DVLA warns public against fake fine payment messages

The Driver and Vehicle Licensing Authority (DVLA) in Ghana has issued a critical public warning against a sophisticated fraudulent scheme involving fake text messages that solicit payment for purported traffic fines through unauthorized online platforms. This scam, which often promises discounts or threatens urgent deadlines, constitutes a serious cybercrime and an act of defrauding by false pretences. For legal practitioners, this development underscores the imperative to advise clients on digital vigilance and the legal ramifications for both victims and perpetrators under Ghana's robust cybersecurity and criminal laws, including the Cybersecurity Act, 2020 (Act 1038), and the Criminal Offences Act, 1960 (Act 29). The incident highlights the ongoing challenge of online impersonation and the need for strict adherence to official communication and payment channels.

The digital landscape in Ghana, while offering immense opportunities, is increasingly becoming a fertile ground for sophisticated fraudulent activities. A recent and significant development in this regard is the public caution issued by the Driver and Vehicle Licensing Authority (DVLA) against a widespread scam targeting motorists and the general public. Scammers are reportedly sending fake text messages, purporting to be from the DVLA, demanding payment for non-existent traffic fines through unofficial online platforms. These messages often employ tactics such as offering 'discounted' penalties or imposing urgent payment deadlines to pressure unsuspecting recipients into divulging personal information or making fraudulent payments.

This fraudulent scheme not only poses a direct financial threat to individuals but also undermines public trust in state institutions and digital payment systems. For legal professionals, understanding the intricate web of laws implicated by such scams is crucial for effectively advising clients, whether they are victims seeking recourse or entities involved in combating cybercrime. This article will delve into the relevant legal frameworks in Ghana, analyze the nature of these offences, and outline the implications for legal practice, emphasizing the need for proactive measures and robust enforcement.

The Driver and Vehicle Licensing Authority (DVLA) is a semi-autonomous government agency established in Ghana by the DVLA Act, 1999 (Act 569), operating under the Ministry of Transport. Its core mandate includes the licensing and evaluation of drivers and vehicles, promoting good driving standards, and ensuring the use of roadworthy vehicles to enhance road safety across the country. The DVLA's functions are further bolstered by the Road Traffic Act, 2004 (Act 683), and its subsidiary legislation, such as the Road Traffic Regulations, 2022 (L.I. 2180), which prescribe various traffic offences and their corresponding penalties.

In an era of increasing digital interaction, the DVLA has clarified that its only approved online payment platform for all transactions is the Government of Ghana's official payment platform, Ghana.gov.gh, and its official website remains dvla.gov.gh. This clarification is vital in distinguishing legitimate communications from fraudulent ones. Ghana has also established a comprehensive legal framework to address cyber threats and regulate electronic transactions. Key among these is the Cybersecurity Act, 2020 (Act 1038), which established the Cyber Security Authority (CSA) as the primary regulatory body responsible for cybersecurity activities, preventing cyber threats, and safeguarding national digital security. Complementing this is the Electronic Transactions Act, 2008 (Act 772), which provides for the regulation of electronic communications and related transactions, acknowledging the legal validity of electronic records and signatures.

The fraudulent scheme perpetrated against the public, leveraging the DVLA's name, implicates several provisions of Ghanaian law. Primarily, such acts constitute 'defrauding by false pretences' under Section 132 of the Criminal Offences Act, 1960 (Act 29). This offence occurs when a person, by means of any false pretence or by personation, obtains the consent of another person to part with or transfer the ownership of a thing, typically money. The scammers' use of fake SMS messages and unauthorized platforms to solicit payments for non-existent fines directly falls within this definition, as they create a false impression to induce victims to part with their funds.

Furthermore, the Cybersecurity Act, 2020 (Act 1038), provides a robust framework for prosecuting such digital crimes. The Act addresses various cybercrime categories, including cyber deception, identity theft, and unlawful data manipulation, all of which are pertinent to this scam. Section 63, for instance, penalizes the production or sharing of harmful digital content that is false or misleading. Unauthorised access to critical information infrastructure, which could include government payment platforms, is also punishable by heavy fines and imprisonment under the Act. The Act empowers the Cyber Security Authority (CSA) to regulate cybersecurity activities and cooperate with law enforcement in investigating and prosecuting cyber offences, with penalties potentially including imprisonment and substantial fines.

Beyond general fraud and cybercrime, the act of impersonating a public official or a state agency like the DVLA carries specific legal consequences. While a specific Act for impersonating DVLA officials was not found, the general principle of impersonating an officer is an offence, liable on summary conviction to a fine or imprisonment or both. The Presidency has previously cautioned against impersonation of officials, leading to convictions and emphasizing the seriousness with which such acts are viewed. The Economic and Organised Crime Office (EOCO), established by the Economic and Organised Crime Office Act, 2010 (Act 804), also has a mandate to investigate and prosecute serious economic and organised crimes, including prohibited cyber activity, making it another key enforcement agency.

Legal practitioners must also consider the implications of the Electronic Transactions Act, 2008 (Act 772). Section 13 of the Act stipulates that a person who relies on a digital signature bears the legal consequences if they fail to verify its authenticity. While this primarily relates to digital signatures, the underlying principle of due diligence in electronic transactions is highly relevant. Victims who fail to verify the authenticity of payment requests from unofficial channels may find themselves in a difficult position, though their status as victims of fraud remains paramount. The challenge for enforcement agencies lies in tracing the perpetrators, who often operate across jurisdictions and use sophisticated anonymization techniques. Public awareness and prompt reporting are therefore critical to the success of investigations.

The DVLA's warning against fake fine payment messages serves as a stark reminder of the persistent and evolving nature of cybercrime in Ghana. For legal practitioners, this incident underscores the critical need to educate clients on digital literacy, emphasizing the importance of verifying all communications from state agencies through official channels, such as the DVLA's official website (dvla.gov.gh) and the Ghana.gov.gh payment platform. Clients should be advised against clicking suspicious links, disclosing personal information, or making payments on unverified platforms.

Practitioners should be prepared to guide victims through the process of reporting such scams to the appropriate law enforcement agencies, including the Ghana Police Service, the Cyber Security Authority (CSA), and the Economic and Organised Crime Office (EOCO). Furthermore, legal professionals have a role in advocating for continued public education campaigns by state institutions and supporting legislative efforts to enhance cybersecurity measures and enforcement capabilities. As digital transactions become more prevalent, a multi-faceted approach involving robust legal frameworks, vigilant enforcement, and an informed public will be essential to safeguarding Ghana's digital ecosystem against fraudulent activities.