So I just had a call from my mum who is over 70 and was really upset. She had a letter about renewing her driving license directing her to a government website to do so for free. She typed it in but probably to google not in the url bar and clicked the top link thinking it was the government website. Of course it wasn't and she proceeded to type in all her details including passport no, dl no, NINO, address and credit card number even though she knew it should be free she though they needed it to verify identity. She has been charged £70 for what should have been a free service and only realised when the confirmation email came through. I'm sure anyone reading this post would immediately know it's not the gov website. I'm also sure she can get the money back via chargeback however it's all the personal data she has entered that I'm concerned about. A quick check on the website https://licencesafe.co.uk/ shows it is run by a UK Ltd company ELECTRONIC CHECK LTD which is owned 100% by a French national called Benjamin Nessim Choukroun. It appears he runs a number of other website charging for free government services like DBS checks etc.. I've checked and I cannot see if they are registered with the ICO as a data processor which would be a criminal offense. If they are not registered with the ICO then what chance do I have of them honouring a deletion request using GDPR legislation. His website says they don't accept correspondence to their registered address which is nonsense. From experience reporting to the ICO takes in excess of 6 months to even get a first letter from them. Other than that I cannot see that what they do is illegal just very scummy. Anyone have any comments on this sort of business model. Also what could a nefarious person do with that information and what protections can my mum put into place to guard against them?