Skip to content
Quick exit
Leading the UK's fight to cut serious and organised crime

DDoS attacks are illegal

If you conduct a DDoS attack, or make, supply or obtain stresser or booter services, you could receive a prison sentence, a fine or both.

What the law says

The Computer Misuse Act 1990 makes it illegal to intentionally impair the operation of a computer or prevent or hinder access to a program/data on a computer unless you are authorised to do so.

This means that Distributed denial of Service (DDoS) and similar types of attacks are criminal under UK law.

The Act also says it’s illegal to make, supply or obtain stresser or booter services in order to facilitate DDoS attacks.

This law exists because DDoS attacks and the use of stresser or booter services can cause significant harm to organisations, businesses and individuals.

Make the right choice

The NCA and the police take cyber crime extremely seriously. We work with national and international partners to find and prosecute offenders.

If you become involved in cyber crime you could face the following consequences:

  • Having your computers taken away and your internet access restricted.
  • Paying a penalty or fine.
  • A significant prison sentence.
  • A criminal record. This could affect your education, future career prospects and ability to travel overseas.

Cyber crime is not victimless. Imagine how you would feel if someone illegally accessed your private and personal information, could control your computer or could stop you using the internet.

Where your skills could take you

The NCA and its partners support some of the UK’s biggest games design, cyber security and programming businesses to find talented young people with the skills to succeed in those industries.

These firms offer challenging careers which are financially rewarding. Average earnings in Cyber Security industry are £72,500 per year, nearly three times the UK national average.

For further information please see the following websites:

If you have been the victim of cybercrime, please contact Action Fraud.