Republic of Malta vs Karim — Unauthorised Computer Access and Data Manipulation

A 23-year-old Bangladeshi national pleaded guilty to unauthorised access to computer systems and data manipulation, receiving a suspended sentence and fine.

The Court of Magistrates (Malta) as a Court of Criminal Judicature · Magistrate Dr. Caroline Farrugia Frendo B.A. (Legal and Humanistic Studies), LL.D., M.Juris (International Law), Dip. Trib. Eccl. Melit. · 4 May 2026

In April 2023, Raad Raiyyan Karim, a 23-year-old Bangladeshi national residing in Birkirkara, Malta, allegedly carried out a series of unauthorised computer-related offences over a four-day period between 22 and 25 April 2023. The charges included unlawfully accessing computer systems and data without authorisation, manipulating or deleting data and software, and using another person's access credentials — such as passwords and usernames — to gain unauthorised entry into information systems. The case was formally brought by the Republic of Malta through Inspector Marcus Cachia, and charges were confirmed on oath during a sitting on 25 July 2023. The proceedings continued for nearly two years before the accused entered a guilty plea on 18 March 2025. In keeping with established practice to safeguard the integrity of the plea, the Court gave the accused time to reconsider his decision and to consult again with his legal counsel before confirming the plea. In assessing the appropriate punishment, the Court took into account several mitigating factors: the guilty plea, the accused's clean criminal record, and the fact that the plea spared the Court the time and resources of a full evidentiary hearing. Both prosecution and defence were in agreement that an effective custodial sentence was not warranted in the circumstances, and the Court concurred. The Court found the accused guilty on all three charges and imposed a one-year term of imprisonment, suspended for two years under Article 28A of the Criminal Code. In addition, the accused was ordered to pay a fine of €3,000, structured in monthly instalments of €100 over 30 months. The Court warned the accused that any reoffending during the suspension period could result in the activation of the custodial sentence, and that missed fine instalments would be converted to imprisonment according to law.

Raad Raiyyan Karim found guilty on all three charges. Sentenced to 1 year imprisonment, suspended for 2 years under Article 28A of Chapter 9 of the Laws of Malta. Fine of €3,000 imposed, payable in monthly instalments of €100 over 30 months. Missed instalments to be converted to imprisonment by law. Attorney General granted access to scanned acts and judgment within 6 working days.

• Under Maltese law (Article 337C of Chapter 9), unauthorised access to computer systems, data manipulation, and misuse of another person's credentials are distinct criminal offences that can each be charged separately.
• A guilty plea in Maltese criminal proceedings is a significant mitigating factor: courts will consider it alongside a clean criminal record when determining whether a custodial sentence should be effective or suspended.
• Article 28A of the Criminal Code allows Maltese courts to suspend a prison sentence, typically for a period longer than the sentence itself — here, a 1-year sentence was suspended for 2 years — meaning any further offence during that window can trigger the original sentence.
• Maltese courts can structure fines as monthly instalments to account for a defendant's financial capacity, but non-payment automatically converts the outstanding amount into a term of imprisonment.
• Before accepting a guilty plea, Maltese magistrates are required to ensure the accused fully understands the consequences, has had adequate time to consult with counsel, and is confirming the plea voluntarily — safeguarding the fairness of the proceedings.

Criminal Code Chapter 9 — Articles 337C(1)(a)(g)(i) and 337F (computer misuse offences); Article 28A (suspended sentences); Article 392A(2) (Attorney General access to proceedings)