Entered information on bogus DVLA site

lr1277

Hi

I was hoping you can help me. I know this is strictly not a question for techies but couldn't see a better board. Board guides; if there is a better board for this thread, please move it.

My dad needed to renew his driving licence as he is over 70. I think he got a letter but as he had done this on the internet previously, he tried again. He typed something into google and got back a site.

It asked him for relevant details like driving licence number, but also details I consider irrelevant like mother's maiden name and passport number. I must add at this point, he had had one or two warnings from the AV software, but he clicked past them, because he has had problems with the AV software previously.

It is only when the website asked him for his card details did he realise it was bogus and called the DVLA. They told him to close the website down.

In terms of next steps, I am at a bit of a loss so would like your advice.

Technically on the computer he is going to do a full virus scan. Incidentally he is using Kaspersky AV.

In terms of identity theft and credit applications, I told him to contact his banks, let them know what happened and ask for their advice. I suppose he could get a new passport, but not sure about that.

What other steps would you advise he take? Either technical, in terms of identity theft or financial institution related.

Many thanks in advance.

DoaM

All he's likely come across is a bogus site* that charges a fee to do what you can do yourself directly. It is highly unlikely that he's downloaded a virus/malware.

The AV warnings were likely warnings that this was a scam site, or a site with a low Web of Trust rating.

* For the old timers from Praise, Vents ...... I thought Google engineers were working around the clock to eradicate such sites from search results?

AndyPix

DoaM wrote: »

All he's likely come across is a bogus site* that charges a fee to do what you can do yourself directly. It is highly unlikely that he's downloaded a virus/malware.

^^ This..
The same scummy sites exist for passport application/renewal etc.
As you closed this down before entering any details you/he likely dodged the bullet.


The warnings from your AV will have been that the site is identified as a possible threat/source of fraud

lr1277

Many thanks for your replies, but I am also considering the ID fraud impact. He entered many personal details that could be used to impersonate him.

I have advised my Dad to register for the Land Registry fraud alert.

Are there any other preventative measure he could take?

Head_The_Ball

lr1277 wrote: »

Many thanks for your replies, but I am also considering the ID fraud impact. He entered many personal details that could be used to impersonate him.

I have advised my Dad to register for the Land Registry fraud alert.

Are there any other preventative measure he could take?

Yes.

Take more notice of warnings from his AV software.

RumRat

lr1277 wrote: »

Many thanks for your replies, but I am also considering the ID fraud impact. He entered many personal details that could be used to impersonate him.

I have advised my Dad to register for the Land Registry fraud alert.

Are there any other preventative measure he could take?

I doubt anything was actually submitted to the site before the process was completed and they had the payment.

Heedtheadvice

I expect all the above posts to be true........

However I would not risk it as, however unlikely it might be that details have been gleaned, I would play it safe and:

Get a replacement card for the one where details were typed;

Do not use any future security questions that may give rise to the same amswers for personal info wherever possible;

Impress on father that googling (or using other search engines to find) a site then choosing an option from the results presented is inherently dangerous -where the actual address is not checked, owing to those misrepresenting the desired result. Far safer to type into the address bar, checking the typing against the official info provided by the body (dvla letter, hmrc letter, bank letter etc .) and only then pressing return/enter. Even then check you have got to the desired location by checking the address resulting making sure before entering anything sensitive that you are on a secure site ...[url]HTTPS://.[/url].... the lock symbol is presented etc.

Ignoring warning messages has already been mentioned but also make sure the virus checker/firewall/anti key logger is up to date.
as is the operating system. (I can say that now I have moved away from XP!!!!!!) and the web browser.

Might seem a bit overkill but.....

lr1277

Heedtheadvice wrote: »

I expect all the above posts to be true........

However I would not risk it as, however unlikely it might be that details have been gleaned, I would play it safe and:

Get a replacement card for the one where details were typed;

Do not use any future security questions that may give rise to the same amswers for personal info wherever possible;

Impress on father that googling (or using other search engines to find) a site then choosing an option from the results presented is inherently dangerous -where the actual address is not checked, owing to those misrepresenting the desired result. Far safer to type into the address bar, checking the typing against the official info provided by the body (dvla letter, hmrc letter, bank letter etc .) and only then pressing return/enter. Even then check you have got to the desired location by checking the address resulting making sure before entering anything sensitive that you are on a secure site ...[url]HTTPS://.[/url].... the lock symbol is presented etc.

Ignoring warning messages has already been mentioned but also make sure the virus checker/firewall/anti key logger is up to date.
as is the operating system. (I can say that now I have moved away from XP!!!!!!) and the web browser.

Might seem a bit overkill but.....

I agree with your advice. Thankfully no card details were entered. But to get onto the page with the card details, the previous web page with all his personal details may have been submitted. (I am no expert in website / web programming).