3 min read
An in-depth investigation by TechJuice’s team has exposed a sophisticated digital scam spreading rapidly on TikTok, targeting Pakistani drivers.
The scam issues fake promises of home-based renewal for driving licenses via Punjab’s official Driving License Information Management System (DLIMS).
The probe, triggered by user reports and suspicious ads spotted in late 2025, revealed a coordinated operation using sponsored promotions, cloned branding, urgency tactics, and data theft to exploit growing trust in e-government services.
How the Fraud Begins
TechJuice’s investigative team uncovered the scam by monitoring TikTok ads, analyzing promoting accounts, tracing redirects, and testing the fake sites hands-on. They identified patterns like anonymous accounts with no content but official DLIMS logos, Netlify-hosted clones, and anti-evidence features, details that matched broader government impersonation trends.
The fraud begins with TikTok sponsored ads claiming “renew your driving license from home without visiting traffic offices.” Ads mimic official language and visuals for legitimacy. Promoting accounts show clear red flags: no videos, zero organic engagement, yet blatant use of DLIMS branding.
Clicking redirects to counterfeit sites (often on Netlify, abused for fast anonymous deployment). These clones replicate the real process: personal info entry, vehicle selection (motorcycle, car, LTV, HTV, PSV), and fees matching official rates. The trap springs when users upload sensitive documents, i.e., CNIC front/back and passport-sized photos. This data powers identity theft, SIM fraud, bank takeovers, and illegal loans rampant in Pakistan.
Urgency builds with a fake “token number” and expiry timer, implying a provisional license vanishes without payment. A malicious feature: sites block screenshots (device warnings trigger), no legitimate portal does this, aimed at destroying evidence.
Payments demand via JazzCash (or equivalents) to untraceable “mule” accounts i.e., Khatoon, cashed out quickly.
This aligns with Pakistan’s surging impersonation scams hitting NADRA, Ehsaas/BISP, passports, fines, and DLIMS. Social media drives traffic amid weak ad moderation. FIA/NCCIA note rising 2025 cyber complaints, including similar fakes (e.g., past Islamabad clones like dlims-itp.com flagged fraudulent).
Red Flags & Protection Tips (from TechJuice findings):
- Official DLIMS only at dlims.punjab.gov.pk (or verified .gov.pk via Dastak app/Punjab Police).
- Government never advertises via anonymous TikTok/Facebook or third-party sites.
- Legitimate services don’t block screenshots, demand upfront CNIC/payment to personal wallets.
- Verify via official apps (Punjab Police/Rasta) or helplines.
If targeted:
- Report ads to TikTok/Facebook immediately.
- File with FIA Cyber Crime Wing (complaint.fia.gov.pk or 1991).
- Monitor accounts; freeze CNIC via NADRA if compromised.
As DLIMS 2.0 expands (full online renewals, learner/international licenses, home delivery via Pakistan Post), scammers evolve, as need for platform accountability and user vigilance is dire now more than ever.
