The DVLA has warned that British motorists are being "targeted" by scammers through fake emails and text messages designed to steal personal information. The agency reported that nearly 20,000 customers contacted its contact centre in 2024 to report fraudulent activity.
Common Scam Tactics
Fraudsters have employed several tactics to deceive drivers. Some messages claim that vehicle tax payments have failed, urging recipients to take immediate action to avoid fines. Others inform motorists they are due a tax refund and provide a link to claim it. A third common approach involves threatening that an unpaid penalty or fine will result in the vehicle being clamped.
These messages are designed to scare motorists into clicking links and handing over sensitive data, such as bank account details or personal identification information. The DVLA emphasised that it never sends messages regarding vehicle tax refunds and will never ask for bank details via text.
Official Warning
Posting on social media platform X, the DVLA stated: "Scammers are targeting drivers with fake texts and emails pretending to be DVLA. Think before you click. Don't share personal info. Always use GOV.UK. Protect yourself with DVLA's top tips."
The agency urged road users to only use the official GOV.UK website, as third-party sites may impersonate the DVLA and charge additional fees for services that are free when accessed directly.
How to Protect Yourself
The DVLA previously explained that fraudsters often send messages asking recipients to confirm personal details, such as bank or payment information. They may also claim the recipient is entitled to a vehicle tax refund. The DVLA clarified: "DVLA will never ask you for your bank account details or ask you to confirm payment details. We will only ask you to confirm your personal details by email or text if you have a live enquiry with us. And vehicle tax refunds are issued automatically – never via an email with a link."
If a driver receives such an email or text, they should not click any links. Instead, they should report it to the National Cyber Security Centre (NCSC) and delete the message immediately.
