Spanish drivers are being warned of a sophisticated phishing campaign currently circulating during the summer months. Cybercriminals are sending fraudulent text messages and emails that impersonate the Directorate-General for Traffic, known as the DGT. These messages typically claim that the recipient has an outstanding traffic fine that must be paid immediately to avoid further penalties or legal consequences. The goal of these attackers is to trick unsuspecting citizens into clicking malicious links that lead to fake payment portals designed to steal credit card information and personal data.
This scam relies on the urgency and authority associated with official government communications. By creating a sense of panic, the perpetrators hope that victims will bypass standard security checks and provide their financial details without verifying the source. The DGT has consistently clarified that it does not notify citizens of fines via text message or email, nor does it request payment through links provided in such messages. Official notifications are sent via postal mail or through the electronic notification system known as DEV, which requires a digital certificate or Cl@ve for access.
Those most affected by this campaign are drivers who may have recently traveled or who are concerned about potential traffic violations. The technical sophistication of these fake websites often mimics the official DGT branding, making it difficult for the average user to distinguish between a legitimate government portal and a fraudulent site. Once a victim enters their card details, the attackers gain full access to their financial accounts, leading to unauthorized charges and potential identity theft.
To protect themselves, the public is advised to ignore any unsolicited messages claiming to be from the DGT that include payment links. If a driver suspects they have a fine, they should visit the official DGT website directly by typing the address into their browser rather than clicking on any link provided in a message. Authorities are currently monitoring these threats and urge anyone who has provided financial information to contact their bank immediately to cancel their cards and report the incident to local law enforcement.