The DVLA vehicle tax refund text scam

Escudo guide · Updated July 2026

What the message looks like

It arrives as an ordinary text, often from a normal looking mobile number or a short code, and it is written to sound official and a little bit generous. The usual wording runs close to this.

"DVLA: We have recalculated your vehicle tax. You are owed £48.84 due to an overpayment. Claim your refund here:" followed by a link.

The amount is always small and oddly precise, something like £42.30 or £48.84, because a tiny believable figure lowers your guard. Why would a scammer bother inventing a refund of forty pounds? Because the refund is not the point. The link leads to a page that looks like GOV.UK and asks for the very thing that is actually worth money to them: your card number, your sort code and account number, sometimes your driving licence details. You never see the forty pounds. They see everything you type.

Why it works so well in Britain

Vehicle tax feels fiddly and automatic at the same time. Most of us pay it by direct debit, half remember the renewal date, and would not be at all surprised to learn the amount was recalculated. A refund is pleasant news, so the message does not trigger the alarm that a threat would. It also lands on almost everyone, because nearly every household in the country has a car, a partner with a car, or a grown up child with a car. The scammers do not need to know whether you drive. They send millions of these and wait for the ones who do.

How to tell it is fake in ten seconds

1. The DVLA does not do this. The DVLA has said plainly that it never sends texts or emails asking you to confirm personal or payment details, and never texts you about a refund. So the channel itself is the tell. A real refund is handled through the account you already pay from, with no action needed from you.
2. Look at the web address, not the words. Every genuine DVLA service lives on gov.uk. A scam link will be something like dvla-refund.xyz or dvlaroadtax-rebate.co. If the bit just before the first single slash is not gov.uk, it is not the DVLA, no matter how tidy the page looks.
3. A refund that needs your card is not a refund. Money coming to you never requires you to hand over your card number or a one time code. Ask yourself why a refund would need your card at all. It would not.
4. The rush is manufactured. "Claim within 24 hours or it expires." Real refunds do not evaporate. Urgency is the tool that stops you thinking.

What to do if you only tapped the link

Tapping alone rarely does harm. On an up to date iPhone, opening the page and closing it usually does nothing on its own. The danger is in what the page talked you into typing. If you opened it, looked, and shut it without entering anything, your risk is low. Close the tab, delete the message and carry on. For the fuller picture, see our guide on what to do after you tap a scam link.

What to do if you entered your details

1. Call your bank now, using the number on the back of your card or inside your official banking app. Not a number from the text. Tell them you entered your card on a scam page.
2. Ask them to freeze the card and watch for charges. They can send a new one.
3. Expect a follow up call. This is the part that costs people the most. Days later a very calm person rings, says they are from your bank's fraud team, and tells you your account is now at risk and you must move your money to a "safe account". No bank will ever ask you to do this. The safe account is theirs. Hang up and ring your bank yourself on a number you looked up.
4. Change any password you typed into the page, and change it anywhere else you used the same one.

Report it

• Forward the scam text to 7726, free of charge. It spells SPAM on the keypad and helps your network block the sender.
• Report to Action Fraud at actionfraud.police.uk or on 0300 123 2040. In Scotland, report to Police Scotland on 101.
• You can report the fake message to the DVLA too, and you can always check your real vehicle tax by going to gov.uk yourself and typing the address in by hand rather than following any link.

This is one script with many masks

The DVLA refund is a cousin of the fake bank alert, the parcel fee and the unpaid toll. Same gangs, same trick, different logo on top. Once you have seen how the machine works you start to recognise it everywhere. It is worth reading how these SMS scam gangs actually operate, because it is never personal and it is never really about the DVLA. If you get the version that pretends to be your bank or HMRC, see the fake bank text. If it claims you owe a road toll, read the unpaid toll and Dart Charge scam.

You are not the problem

These pages are built to catch sensible people on a busy day. The fact that you paused to check means you are already ahead of them. The people most at risk are the ones who never stop to check, often our mums and dads, who see an official looking text and assume it must be real.

That is what the Escudo app is for. It helps filter known scam patterns on the iPhone and sets them aside before they are read, so there is less to tap in the first place. It does not promise to stop every scam or to judge any single message, and it cannot tell you whether one text is genuine. Nothing is deleted, it is only moved to a junk folder, and your messages never leave your phone.