Fraudulent Website Offers Driving Licenses Without Tests in Punjab
A sophisticated online scam is targeting residents of Punjab with false promises of driving licenses issued without physical testing. The fraudulent website dastakpunjab.online, which has been circulating on WhatsApp and social media platforms since early January, claims to offer government-endorsed license services for a fee—allegations that officials have categorically denied.
Background and Context
The scam emerged amid growing digitalization of public services in Punjab, where the provincial government has launched legitimate platforms like dastak.punjab.govt.pk for certain administrative services. The fraudulent website cleverly mimics this official portal but operates under a different domain—“.online” rather than the government’s “.govt.pk.” The site references Punjab Chief Minister Maryam Nawaz Sharif’s vision, lending an air of credibility to its false claims.
Official government services for driving licenses remain strictly regulated. While the authentic portal handles specific transactions like duplicates or renewals, first-time applicants must complete in-person procedures including biometric verification, photography, and practical testing requirements.
Key Figures and Entities
Muhammad Usman Qureshi, spokesperson for the Punjab traffic police, confirmed to Geo Fact Check that authorities have identified multiple fraudulent pages impersonating government services. “This process cannot be conducted online,” Qureshi emphasized, referring to the mandatory physical testing requirements for initial license applications.
Anees Qureshi, an open-source intelligence analyst at Bytes for All in Islamabad, provided technical analysis of the operation. He noted that “.online” domains are frequently exploited for fraudulent activities due to their low cost and minimal verification requirements, making them attractive platforms for scams targeting unsuspecting citizens.
Legal and Financial Mechanisms
The fraudulent operation employs a multi-stage deception process. Users are first prompted to submit sensitive personal data—including CNIC numbers, identification document images, and contact information. The scheme culminates with requests for payment through popular mobile financial services like Easypaisa and JazzCash, creating avenues for both financial fraud and identity theft.
According to cybersecurity experts, such operations often harvest personal data for resale on dark web markets while simultaneously extracting immediate monetary payments from victims. The collection of comprehensive identity documentation enables perpetrators to commit further fraudulent activities using stolen credentials.
International Implications and Policy Response
This incident highlights broader vulnerabilities in digital governance initiatives across South Asia, where rapid service digitization has outpaced consumer awareness and protective regulatory frameworks. Similar fraudulent schemes have been documented across the region, prompting calls for enhanced domain verification protocols and public education campaigns.
Digital rights advocates argue that governments must implement more robust authentication systems for online portals while strengthening public awareness about official digital channels. The Punjab case underscores the need for coordinated responses between law enforcement, regulatory bodies, and telecommunications companies to disrupt fraudulent operations at their source.
Sources
This report draws on Geo Fact Check investigations, official statements from the Punjab traffic police, analysis from Bytes for All, and public records of the official Punjab government services portal. Reporting was conducted in January 2025.
