DVSA parking scam: How to avoid being caught out
Drivers are being scammed with official-looking texts demanding money for fines and fake QR codes when paying for parking. This guide will keep you a step ahead of the fraudsters.
- How parking-related scams work
- What are the danger signs to look out for?
- Action to take if you think you're being scammed
Scammers are an infuritatingly enterprising bunch — barely a month seems to goes by without a new con doing the rounds, usually with motorists as the fraudsters' target. Their latest field of dirty play revolves around parking.
One of the newest involves text messages demanding money for parking fines and other penalty notices, falsely claiming to be from the Driver and Vehicle Standards Agency (DVSA).
Because the texts look relatively convincing, at least at first glance, fraudsters are able to prey upon that niggling doubt many motorists have when paying for parking on an app, where you're not totally sure that it worked properly.
It follows other recent parking-related cons using a practice that's been dubbed quishing — these involve drivers unwittingly scanning fake QR codes to pay for the length of their stay only to later receive an actual fine for non-payment from the car park's genuine operator.
This guide focuses on how these parking-related scams work, what to look out for in order to reduce your chances of falling victim to them and how you can proactively help to prevent others being caught out by them.
The fake DVSA text message scam
A fresh development for scammers, it centres around text messages, supposedly from the DVSA, demanding money for motoring transgressions.
How does it work?
Most of us at some point have received bizarrely worded text messages claiming to be from our bank, HMRC or even family members that all have something in common — they're after money and it's always a con.
First reported in September 2024, the fake texts from the DVSA relate to parking penalty charges, threatening that if payment isn't received on time that the message's recipient could face a court appearance, an even larger fine or a potential driving ban.
Unpleasant outcomes that induce fear, in other words, and when people are scared they rarely think as clearly, which is exactly what the fraudsters want.
The DVSA itself cites that many people receive follow-up texts informing them that they have now reached the final day for making a payment before the more serious consequences are applied, further ramping-up potential victims' anxiety.
Each of the messages includes a link to a copycat website that closely mimics an official UK Government one where the fraudulent payment and other personal data about the the victim are taken.
What are the consequences?
Unfortunately, as with all kinds of fraud where victims hand over their name, date of birth, address as well as credit and debit card details, including the CVC security code on the back, the outcome could be financially catastrophic.
It may be that only the amount required to cover the fine is taken initially, to make it look less suspicious, only later emptying bank account balances and running-up enormous credit card fees.
If you think you have been the victim of fraud it is vital you report it to the police immediately:
- If you live in England, Wales or Northern Ireland go to the Action Fraud website or call 0300 123 2040.
- If you live in Scotland call 101 for Police Scotland.
How can I avoid it?
- The DVSA doesn't have the authority to issue fines — in other words, if you receive a text reportedly from the organisation that demands payment, it's a scammer at work.
- Be vigilant for unusual elements in the message — it seems strange but these phishing texts usually contain spelling and grammar issues, such as 'Dvsa' instead of 'DVSA', or writing the date with the year first. If it seems oddly phrased, it's probably fake.
- Report the scam text — don't simply ignore as reporting it will help prevent others from falling for the scame. You can do this easily via the National Cyber Security Centre's website or forward the message to 7726.
The fake car park QR code scam
Known as quishing, here the fraudsters are relying on victims looking for a more convenient way to pay for parking than using cash or downloading a specific app.
How does it work?
We've all been there, searching for somewhere to park usually when visiting a town or city that's unfamiliar to us, which adds a degree of distraction that benefits the scammers.
You find one close to where you want to be that looks clean, tidy and well-lit and drive around it until you spot a space that looks ideal and then you go to pay. At this point you realise you've no cash on you, the contactless payment reader's not working and you can't be bothered to download another parking app on your phone.
But wait, what's this? A convenient QR code. Quick snap using your phone's camera that directs you to a link where you readily hand over details about you, your car and your credit or debit card.
That's all well and good if it was a genuine QR code, but what if you've just fallen victim to quishing?
What are the consequences?
Again, by handing over so much personal information, as well as your card's CVC security code, you could face significant financial pain.
Additionally, with details of your car and knowledge of your location, criminals could attempt to steal it if its a model they are specifically targeting, or use your registration number on a similar model when carrying out illegal activities in that general area.
Fraudsters don't always attempt to take large amounts of money from victims' bank accounts, instead signing them up to regular payments to what looks like a subscription service on an ongoing basis, so check your accounts thoroughly and frequently.
Because the money you paid using the QR code will have lined the scammer's pockets, you will likely also face the additional ignominy of receiving a genuine fine from the car park's operator for non-payment during your stay.
If you think you have been the victim of fraud it is vital you report it to the police immediately:
- If you live in England, Wales or Northern Ireland go to the Action Fraud website or call 0300 123 2040.
- If you live in Scotland call 101 for Police Scotland.
How can I avoid it?
- Avoid using QR codes in the first place — it may take a little longer but if you have no cash on you and the contactless payment option is unavailable, then use the car park operator's official app.
- Check the QR code thoroughly if you choose to use it — trust your instincts here because they will usually keep you safe, so look for the QR code itself being stuck onto the main parking signs rather than printed onto it.
- Does the website link look genuine? — again something few of us do when accessing a site via a QR code, it's important to look at the website address — if it doesn't look right or official, it probably isn't.
How to spot copycat websites
These look very similar to the genuine article but there are clues to spot whether you're on a legitimate website or one set up by fraudsters.
Check the URL closely does it look exactly how it should in terms of the spelling of the company name and the correct suffix at the end? If not, the chances are it's a fake one.
Is the website secure? — an official website, especially one that will deal with financial transactions, will have additional security features — if the URL doesn't start with https:// or show a padlock symbol, then don't pass on any personal or financial details.
Can you search for the website address? — scammers will have likely directed you to that specific URL via a text or QR code, so copy the address into a search engine — if others have reported it as fraudulent it will likely show that but also be suspicious of it having very few search results as that would also indicate it's not genuine.
Do other parts of the site work? — copycat websites may look like the real thing but only as far as the parts the criminals want you to concentrate upon. If other links on the website don't work properly, it's likely to be a fraudulent one.
Post-payment phone calls — if you do get lured in and share personal and financial information, be suspcious of calls in the days after that claim to be from your bank. Remember, a bank will never ask for details such as your PIN. Ask the caller for a reference number, then end the call — find a genuine number on a bank statement and call that back. It will soon be evident whether or not you've been a fraud victim.
