Convincing DVLA emails are nothing more than phishing scams

Omniquad, the internet security company based in London have issued a warning to motorists about an email phishing scam.

These emails appear to come from the DVLA and tell the recipients that they are updating their database and that they need all motorists to verify, and update if necessary update, the details on their driving licences within 14 days of receiving the email.

The dramatic warning tells drivers that unless they upgrade their details within the 2 week window they will have their licences revoked and have to retake their driving test. It then goes on to apologise for any inconvenience caused and thanks the recipient for their co-operation. Omniquad are telling all recipients to delete these emails immediately and they are yet another scam aimed at identity theft.

These types of messages convey a sense of urgency that can make you respond immediately without thinking. There is a clickable link that appears to lead to the  fake DVLA website, but actually leads to a fraudulent website registered in Kenya.

The scam has been traced back to the Philippines, redirecting via a Kenyan-registered domain which points to a US based server, in Texas.

The clickable link redirects unsuspecting recipients to a copy of a DVLA website, where users are requested to give their personal details, driving license number, name, date of birth, address and credit card details including CVV. It looks authentic, unless you scrutinize the domains and the link.

Do not complete this form, it is a scam.

It is important that people are warned to not click on the link and complete the forms, as this is a very convincing identity theft attempt.

Criminals commit identity theft by stealing your personal information. This type of theft can result in fraud that is affecting your personal and financial circumstances. You may for example have problems getting a loan, a mortgage, credit cards, while the situation is sorted out.

Omniquad has updated the filters of their Mailwall Remote Email filtering service, so their customers should not receive this phishing scam email.

What is Phishing?

Phishing typically happens when criminals send convincing looking but fraudulent emails.

These emails are usually sent to thousands of individuals – in the hope that some will be tricked into supplying personal information. This may include user names, email addresses, passwords, bank account, and credit card details.

Phishing attacks will typically encourage victims to enter details on a fake website – which often seems to come from a legitimate organisation, such as in this case, the DVLA.

For more information, and to see screen shots of both the scam email and the fake DVLA website, go to Omnquad news:

You can also check the Omniquad Security Blog for scams, and internet threats: