Haven’t sent it yet? Don’t email or message the photo. Email isn’t encrypted, the file lingers in inboxes and backups, and you have no way to delete it once it’s sent.
Safer alternatives, in order of preference: show the licence in person at the meeting, upload through the asker’s secure portal if they have one, or send via an encrypted one-time link such as FileSeal that auto-deletes once the recipient downloads it.
If you’ve already sent it, scroll on for the 24-hour recovery steps.
What Information Is at Risk
A UK photocard driving licence contains your full legal name, date of birth, current address, signature sample, recent photograph, driving licence number, issue and expiry dates, DVLA reference numbers, and vehicle categories. That combination is enough for a fraudster to open a bank account in your name, apply for credit, rent a property, or build a forged ID using your details.
The driving licence number itself encodes more than people realise: the first five letters of your surname, your date of birth, and your initial. Fraudsters who only have the number can derive several of your other details from it. Even a partial leak is worth treating seriously.
Immediate Actions (First 24 Hours)
The recipient is probably honest and the photo will sit untouched, but you have no way to verify that. Treat it as a precaution rather than a crisis, and work through the steps below in order. Most fraud attempts on a leaked ID document happen quickly, so the first hour is where the bulk of your protection comes from.
What to do, in order:
- Within the hour. Ask whoever you sent the photo to (or whoever you suspect has it) to delete it from every place they’ve stored it and to confirm in writing. Then call DVLA on 0300 790 6801 to log the exposure against your licence record, and Action Fraud on 0300 123 2040 if there are any signs the photo has been misused.
- Within 6 hours. Check your credit report (free at Experian, Equifax, and TransUnion) for any application or account you didn’t make. Call your bank’s fraud line to put a marker on your accounts and discuss whether to issue new cards.
- Within 24 hours. Change passwords on banking, primary email, and any account that uses your driving licence number as a verification field. Turn on two-factor authentication where it isn’t already on. Consider CIFAS Protective Registration (£30 for two years) which adds a marker to your credit file prompting lenders to run extra checks on any application in your name.
- Ongoing. Review your credit file every few weeks for at least six months. Stolen identity documents tend to get used quickly, but they can also resurface years later, so don’t assume the danger has passed just because nothing has happened in the first month.
Never Let This Happen Again
Share your driving licence via encrypted upload links. Auto-delete after download.
What Happens If You Don't Act Fast
If a leaked driving licence is used for identity fraud, the financial loss for an individual victim runs from a few hundred pounds to several thousand, depending on how quickly the fraudster moves and which products they target. Recovery usually takes months rather than weeks; credit-file damage can take longer still to clear, especially if accounts are opened with high-street lenders who report quickly to all three credit agencies.
The single biggest lever you have on that timeline is the first 24 hours. Reporting to DVLA and Action Fraud creates a paper trail that supports later disputes; calling your bank’s fraud line puts a marker on your accounts before anything is opened; placing a CIFAS Protective Registration adds a check on every application in your name. None of these stop a determined fraudster outright, but each one shortens the window in which they can act unchallenged.
Related guides
- Is It Safe to Email Your Passport?. The same risks apply to passports. Here’s the full breakdown.
- Identity Theft Recovery: Complete Guide. Step-by-step plan if your identity has been compromised.
- UK Rental Documents: Security Checklist. Landlords often ask for driving licence photos. Know your rights.
- Dropbox Alternative for Sensitive Documents. Why general cloud storage isn’t enough for ID documents.
Next Time, Send Your Driving Licence Securely
When your solicitor, recruiter, or insurer needs your driving licence, don't email it. Send it securely instead, encrypted, auto-deleted after download, and with a full audit trail.
Written by the FileSeal security and compliance team. We specialise in document security, GDPR compliance, and data protection for UK professionals. Our guides are reviewed by industry practitioners and updated regularly.