Norwich Pharmacal Orders: Identifying Fraudsters

You have been defrauded and the police have frozen a bank account — but you do not know who holds that account. Without a name, you cannot sue. A Norwich Pharmacal order solves this problem by compelling the bank to disclose the account holder’s identity, along with other key information you need to pursue recovery.

This article explains how Norwich Pharmacal orders work in Hong Kong, when you need one, and what the process involves in practice.

What Is a Norwich Pharmacal Order?

A Norwich Pharmacal order (often abbreviated to “NPO”) is a court order that compels an innocent third party to disclose information about a wrongdoer. The order takes its name from the English House of Lords decision in Norwich Pharmacal Co v Customs and Excise Commissioners [1974] AC 133, where the court held that a party who becomes “mixed up” in wrongdoing — even innocently — has a duty to assist the victim by providing information to identify the wrongdoer.

In fraud cases, the “innocent third party” is almost always a bank. The bank did not participate in the fraud, but it processed the fraudulent transfer and holds account records that reveal who received the money.

Norwich Pharmacal orders are an equitable remedy. They are not automatic — the court exercises discretion and will only grant one where the conditions are satisfied and the interests of justice require it.

When Do You Need a Norwich Pharmacal Order?

A Norwich Pharmacal order is necessary whenever you need information from a third party to identify or locate the person who defrauded you, or to trace where your money went. Common scenarios include:

• You transferred money to a bank account but only know the account number — not the account holder’s identity
• You know the initial recipient but need bank records to trace onward transfers to secondary and tertiary accounts
• You need transaction records to quantify how much money remains recoverable
• You need the account holder’s address to serve court proceedings
• You need to identify the person behind a cryptocurrency wallet used to receive stolen funds

Without this information, you cannot commence meaningful civil proceedings.

The Three Requirements

Hong Kong courts require an applicant to satisfy three conditions before granting a Norwich Pharmacal order. These were set out in A Co v B Co [2002] 2 HKC 497 and have been consistently applied since:

1. Cogent and compelling evidence of serious wrongdoing

You must present reliable evidence that a serious wrong has occurred. The standard of proof must be proportionate to the seriousness of the allegation — in fraud cases, this typically means documentary evidence of the transfer, the circumstances of the deception, and any communications with the scammer. The court will not grant an order based on mere suspicion.

2. The order must produce substantial benefit

You must demonstrate clearly that the disclosure will deliver worthwhile results — for example, identifying the wrongdoer, determining whether proceedings have merit, or tracing assets. The court will not grant an order that serves no useful purpose or where the information is available through other means.

3. The disclosure sought must be specific and narrow

You cannot use a Norwich Pharmacal order as a general fishing expedition. The request must be limited to specific documents or classes of documents that are necessary to advance your claim. Courts have said that orders will not be granted where compliance would require examining large volumes of documents at disproportionate time and cost.

What Information Can Banks Be Ordered to Disclose?

When a Norwich Pharmacal order is granted against a bank, the court typically orders disclosure of:

• Account holder identity — the name of the individual or company, identification documents, and company registration number
• Account opening documents — the application form, proof of identity, and proof of address provided when the account was opened
• Residential or correspondence address of the account holder
• Bank statements — showing the balance and all transactions over a specified period
• Remittance records — details of incoming and outgoing transfers, including the names of senders and recipients of onward transfers

This information serves two purposes: it tells you who to sue, and it reveals where the money went next.

Multi-Tier Tracing

In most fraud cases, money does not sit in the first account it reaches. Fraudsters typically move funds through multiple accounts rapidly. Norwich Pharmacal orders allow multi-tier tracing: once the first bank discloses where funds were transferred onward, you can apply for further Norwich Pharmacal orders against the next bank in the chain.

Each layer requires a separate application, and each adds cost. This is why a cost-benefit analysis is essential before pursuing multi-tier tracing — at some point, the legal costs may exceed the remaining recoverable funds.

The Two-Step Procedure: Gagging Order First

In fraud cases, there is an obvious risk: if the bank notifies the account holder that a disclosure application has been made, the account holder may immediately move or hide remaining funds. To prevent this, Hong Kong courts developed a two-step procedure confirmed in Asiya Asset Management (Cayman) Limited v Dipper Trading Co., Limited [2019] HKCU 1555.

Step 1: Ex parte gagging order

You first apply without notice to the bank for a gagging order under section 21L of the High Court Ordinance (Cap. 4). This prohibits the bank from informing the account holder (or anyone else) that proceedings have been commenced or that a disclosure application is being made. The gagging order is granted on an urgent basis, typically on the same day the application is filed.

Step 2: Inter partes Norwich Pharmacal hearing

With the gagging order in place, you then serve notice of the Norwich Pharmacal application on the bank and proceed to a hearing at which the bank has an opportunity to make submissions. This is the substantive hearing where the court decides whether to grant the disclosure order.

This two-step approach balances two competing interests: the victim’s need for urgency and secrecy, and the bank’s right to be heard before being compelled to disclose customer information. Hong Kong courts have emphasised that this procedure should be followed save in the most exceptional circumstances — applicants who attempt to obtain both the gagging order and the Norwich Pharmacal order ex parte in a single hearing without proper justification risk having their application refused.

When is a gagging order justified?

The court treats gagging orders as exceptional remedies. You must show compelling reasons supported by clear and cogent evidence — for example, a real prospect that the suspected wrongdoer, if alerted to the proceedings, would take steps to defeat the purpose of the order, such as dissipating assets or destroying evidence.

Bank Costs and the Indemnity Obligation

The bank is an innocent party — it did not cause the fraud. Accordingly, the applicant must:

• Pay the bank’s legal costs on an indemnity basis, meaning all reasonable costs the bank incurs in responding to the application and complying with the order
• Provide an undertaking in damages to compensate the bank for any loss caused by the order
• Give full and frank disclosure to the court of all material facts, particularly if the gagging order application is made without notice

The obligation to indemnify the bank’s costs is a significant practical consideration. Each bank named in the application will typically instruct its own solicitors, and the applicant bears those costs regardless of the outcome of the underlying fraud claim. Where multiple banks are involved across several tiers of tracing, the cumulative cost of bank indemnities can be substantial.

Norwich Pharmacal Orders Against Cryptocurrency Exchanges

Hong Kong courts recognise cryptocurrency as property (Re Gatecoin [2023] HKCFI 914). Norwich Pharmacal orders can be obtained against cryptocurrency exchanges operating in or accessible from Hong Kong, compelling them to disclose:

• Customer identification and verification (KYC) documents
• Transaction records showing the source and destination of crypto transfers
• IP addresses and device information associated with the relevant account
• Wallet addresses linked to the customer

This is an evolving area. Centralised exchanges that hold customer information respond to Norwich Pharmacal orders in much the same way as banks. Decentralised platforms that do not collect customer data present greater challenges — though blockchain analysis can sometimes supplement the information obtained through court orders.

Extraterritorial Scope: Overseas Bank Branches

A significant development in Hong Kong law is the decision in A1 and A2 v R1, R2 and R3 [2021] HKCFI 650, where the Court of First Instance granted a Norwich Pharmacal order requiring Hong Kong-incorporated banks to disclose information held at their Macau branches.

The court reasoned that a bank’s overseas branch is not a separate legal entity — it is part of the same Hong Kong-incorporated company. Because the banks were regulated by the Hong Kong Monetary Authority (HKMA) and subject to extensive record-keeping requirements that extended to their overseas branches, the court was satisfied that the banks had access to, control over, and could obtain possession of documents held in Macau.

This decision is important for fraud victims because fraudsters frequently move money to accounts at overseas branches of Hong Kong banks (particularly in Macau and mainland China). The ruling means that a single Norwich Pharmacal application in Hong Kong can potentially capture account information held across the bank’s entire branch network, without the need to commence separate proceedings in each jurisdiction.

Practical Timeline

The typical timeline for a Norwich Pharmacal application in a fraud case is:

Total from filing to receiving disclosure: approximately 4 to 12 weeks, depending on the complexity of the case and the court’s schedule.

If multi-tier tracing is required, each subsequent layer adds a further cycle of application and disclosure.

Frequently Asked Questions

Can I apply for a Norwich Pharmacal order without first suing the fraudster?

Yes. A Norwich Pharmacal application is made by originating summons — it is a standalone proceeding against the bank (or other third party). You do not need to have commenced proceedings against the wrongdoer. In fact, the whole purpose of the order is often to identify the wrongdoer so that proceedings can then be commenced.

What if the bank opposes the application?

Banks rarely contest Norwich Pharmacal orders on the merits. Their typical concern is ensuring that the procedural requirements are met, that the scope of disclosure is not excessively broad, and that their costs will be covered. Banks are generally cooperative once a valid court order is in place.

Can I obtain a Norwich Pharmacal order and a Mareva injunction at the same time?

Yes. In practice, the two remedies are frequently sought together. The Norwich Pharmacal order identifies the wrongdoer and traces the funds; the Mareva injunction freezes the assets to prevent dissipation while you pursue recovery. Both can be accompanied by gagging orders.

Is a Norwich Pharmacal order available for proceedings outside Hong Kong?

Yes. Hong Kong courts can grant Norwich Pharmacal orders in aid of foreign proceedings. If your substantive claim is being pursued in another jurisdiction but you need disclosure from a Hong Kong bank, you can apply for an NPO in Hong Kong to obtain that information.

How much does a Norwich Pharmacal application cost?

The cost depends on complexity, but as a guide: you will incur your own solicitor’s fees for preparing and presenting the application, court filing fees, and the bank’s legal costs (which you must indemnify). For a straightforward single-bank application, the total cost is typically in the range of tens of thousands of Hong Kong dollars. Multi-tier tracing involving several banks will cost significantly more. A solicitor who handles fraud recovery matters can provide a more specific estimate based on the facts of your case.

What happens after I receive the disclosure?

Once you know the account holder’s identity and have traced the funds, you can commence proceedings against the wrongdoer. This typically involves issuing a writ of summons, applying for a Mareva injunction to freeze their assets, and ultimately obtaining judgment and enforcing it against the frozen funds — for example, through a garnishee order directing the bank to pay the funds to you.