DVLA Email Scam UK: How to Spot and Avoid Fake DVLA Emails
DVLA email scams are designed to look official—but they're often fake. Here's how to tell the difference and stay safe.
What is this scam?
DVLA email scams are phishing messages that pretend to be from the Driver and Vehicle Licensing Agency. Scammers use official-looking logos, headers, and urgent language to trick you into believing there's a problem with your driving license, vehicle tax, or vehicle registration. Common false claims include unpaid vehicle tax, a lapsed license, a traffic fine, or a vehicle recall. The email typically asks you to click a link, log in to a fake website, or reply with personal details. Once you do, criminals steal your driving license number, National Insurance number, bank details, or passport information. Some versions ask you to pay a fine or 'update your details' by bank transfer. The DVLA rarely contacts drivers by email about license or tax issues—they use formal letters by post or notify you through the GOV.UK website. These scams exploit the fact that most UK drivers are required to maintain vehicle tax and valid licenses, making the threat feel credible and urgent.
Warning signs to look for
- The email asks you to click a link to 'verify your details', 'confirm your license', or 'update your vehicle information'. DVLA never asks you to click links in emails.
- The sender's email address doesn't match @dvla.gov.uk (check the full address, not just the display name). Look for addresses like @dvla-update.co.uk or @dvcla.gov.uk—almost-correct variations.
- The email creates artificial urgency, saying your license will be suspended, your vehicle will be taxed, or a fine will be issued within 24 hours. Genuine DVLA letters give you time to act.
- The language contains spelling or grammar errors, poor formatting, or awkward phrasing. DVLA communications are professionally written.
- The email asks you to pay a fine by bank transfer, voucher, or cryptocurrency. DVLA never asks for payment by email and uses formal payment routes.
- The email requests your full driving license number, National Insurance number, or online banking details. DVLA already has these on file.
- The link in the email takes you to a website that looks like GOV.UK but the URL is slightly different (for example, gov-uk.com instead of gov.uk).
- The email has been sent to a generic greeting like 'Dear Driver' rather than using your actual name.
How this scam works step by step
The scam typically begins with an email arriving in your inbox that appears to come from DVLA. The message claims there's an urgent problem: unpaid vehicle tax, a traffic violation, a license renewal issue, or a vehicle recall. To add credibility, the scammer copies DVLA's logo, uses official-sounding language, and may reference real DVLA processes like tax declarations or license checks. The email then directs you to click a link labeled 'Verify Your License', 'Confirm Your Vehicle Tax', or 'Pay Your Fine'. This link takes you to a fake website that mimics the real GOV.UK or DVLA.gov.uk pages. When you enter your details—driving license number, date of birth, National Insurance number, or bank details—the scammer captures this information. Some versions skip the website and ask you to reply with details directly by email. Once the scammer has your personal data, they may sell it to other criminals for identity theft, use it to open accounts in your name, or attempt to access your bank account. In financial variants, they may contact you later pretending to be your bank, asking you to confirm 'fraudulent transactions' and trick you into sending money to a 'safe account'. The entire process from first email to data theft typically takes hours.
How to verify if it is genuine
If you receive an email claiming to be from DVLA, do not click any links or download attachments. Instead, open a new browser window and type dvla.gov.uk directly into the address bar—do not use any link from the email. Log in to your DVLA account using your own saved password. If there's a genuine issue, it will show in your account. You can also call DVLA directly on 0300 790 6801 (this number is on the official GOV.UK website) and ask whether they've sent you an email about a specific issue. Never provide personal details over the phone if you called the number—DVLA already has your details on file. Check the sender's email address carefully: genuine DVLA emails come from addresses ending in @dvla.gov.uk only. If you're unsure, forward the suspicious email to the NCSC Suspicious Email Reporting Service before taking any action. For more detailed guidance on spotting fake websites, see our guide on /guides/is-this-website-a-scam/.
What to do if you have already interacted
If you've clicked a link in a DVLA scam email, stop immediately and do not enter any further information. Change your passwords for any online accounts—particularly your bank account and GOV.UK account—using a device that was not used to click the link. If you entered your driving license number, National Insurance number, or passport details, contact the DVLA on 0300 790 6801 to alert them and ask about identity protection. If you entered your bank details or online banking login, contact your bank's fraud team immediately using the number on the back of your debit or credit card—do not use numbers from the email. Report the scam to Action Fraud on 0300 123 2040 or online at actionfraud.police.uk and provide the email address and any website URLs you were sent to. If money was transferred, contact your bank straight away as they may be able to freeze or recall the payment. Register with the National Fraud Intelligence Bureau by reporting to Action Fraud—they track patterns of fraud. Monitor your credit report using free services like Clearscore or Experian to spot any fraudulent accounts opened in your name.
Reporting this scam in the UK
Report suspicious DVLA emails to the NCSC Suspicious Email Reporting Service by forwarding the email to report@phishing.gov.uk. Include full email headers if possible (most email clients have a 'Show Original' or 'View Message Source' option). Report the scam to Action Fraud by calling 0300 123 2040 or visiting actionfraud.police.uk. Provide the sender's email address, the website URL if you visited one, and details of any money sent. If you received the scam via SMS rather than email, forward it to 7726 (SPAM) free of charge. You can also report it to Citizens Advice consumer helpline on 0808 223 1133 for advice on your rights and next steps. Contact the DVLA's customer service team on 0300 790 6801 to confirm whether the email was genuine and to protect your account. If the scam impersonated DVLA while requesting cryptocurrency payment, also report it to your cryptocurrency exchange or wallet provider. Each report helps law enforcement understand fraud patterns and take action against criminal networks. Keep records of all communications with authorities for your own reference.
Frequently asked questions
Is DVLA a legitimate organisation and are all DVLA emails scams?
Yes, DVLA (Driver and Vehicle Licensing Agency) is a legitimate UK government organisation. However, not all emails claiming to be from DVLA are genuine. DVLA does send emails for specific purposes like confirming a theory test or notifying about certain vehicle changes, but it rarely contacts drivers about tax or license issues by email—it uses formal letters by post instead. Always verify by visiting dvla.gov.uk directly or calling 0300 790 6801 before responding to any email.
I already sent money to the scammers. What should I do?
Contact your bank immediately using the number on your debit or credit card (not from any email or website). Tell them you've been scammed and ask them to freeze your account and potentially recall the payment if it was recent. Report it to Action Fraud on 0300 123 2040 or actionfraud.police.uk. Change all your passwords from a clean device and monitor your bank account for further suspicious activity. Your bank may be able to recover money within a limited time window, but this depends on how quickly you report it.
What should I do if I clicked the link but didn't enter any information?
Do not enter any information if you see a login page. Close the browser window immediately and do not return to the website. Change your passwords for your bank and GOV.UK account from a different, clean device using a strong password. Monitor your bank account for suspicious activity over the next 30 days. Report the link to the NCSC Suspicious Email Reporting Service at report@phishing.gov.uk. The fact that you didn't enter details significantly reduces your risk, but reporting helps authorities take down the fake websites.
How do I report a DVLA email scam to the authorities?
Report the email to the NCSC Suspicious Email Reporting Service by forwarding it to report@phishing.gov.uk. Then report the scam to Action Fraud by calling 0300 123 2040 or visiting actionfraud.police.uk online. Provide the sender's email address, any website URLs you were sent to, and details of any money or personal information you lost. If the email contained a phone number asking you to call, include that too. These reports help authorities identify and shut down scam networks.