DMV Scam Texts: Customized, State-by-State Phishing Attacks Are on the Rise

Scammers aren’t just pretending to be the DMV. They’re now building fake DMV websites for your state.

If you received a text saying your license will be suspended unless you pay a fee, you’re not the only one.

Guardio detected a 773% surge in DMV-related scam texts during just the first week of June.

{{component-cta-custom}}

But this wasn’t just a spike in volume. It was a state-specific, AI-powered phishing campaign that flooded inboxes with hyper-targeted messages and links to fake DMV sites, each designed to look exactly like the real one in your state.

A New Level of Personalization

These scams started like many others before: a message claiming you owe a traffic ticket or risk license suspension. But here’s where they evolved.

Scammers built fake websites to mimic DMVs in all 50 states. Not generic pages, real-looking clones using state names, DMV branding, and even .gov-style domain names.

Many of the messages were long, detailed, and exhausting to read, a completely different approach from what we’ve seen in previous scam campaigns.

As shared with ConsumerAffairs, Guardio’s VP of Product Karin Zilberstein noted: “Scams are becoming smarter, more personalized, and more sophisticated by the day.”

Instead of short spam bursts, these messages were crafted to feel like official government communication. That added effort made them far more convincing, and dangerous.

Guardio caught dozens of these fake domains in the wild, including:

oklahoma.gov-vpki[.]cc

nebraska.rxsx[.]cc

nhgov.nkemi[.]vip

These URLs were deliberately designed to fool even cautious users by mimicking familiar state and government references.

How the Scam Works

The messages typically include language like:

“FINAL NOTICE: You have an outstanding ticket. Pay now to avoid license suspension.”

“[STATE] DMV: Unpaid fine detected. Pay immediately to avoid penalties.”

Clicking the link takes you to a fake DMV website that appears fully legitimate and prompts you to pay a fine or verify your identity.

The goal is to steal:

• Credit card information
  
  
• Personally identifying data
  
  
• Possibly login credentials
  
  

These sites were built using AI tools to create convincing layouts, text, and branding, allowing scammers to spin up fake pages for every U.S. state quickly and at scale.

Why This Scam Is So Dangerous

• Targeted by state: Personalized links based on location make the scam feel real
  
  
• AI-generated design: Fake sites that look more realistic than ever
  
  
• Spoofed local numbers: Increase trust and open rates
  
  
• Emotional pressure: Language designed to cause panic and quick reactions
  
  

What started as a generic toll scam has now become a state-specific phishing machine, one that’s far more sophisticated than what we’ve seen in the past.

In fact, the FBI has publicly warned consumers to delete these types of messages immediately. According to Forbes, the agency confirmed that these DMV scam texts are part of a broader wave of mobile phishing attacks and urged the public not to click on any suspicious links. Multiple U.S. police departments and cybercrime units have issued alerts as well.

Real People, Real Reports

This campaign spread fast and people noticed.

Even users who weren’t fooled could feel the change in quality, and quantity.

What to Watch For

• Urgent tone: Threats of license suspension or legal action
  
  
• Links that don’t match your state DMV domain
  
  
• Requests for sensitive information like Social Security or credit card numbers
  
  
• Messages from spoofed or short-code numbers
  
  
• Texts via iMessage or Android messaging that appear official
  
  

How to Stay Safe

1. Don’t click links in unsolicited texts, especially if they urge immediate action
   
   
2. Visit your state’s DMV website by typing the address directly into your browser
   
   
3. Check that the site uses a real .gov domain
   
   
4. Use Guardio to block phishing links and malicious websites before they load
   
   

What to Do If You Fell for It

If you’ve entered personal or financial information into one of these fake sites:

• Contact your bank immediately and cancel or freeze the card
  
  
• Report the incident to the FTC at reportfraud.ftc.gov
  
  
• Run a full Guardio scan to see where you data had been exposed, spot weak links and see what needs attention
  
  
• Set up credit monitoring or a freeze if personal data like SSNs were shared
  
  

Guardio’s Role in the Investigation

Guardio identified and blocked scam domains involved in this campaign and we’re continuing to monitor new variants and evolving tactics in real time.

Scammers don’t just reuse the same links over and over. In fact, they often generate a new domain for almost every message sent. As Karin Zilberstein, VP of Product at Guardio, explained to Forbes: “Scammers generate a new domain for almost every DMV text they send. The format is usually the name of a state followed by a generic domain. Sometimes they include ‘.gov’ as part of the URL to make the website appear legitimate.”

It’s a tactic designed to bypass spam filters, avoid detection, and increase believability. The most commonly used domain extensions? .cc, .icu, and .vip, none of which are affiliated with any state’s official DMV.

The Bottom Line

This isn’t just another text scam. It’s a blueprint for how phishing is evolving, automated, personalized, and disturbingly believable.

Guardio helps ensure that being targeted doesn’t mean being tricked.

Try Guardio today and get real-time protection from phishing threats, before they ever reach your screen.

{{component-cta-custom}}

‍