You know money has gone and you know how it left, but not who took it. A Norwich Pharmacal order compels a third party caught up in the wrongdoing, usually a bank or a service provider, to disclose what it holds. This is what the application has to establish and where it commonly fails.
The difficulty in a fraud is rarely that nobody knows what happened. It is that the person who did it is a name on a payment instruction, an account number and a company registered somewhere else, and there is no defendant to sue. Someone does hold the missing piece, usually a bank or an intermediary who handled the transaction without knowing what it was, and that person cannot hand it over voluntarily because they owe a duty of confidence to their own customer. A Norwich Pharmacal order is the mechanism for compelling them.
What the order does
It is a disclosure order directed at a third party who has become mixed up in wrongdoing, whether or not that person knew anything about it, requiring them to disclose information or documents in their possession. The classic respondent is innocent: a bank that processed a transfer, a company services provider that acted as registered agent, a platform that hosted an account.
The order is not a claim against the respondent. Nothing is sought from them except the information, and their position is that of a witness compelled rather than a defendant sued. That framing matters to how the application is presented, and it is one of the reasons a well-drawn application is often met with a neutral stance rather than opposition.
The jurisdiction is not the creature of a dedicated statute. The Cyprus courts grant these orders under section 32 of the Courts of Justice Law 14/1960, which is the substantive source of the power to make interim orders, applying the principles of the English Norwich Pharmacal line of authority as a matter of equity, with procedure governed by the Civil Procedure Law, Cap. 6 and the rules of court.
When it is worth applying
Three situations recur:
- There is no defendant. The wrongdoer is anonymous or hidden behind a corporate structure, and until the identity is established there is nobody to sue and no proceedings to issue. This is common in payment fraud and in anonymous online publication.
- Money has to be followed. Funds have moved through accounts and the chain has to be reconstructed before there is any prospect of recovering them or of freezing what remains.
- The claim cannot be pleaded. The wrongdoer is known, but the documents needed to set out what was done are held by someone else.
The order is most often sought before any proceedings have been commenced, so that a defendant can be identified and a claim brought, and it can also be sought by application in an existing case.
What the court has to be satisfied of
The requirements are cumulative, and an application that treats them as formalities is the one that fails.
A good arguable case of wrongdoing. The court is being asked to override a duty of confidence, and it will not do so on suspicion alone. The evidence has to show wrongdoing of an identifiable kind, not merely a transaction that turned out badly.
Involvement of the respondent. The respondent must have become mixed up in the wrongdoing, even innocently and even unknowingly. A person who is simply likely to know something, without any involvement in the events, is a witness rather than a proper respondent.
Necessity. The information must be necessary to enable the applicant to act. If it can be obtained another way, from another source, or through an ordinary procedural route, that is the answer to the application.
Proportionality and the exercise of discretion. Even where the requirements are met the order is discretionary. The court weighs the applicant's need against the respondent's burden and the interests of the person whose information is being disclosed, and an application that asks for everything held about a person over several years invites refusal on this ground alone.
What the application has to contain
The affidavit does the work. It has to set out the facts of the wrongdoing in sequence and with the documents exhibited, explain precisely how the respondent came to be involved, identify what other steps have been taken to obtain the information and why they failed, and justify the scope of what is sought.
The scope is where most applications are weakest. Disclosure should be requested category by category and confined by date range and subject matter, so that the respondent can identify what it holds and the court can see that the order is limited to what is needed. A request framed as "all documents relating to" a person or an account is both difficult to comply with and difficult to grant.
Two further points belong in the application rather than in an afterthought. The first is who bears the cost of the respondent's compliance, since the respondent is a stranger to the dispute. The second is whether the wrongdoer is to be notified, because in a tracing case advance notice will frequently destroy the value of the order before it is complied with.
What you can do with what you get
Disclosure is granted for a purpose, and the application should ask for the order to define that purpose and to restrict use accordingly. Information obtained in order to identify a defendant should not be assumed to be available for a different dispute, for publication, or for a regulatory complaint, without going back to the court.
The practical limits are worth stating plainly. The respondent can only disclose what it actually holds, which is often less than the applicant expects, and it will disclose it as at the date of compliance rather than as at the date the money moved. Where funds have passed through several institutions, the exercise may have to be repeated. And the entire value of the order depends on speed: records are retained for finite periods and balances do not stay where they are.
What to send us
A chronology of what happened and when, the payment instructions, transfer confirmations and account details, the correspondence with your bank and with the counterparty, and anything identifying the third party you believe holds the information. If any institution has already been asked and has refused, send that refusal, because it is direct evidence that the information cannot be obtained without an order.
Applications of this kind sit within our litigation and arbitration practice. Where the object is to enforce a judgment or award already obtained, see Enforcing Foreign Judgments and Arbitral Awards in Cyprus. The patterns that lead to these applications in property transactions are set out in Property Scams and Red Flags in Cyprus.
Discuss your own situation with us
Questions we are asked
How fast do we have to move?
At once. Money moves and accounts close, and an order applied for late arrives at a record that leads nowhere. The value of the order is the trail that still exists on the day it is served.
Why are applications of this kind refused?
Usually on necessity, where the information was available elsewhere and that route was not tried, and on proportionality, where everything is asked for instead of the specific thing.
What is a Norwich Pharmacal order used for?
Compelling a third party who has become mixed up in wrongdoing, usually a bank or an intermediary, to disclose information or documents it holds, so that a wrongdoer who is only a name on a payment instruction can be identified and sued. The classic respondent is innocent and cannot hand the material over voluntarily because it owes a duty of confidence to its own customer. The order is not a claim against that respondent: nothing is sought from them but the information, and their position is that of a witness compelled rather than a defendant sued.
What is the legal basis for the order in Cyprus?
There is no dedicated statute. The Cyprus courts grant these orders under section 32 of the Courts of Justice Law 14/1960, which is the substantive source of the power to make interim orders, applying the principles of the English Norwich Pharmacal line of authority as a matter of equity, with procedure governed by the Civil Procedure Law, Cap. 6 and the rules of court.
What does the court have to be satisfied of?
Four things, cumulatively, and an application that treats them as formalities is the one that fails. A good arguable case of wrongdoing, because the court is being asked to override a duty of confidence and will not do so on suspicion alone. Involvement of the respondent in the wrongdoing, even innocently and unknowingly, since a person merely likely to know something is a witness rather than a proper respondent. Necessity, because if the information can be obtained another way that is the answer to the application. And proportionality, since even where the requirements are met the order is discretionary and a request for everything held about a person over several years invites refusal on that ground alone.
When is it worth applying?
Three situations recur. There is no defendant, because the wrongdoer is anonymous or hidden behind a corporate structure, which is common in payment fraud and anonymous online publication. Money has to be followed, because funds have moved through accounts and the chain has to be reconstructed before there is any prospect of recovery or of freezing what remains. Or the claim cannot be pleaded, because the wrongdoer is known but the documents needed to set out what was done are held by someone else. The order is most often sought before any proceedings have started, and can also be sought in an existing case.
What makes an application weak?
Scope, more often than anything else. Disclosure should be requested category by category and confined by date range and subject matter, so that the respondent can identify what it holds and the court can see the order is limited to what is needed; a request framed as all documents relating to a person or an account is both hard to comply with and hard to grant. Two further points belong in the application rather than in an afterthought: who bears the cost of the respondent's compliance, since the respondent is a stranger to the dispute, and whether the wrongdoer is to be notified, because in a tracing case advance notice will frequently destroy the value of the order before it is complied with.
Can we use the information for anything else once we have it?
Not on an assumption. Disclosure is granted for a purpose, and the application should ask for the order to define that purpose and restrict use accordingly. Information obtained in order to identify a defendant should not be treated as available for a different dispute, for publication, or for a regulatory complaint.
Related Reading
This article is for general information only and does not constitute legal advice. Laws and their application can change, and individual circumstances differ. For advice on your own matter, contact Klitos Platis at klitos@kleanthousplatis.com or telephone +357 22 680 330.
Klitos Platis
Advocate, Partner
Kleanthous & Platis LLC, Nicosia · Revised 4 August 2026
Need advice on your own matter?
Briefly describe your situation, the people involved and any deadline.
We reply within one business day. We will ask for documents once we confirm we can act.
Receive legal updates by email
When Cyprus law changes, hear it from us
One short email when something changes that matters: new legislation, a decision worth knowing, a deadline. Written by the partners, no marketing, unsubscribe with one click.
You are on the list. The next update on Cyprus law will reach your inbox.
That did not go through. Please write to office@kleanthousplatis.com and we will add you.
Your address is used for these updates and nothing else. Privacy notice.