DVLA Phishing Scam
On first glance this email appears to have come from DVLA the Driver Licencing Authority in the UK but examine the sender email address, inconsistencies in the email and the click through web address and this is a scam email designed to capture your bank debit card details.
E-Mail received:
Date: 14/10/2025, 01:06
From: DVLA Services 9kPT5BWp0m64@frivasa.com.br
To: [Name and email address redacted]
Action Required: Renew Your Vehicle Tax (Form V12)
Notes: The sender email address: 9kPT5BWp0m64@frivasa.com.br is a Brazillian domain name, you will also note footer text in Portugese, Spanish and English very unusual for an email supposedly coming from a UK Government department.
The click through address: https://ghk.kajkhuji.com/imp is unlikely to be a genuine DVLA page.
A further email was received...
Date: 01/09/2026, 18:36
From: DVLA Payments
Bcc: [Name and email address redacted]
To: mygov-servi@3three.com.br
Action required: Update your Direct Debit for vehicle tax – Ref DVLA-273433
Notes: The click through address is to https://link.unia.ac.id/AP58VW4. So we have the email coming from a Brazillian email address, the click through address is an academic institute in Indonesia, very unlikely for the DVLA whose headquarters are within the UK. The fact that we have been emailed bcc means the same email will have been sent to many hundreds, possibly thousands of recipients.
A genuine reminder would come from a .gov.uk email address, address you as the registered keeper by name and state the registration plate of the vehicle whose direct debit was in error (you might after all have more than one vehicle or you may have disposed of the vehicle in question when you would not be liable for further tax payments). It is a phishing scam from crooks.
If you look closely at the email you will see that it refers to a missed payment on 9th April 2026 and says that a further collection attempt would be made on 11th April 2026 and yet the email wasn't sent till 1st September. A genuine missed payment from April 2026 would be escalated through legal means long before 1st September 2026... you would be in court and/or your car would have been seized and crushed by now.
Recommendation: Do not click on the link. Delete the email.
Michael Fowler
Other articles by Michael Fowler:
Interactive Brokers Phishing Scam - Michael Fowler
I never cease to be amazed at the range of legitimate companies scammers choose to imitate to lure their customers into entering their personal details into a fake phishing website... more >>
First Direct Phishing Scam - Michael Fowler
Aimed at First Direct bank customers who perhaps are in a hurry and don't look at sender email address or click though web address... more >>
Barclays Bank Phishing Scam - Michael Fowler
Professional looking email from Barclays Bank just let down by the sender email address and the click through website. Some people with Barclays accounts will be taken in, don't let it be you!... more >>