SFO expands self-reporting route for corporates in UK fraud cases
The Serious Fraud Office is updating its corporate cooperation framework to give companies a more direct route into self-reporting discussions on suspected fraud, bribery and corruption. The change adds a dedicated contact channel for legal representatives and builds on guidance first revised in April 2025.
Highlights
- The Serious Fraud Office introduced a new self-reporting process on 13 October, allowing legal representatives early discussions via a dedicated email channel with Matthew Wagstaff.
- The SFO now promises a response within 48 business hours of self-report, a six-month decision window on investigations, and regular updates for cooperating companies.
- Revised Corporate Cooperation Guidance clarifies that DPA negotiation timing starts on invitation acceptance and requires companies take a proportionate, risk-based approach to disclosing misconduct.
New channel for early self-reporting talks
As reported by GOV.UK, the Serious Fraud Office said on 13 October that legal representatives for companies can now discuss a potential self-report directly with Director of Legal Services and General Counsel Matthew Wagstaff before making a formal submission. The new process introduces a dedicated email address, GeneralCounsel@sfo.gov.uk, aimed at creating a quicker and clearer route for corporates considering engagement with the agency.The update is announced by Wagstaff at the International White Collar Institute in London, following feedback from legal practitioners after the guidance was first revised in April 2025. He is expected to say the SFO sees a swifter path into deferred prosecution agreement negotiations as being in the interests of all parties, while adding that prosecutors still face limits on the commitments they can make.
The SFO's Corporate Cooperation Guidance states that companies which report promptly and cooperate fully will, except in exceptional circumstances, be invited to enter negotiations for a Deferred Prosecution Agreement. The framework also says the agency will respond within 48 business hours of a self-report, provide regular updates, decide within six months whether to open an investigation, and seek to conclude investigations within a prompt timeframe.
Clarifications for companies and legal advisers
The revised guidance also makes clear that corporates are expected to take a proportionate, risk-based approach when identifying the full extent of any suspected criminal conduct. In addition, it confirms that the six-month period for concluding DPA negotiations begins when an invitation to negotiate is accepted, rather than at an earlier stage.For businesses operating in the UK, the changes are designed to give legal advisers more certainty over timing, access and expectations when weighing whether to self-report potential misconduct. The move also signals the SFO's effort to encourage earlier corporate engagement in fraud and corruption cases while making its enforcement process more predictable.
Our earlier article on the surge in complaints handled by the UK Office for Responsible Business Conduct explained that cases against multinationals operating in Britain have risen sharply as broader OECD guidelines expand expectations on environmental harm, human rights and supply-chain due diligence. It also noted that while the body cannot levy fines, its investigations and public findings can amplify reputational risk and increase pressure on companies to strengthen compliance frameworks.