The Nathan Gill Case: Isolated Foreign Malign Interference Case or a Broader Hybrid Threat?

Nathan Gill, a former Member of the European Parliament and ex-leader of Reform UK in Wales, was sentenced to ten and a half years in prison after accepting bribes to promote pro-Russian narratives. His conviction, following an investigation by Counter Terrorism Policing, prompted the UK government to commission the Rycroft Review into foreign financial influence and interference in UK politics. That review reported in March 2026 and recommended tighter safeguards on political finance, party regulation, enforcement and online political influence.

NSA Convictions

Early convictions under the National Security Act 2023 (NSA) show that the UK can prosecute proxy subversion, destabilisation and sabotage operations as national security offences. Yet Gill’s case, prosecuted as bribery, raises the harder question of when should ordinary crime rather be framed as malign foreign interference, not only to punish wrongdoing, but to safeguard democratic processes through deterrence, attribution and denial?

The NSA was intended to strengthen homeland resilience against foreign malign interference operating below the threshold of armed conflict. In this context, the criminal justice system becomes a tool for signalling detection, attribution, denial and deterrence capabilities within the domestic political and social domains that hostile states target deliberately. Three recent cases illustrate the point. Gill involved foreign-linked elite capture, inducement and narrative laundering through elected office. Phillips involved attempted institutional penetration and espionage in support of individuals he believed to be acting for a foreign intelligence service. Earl and others involved criminal proxy networks recruited for deniable sabotage linked to Russia’s war against Ukraine.

In Phillips, the NSA framing aligned directly with the strategic character of the conduct. Phillips sought to assist individuals he believed were Russian agents, was in the process of seeking employment with Border Force and offered private information about the then Secretary of State for Defence. His conduct was human, access-based infiltration. The strategic logic was enablement, building proximity to systems, people and information that could later support disruption, coercion or intelligence exploitation. The strategic concern was not only the information offered in that case, but the wider enabling function of such access-building, namely the possibility that proximity to officials, systems and sensitive information could support future intelligence, disruption or coercive operations. The seriousness of that risk is underscored by the UK’s experience of Russian hostile-state activity, including the Litvinenko and Skripal attacks.

In Earl and others, the sabotage framing was even clearer. A warehouse containing humanitarian aid and Starlink equipment destined for Ukraine was attacked by local proxies recruited through networks linked to the Russian Wagner Group. The plot caused serious damage, risked life and was intended to disrupt support for Ukraine and intimidate those assisting it. Here, the legal and strategic narratives pointed in the same direction, namely foreign-linked sabotage on UK soil. Moreover, this case is a useful illustration of how hybrid threat actors can outsource disruption to local intermediaries while extending reach and complicating attribution.

Gill is more difficult. He was convicted for accepting payments originating from a pro-Russian political actor, delivered scripted parliamentary speeches, recruited other MEPs without disclosing his financial motive and used his elected position to advance narratives aligned with Russian interests. In sentencing, the judge found that his conduct compromised the integrity of a supranational legislative body in its dealings with Russia and eroded public confidence in democracy itself. That is not merely a corrupt transaction. It is access to decision-making nodes and the laundering of influence narratives through legitimate democratic platforms in order to subvert foreign policy and weaken defence and security alliances.

It is understandable that prosecutors proceeded under bribery law. The foreign interference offence under the NSA requires proof of foreign power linkage and intent, or recklessness, as to prejudicing UK interests. Bribery may offer a more direct route to conviction. But framing has consequences. If sabotage is treated as national security while elite penetration and capture are framed only as individual level corruption, the cumulative campaign logic and harm, as well as the counter-coercion signalling, risks disappearing from public understanding. The deterrent effect is diminished, and hostile actors, including domestic proxies or enablers, may draw the wrong lesson about the costs of interference. Strategic framing and signalling matters not only to keep adversaries at bay and reassure allies that the UK is defending the integrity of its political system, but also to ensure that the public can see who is seeking to influence democratic debate and destabilise and polarise political and social systems. Voters must be able to trust that the money entering politics is legitimate, that regulators can act against those who evade the rules and that political campaigning material, online or in print, is transparent enough to support free and informed democratic choice.

A Hybrid Threat

Taken together, these cases suggest more than isolated offences. They do not prove a single centrally directed campaign, nor do they amount to the kind of catastrophic strategic information attack or information warfare frequently associated with large-scale war. They are, however, useful examples of the broader hybrid threat challenge, in which hostile activity may be networked and distributed across political, social, military, economic and infrastructural domains, and across physical, informational and cognitive layers, while remaining below conventional thresholds of armed conflict and armed attack. That is why pattern recognition matters. The methods differed – financial inducement, institutional access-building and proxy violence – and they operated across psychological, political, technical and coercive registers. Read separately, each can be framed as bribery, espionage or sabotage. Read together, they point to a broader logic of malign interference, consistent with the patterns identified by the UK Intelligence and Security Committee in its work on Russian, Chinese and Iranian activity, including the degradation of trust, the shaping of perception and decision-making processes to influence behaviour at scale, the probing of institutions, the weakening of coalition cohesion and the complication of state response.

The strategic question is therefore not simply what offence was committed in each case, but whether apparently discrete acts reveal a wider pattern of hostile intent, target selection and cumulative effect. This is not to suggest that the UK response system is failing. On the contrary, these cases show the value of intelligence-led detection and criminal justice response as part of a whole-of-government approach to malign interference. Police, prosecutors, courts and security agencies are helping to detect, attribute and deny hostile activity below the threshold of armed conflict. The remaining challenge is to ensure that successful prosecutions of individual acts do not obscure the strategic campaign logic that may connect them.

The problem is not operational failure, but strategic fragmentation. In Gill, Counter Terrorism Policing identified eight occasions on which he agreed either to make statements himself or to encourage other MEPs to repeat pro-Russian narratives supplied by Oleg Voloshyn. That is why the case should not be understood only as individual corruption. It suggests an attempted influence operation through a broader political communications network.

The Rycroft Review was therefore necessary and serious. Its recommendations on political finance, ‘know your donor’ checks, online advertising, party regulation, enforcement and central government coordination are important steps toward resilience. But its terms of reference were narrow relative to the campaign-level questions raised by the Gill case. The review focused on risks posed by the deployment of foreign money, financial and bribery-related rules, political parties and political finance. Past allegations surrounding the 2016 Brexit referendum were expressly out of scope.

A Right to Free and Fair Elections

That matters because Gill raises harder campaign-level questions that risk falling between institutional remits. How far did the operation reach beyond one corrupt MEP? Which other political actors were targeted, used or encouraged to repeat supplied narratives? Were they witting participants, unwitting amplifiers, or merely exposed to a wider influence environment? Those questions are legitimate and serious, particularly because the political networks in question intersected with UKIP, the Brexit Party and Reform UK in an evolving threat environment where allegations concerning political finance, Russian influence and democratic transparency are both publicly important and legally sensitive. That sensitivity requires procedural and evidential care, but it should not prevent scrutiny of whether vetting, transparency and enforcement guardrails were sufficient to expose the full campaign-level picture.

The point here is not to relitigate Brexit, nor to suggest that the 2016 result can be attributed to Russian interference. The point is narrower and more serious. Brexit was one of the most consequential strategic choices in recent British history, and hostile actors had an obvious strategic interest in European fragmentation. It imposed substantial economic costs and made UK-EU cooperation on foreign, security and defence policy more difficult. After the end of the transition period, there was no official framework through which the UK and EU could develop and coordinate joint responses to emerging foreign policy challenges. As Chatham House and RUSI analyses by Ed Arnold, Richard G Whitman and Malcolm Chalmers have noted in different ways, the UK’s withdrawal from the EU’s Common Foreign and Security Policy and Common Security and Defence Policy mattered strategically because it reduced structured cooperation at precisely the moment when Russia’s war against Ukraine made European cohesion more important. The UK-EU Security and Defence Partnership, agreed on 19 May 2025, is therefore welcome, but it also illustrates the wider point that fracture can be quick, while rebuilding structured political, security and defence cooperation is slower, reactive and costly.

The European Court of Human Rights’ judgment in Bradshaw and Others v United Kingdom illustrates the same structural problem from a human rights perspective. The Court accepted that there was credible evidence of hostile-state disinformation and influence activity affecting UK democratic processes, and that such campaigns may, in principle, engage the right to free elections under Article 3 of Protocol No 1, including positive obligations to protect electoral processes where such interference risks impairing the essence of democratic choice. But it also held that there was no freestanding duty to investigate allegations of Russian interference, emphasised the absence of a clear European consensus on what specific measures are required, and afforded the UK a wide margin of appreciation or discretion to decide on whether and how to respond, if at all. Thus, the Strasbourg Court recognised the threat but left much of the initiative and practical work of detection, investigation, classification and response to domestic institutions.

That said, Romania shows why this category of threat should not be treated casually or allowed to drift through institutional prevarication, while also marking the limits of comparison. The UK has had no equivalent judicial finding that an election or referendum was manipulated to the point that its legality or legitimacy was invalidated. But the annulment of the Romanian presidential election demonstrates how far malign electoral interference can go when opaque funding, platform algorithms, artificial amplification and foreign strategic interests converge. The Romanian Constitutional Court annulled the process after concluding that the free nature of the vote had not been respected. Romania’s Supreme Council of National Defence raised national security concerns around cyber-attacks and manipulation of the electoral process, while the European Court of Human Rights later rejected Călin Georgescu’s application as manifestly ill-founded. Romania is not a comparator for the UK. It is a warning about the seriousness of campaign-level questions before democratic systems reach crisis.

Legal framing therefore matters. Electoral law, bribery law, national security law, foreign influence registration, parliamentary standards, platform regulation, telecommunications security, economic crime and corporate transparency, anti-money laundering, sanctions, ownership transparency, investment screening and intelligence oversight each see part of the problem. None necessarily asks the whole campaign-level question of whether apparently separate acts of money, messaging, access-building, proxy activity, infrastructure probing and opaque economic leverage are connected lines of operation in a wider strategy to weaken strategic resilience – or then how to respond in an effective and appropriate manner. Without that connecting analysis, hostile activity can be detected, regulated or prosecuted in fragments while the strategic pattern remains under-described, diminishing threat perception and weakening response.

It is therefore essential that the Rycroft Review should be built on a review of political finance and stronger safeguards against foreign money, but its focus on financial interference necessarily leaves wider campaign-level questions only partly answered. The recent convictions should therefore be followed by a fuller whole-of-government inquiry capable of examining foreign malign influence operations and their countermeasures in a more systematic way. Recent parliamentary debate on China and foreign interference arrests underline the point. Malign foreign interference is persistent and adaptive, pursuing strategic friction and paralysis within domestic governance, public discourse, policymaking, individual rights protection from transnational repression, critical infrastructure and regional or international alliances. That means treating bribery, commercial leverage, party finance, espionage, proxy sabotage, online manipulation and narrative laundering not as isolated categories, but as potentially connected lines of operation in a broader strategic campaign to weaken strategic resilience without triggering conventional thresholds of armed attack or armed conflict. Drawing on the kind of strategic, operational and tactical approach reflected in emerging work on cognitive security, any fuller inquiry or assessment should examine the multi-domain environment exploited, the capabilities and proxies used, the tactical acts and vectors that may form an operational pattern, the institutional gaps that prevented that pattern being seen earlier, and the strategic responses needed to detect, expose, disrupt and deter future interference. Even where the law does not compel a public inquiry, strategic resilience may still require deeper reckoning, public awareness and clear condemnation of influence campaigns that target electoral judgment, political trust, institutional legitimacy and exploit the cognitive, social and infrastructural vulnerabilities on which effective political democracy depends.

© Michael John-Hopkins, published by RUSI with permission of the author.

The views expressed in this Commentary are the author's, and do not represent those of RUSI or any other institution.

For terms of use, see Website Terms and Conditions of Use.

Have an idea for a Commentary you'd like to write for us? Send a short pitch to commentaries@rusi.org and we'll get back to you if it fits into our research interests. View full guidelines for contributors.