no longer the main route for newer conduct. Depending on the facts, newer cases may fall under different offences instead.

What are the malicious communications points to prove?

This is where many cases succeed or fail.

To prove malicious communications, the prosecution usually needs to show:

• the sender can be identified.
• a message was sent to a specific person.
• there was intent to cause distress or anxiety.
• the content was indecent or grossly offensive.

Most cases fail on proof, not wording. Missing context, weak identification, or incomplete message history can quickly undermine a complaint.

CPS guidance also makes clear that a general post, blog, or public comment may not qualify unless it was clearly directed at a person and likely to reach them.

Example:

A Facebook post saying “some managers are scum” may feel targeted, but it is usually harder to prove than a direct message sent to a named manager.

What evidence makes a strong malicious communications case?

The difference between a strong and weak case usually comes down to evidence quality.

Strong vs weak evidence

Selective or incomplete evidence is one of the main reasons cases fail.

Example:
After a commercial dispute, a former client sends late-night WhatsApp messages calling a director “filth”, attaching a doctored image, and threatening to expose them to staff. That is usually much stronger than a single email saying “you’re a disgrace” after a refund argument.

A hidden practical point: deletion often harms the sender more than the complainant. Once the worst message is preserved, deleted context may remove the very material that could have explained it.

Is malicious communications a summary offence or an either-way offence?

Malicious communications under section 1 of the Malicious Communications Act 1988 is an either-way offence. It can be dealt with in the magistrates’ court or the Crown Court, depending on the seriousness of the case.

Confusion often arises because some Communications Act offences are summary-only, and the Sentencing Council provides guidelines for those offences. However, those guidelines do not apply in the same way to malicious communications cases.

What usually happens after you report or are accused of malicious communications in the UK?

Most cases are filtered early.

Police usually focus on three questions:

• can the sender be identified?
• is the behaviour criminal, or just offensive?
• is there a pattern, vulnerability, or wider risk?

What often happens next:

• officers ask for the full message history.
• one-message cases are treated more cautiously.
• public-post cases may be redirected or dropped.
• repeated, racist, sexual, or obsessive conduct gets more attention.
• charging decisions can take weeks or months.

Example:

One abusive text after an argument may be recorded but not charged. Repeated messages, public tagging, and contact with an employer make escalation much more likely.

A single message can be enough in law, but enforcement is usually stronger where there is a pattern.

What counts as malicious communications in practice?

People often get this wrong because the emotional impact and the legal test are not the same thing.

A case is more likely to count as malicious communications where:

• the message is targeted.
• there is evidence of intent.
• the sender can be identified.
• there is repetition, escalation, or humiliation.
• the wording is seriously degrading or abusive.

Common misunderstandings include:

• overlooking free speech protections.
• treating public posts like direct messages.
• thinking one message will usually lead to charge.
• ignoring how prior disputes affect how intent is judged.
• assuming a message is criminal simply because it was upsetting.

The issue is not just what happened, but whether it can be clearly framed and proved as a criminal case.

What are the punishments for sending malicious communications?

The maximum sentence is set by law, but the real outcome depends on seriousness.

Under section 1, the maximum penalty is:

• up to 2 years’ imprisonment in the Crown Court.
• up to 12 months’ imprisonment in the magistrates’ court.
• a fine, or both.

Sentence risk rises where there is:

• wide distribution.
• a vulnerable victim.
• threats or pressure.
• serious distress or disruption.
• repeated or sustained messages.
• hostility based on protected characteristics.

What that usually means in practice

• one-off lower-level conduct: fine or community outcome.
• repeated targeted conduct: community order or custody risk.
• sustained degrading campaign: significantly higher custody risk.

Can you defend a malicious communications allegation?

Yes. Many cases turn on context, intent, and identification.

Common defence points include:

• no intent to cause distress.
• identification is weak or disputed.
• the message was taken out of context.
• it was not clearly sent to a specific person.
• the account was shared, hacked, or not proven.
• the words were crude, but not criminally grossly offensive.
• prosecution would be disproportionate in light of free speech protections.

CPS guidance accepts that speech which is merely offensive, shocking, satirical, or part of a heated exchange should not automatically be prosecuted.

Example:

A sarcastic meme sent during a bitter supplier dispute may look serious on its own. But if the full conversation shows a two-way argument and no clear intent to cause distress, the defence may be stronger than it first appears.

What can you realistically expect, and is it worth it?

Knowing the likely timeline and outcome helps you decide whether action is worth the effort.

Likely timeline

• days: preserve evidence and report.
• weeks: police assessment.
• months: interview, review, and any CPS charging decision.

Likely outcomes

• no further action.
• warning or platform action.
• police interview.
• charge.
• guilty plea or trial.

Is it worth pursuing?

Pursue it if:

• the conduct is targeted.
• the sender is identifiable.
• there is repetition or humiliation.
• safety, work, or mental health is affected.

Drop or rethink if:

• it was a one-off mutual exchange.
• proof is weak.
• your real goal is emotional payback rather than protection.

Escalate if:

• there is vulnerability.
• there are racist or sexual elements.
• the behaviour is spreading.
• the sender is becoming obsessive.

FAQs

What is malicious communications? It is the offence of sending an indecent or grossly offensive message to another person with the purpose, or one purpose, of causing distress or anxiety.

Is malicious communications a crime in the UK? Yes. It is a criminal offence in England and Wales under section 1 of the Malicious Communications Act 1988.

What are the punishments for malicious communications? Penalties can include a fine, community order, or imprisonment, depending on the seriousness, plus a criminal record.

Can one message be enough for malicious communications? Yes. A single message can be enough, but cases are usually stronger where there is clear intent, targeting, or repetition.

What if the sender used a fake account? This makes cases harder, but not impossible. The key issue is whether the account can be linked to a real person or device.

This guide provides general information, not legal advice.

Malicious communications cases usually turn on proof, context, and intent rather than emotion alone. If you are deciding whether to report, defend, or step back, the key question is not just whether the message was upsetting, but whether the legal threshold can actually be proved.

Get clear advice early

If you are dealing with malicious communications, speaking to a solicitor can clarify your position and protect your interests. Explore Qredible’s network of experienced solicitors to get tailored advice quickly and confidently.

NEXT STEPS:

• Preserve evidence: save full message threads, timestamps, usernames, and any related context before anything is deleted
• Assess your position: check whether you can prove intent, targeting, and identity; not just that the message was upsetting
• Take the right action: report to the platform or police where appropriate, and seek legal advice early if risk or escalation is involved