Traffic infringement notice emails
An email about a traffic offence with a link or attachment to "view the details" or "video proof". The attachment carries malware; the link leads to a form. Real authorities notify by post.
- Impersonates
- a traffic authority (varies by country)
- Arrives by
- First seen
- 2016-12
- Last seen
- 2016-12
- Specimens
- 1
- Updated
- 2026-09-02
Right now the only version we have seen
How to recognise it
- A fine by email, from an authority that writes letters
- No plate, no date, no location in the message
- A link or attachment to "view the details"
What to do
- Do not open the attachment or link
- Check any real fine on the authority's own site
- Delete it
Already called, clicked or paid? what to do in the next hour
- Entered a password? Change it now, and everywhere else you used the same one
- Entered card details? Call your bank, ask them to block the card and reissue
- Entered a one-time code? Sign in to the real service now and check for changes to email, phone and payment settings
How it changed
nothing to compare yet · one wave on record2016-12the infringement notice with "video proof"
Got a different version? A new subject line, sender, number or domain becomes the next point on this line. Redacted before publication. Send it →
02 Sept2026
Registry
Family created
Grew out of the 2016 guide.
21 Dec2016
Specimen
Specimen №1: the infringement notice with "video proof"
The guide documented the email layout and the malicious link/attachment.
Channel
email
Same trick, other brands
- Canada Revenue Agency refund and e-Transfer scamsarchived · 2026-09
Indicators
- None on record yet. Indicators change weekly; an empty list never means an email is safe.
In other streams
Registry data
- Machine-readable
/scams/traffic-infringement-notice.json- Timeline feed
/scams/traffic-infringement-notice/feed.xml- Sources
- 1 · 1 change logged
- Licence
- CC BY 4.0 · attribution required
- Created / updated
- 2026-09-02 / 2026-09-02