The DGT (the UK’s equivalent of the DVLA) has sounded the alarm on a surge of phishing scams posing as official government communications
Online tricksters are getting bolder by the day. Millions of dodgy messages are sent out daily, many pretending to be from official bodies such as the DGT, Spain’s traffic authority. These scams catch out a surprising number of people, all lured into sharing personal details or paying fines that never existed in the first place.
As Nuria Manzanas from the DGT puts it, every time someone falls for a phishing scam, the cybercriminals pop a little celebration cork.
What exactly is a phishing scam?
Phishing is the online version of someone knocking on your door and pretending to be from the gas company, only with digital trickery. Attackers send emails or texts that look official, often claiming to be from a bank or from the DGT itself. Their aim is straightforward, financial gain. They want personal information, card details or a quick payment.
The DGT Cybersecurity Department notes that phishing is the most common cyberattack. The whole point is to fool people into handing over valuable information or money.
A global industry of organised crime
Cybercrime is now a massive international business worth trillions. In Spain, digital fraud rises by around 10 percent every year, and nearly 374,000 computer crimes were reported in 2022. According to Inspector Antonino Flores from the National Police Cybercrime Unit, these criminals operate like proper companies. They have staff, global reach and carefully planned attacks, all designed to empty people’s bank accounts.
The DGT has detected more than 830 phishing attempts using its name over the last five years. In 2025 alone, 195 fake websites have already been taken down, although new ones seem to appear as quickly as weeds after rain.
The DGT works with cybersecurity specialists and other authorities to close fraudulent sites and warn the public. The difficulty is that cybercriminals move quickly and often anonymously. As one DGT expert put it, it feels like fighting ghosts.
How the scams usually work
Most of these messages claim that you have an unpaid fine and must act
immediately.
The link provided sends you to a website that looks almost identical to the real DGT site.
Once you enter any personal or banking information, the criminals have what they want.
What to do if you receive a suspicious message:
- Do not click on anything.
- Report the message to the National Cybersecurity Institute incident inbox.
- Block the sender so they cannot bother you again.
- If you have clicked a link or entered information:
- Contact your bank immediately.
- Keep screenshots and copies of the messages.
- Report the scam to the National Police or Guardia Civil.
- Always confirm any fines directly through the DGT Electronic Traffic Office or through official post.
How to spot a scam:
- Look out for the classic warning signs:
- Messages pushing you to act urgently.
- Threats of consequences if you do not obey.
- Promises of money back or special deals.
- Offers that are clearly too good to be true.
- Five habits that help you avoid phishing
- Read messages carefully and do not trust them based on appearance alone.
- Be wary of unknown senders.
- Do not click suspicious links or open surprising attachments.
- Never give personal or banking details in online forms unless you are certain it is safe.
- Check official sources such as the DGT Electronic Office before providing information.
The DGT reminds everyone that being alert and informed is the best defence. By reporting suspicious messages, we all help make life a little harder for the cybercriminals and a little safer for everyone else.
