UK Driving Tests Hijacked by Scalper Bots: Learners Left in the Lurch

The Growing Threat of Automation in Public Services

A new wave of bot-driven fraud is wreaking havoc on the UK’s already strained driving test system. Research from cybersecurity firm DataDome has exposed a worrying trend: scalper bots are outpacing human applicants by snapping up test slots in mere seconds, only to resell them for inflated prices. While the official fee for a driving test sits at £65, desperate learners are being forced to pay up to £250 on social media just to get a shot at booking one.

This situation has intensified frustrations for learners, many of whom are already dealing with post-pandemic backlogs and a shortage of test examiners. As bots take over the booking process, genuine applicants are increasingly shut out, with some waiting over six months—long enough for their theory test certification to expire.

Despite these troubling developments, the use of bots to book driving tests isn’t technically illegal. And while the DVSA (Driver and Vehicle Standards Agency) has promised action, current countermeasures appear woefully inadequate. From weak CAPTCHA protections to bot-friendly website architecture, the DVSA’s defenses are no match for even amateur programmers. The implications stretch beyond inconvenience, posing real risks of data misuse and fraud.

What’s Happening with UK Driving Tests? A 30-Line Breakdown

Scalper bots are being used to book driving test slots faster than any human can.
These bots grab appointments within 10 seconds, while it takes a human about 4 minutes.
Once booked, the test slots are resold for as much as £250, creating an unfair marketplace.
This black market is thriving on social media, where scalpers advertise their services openly.
DataDome, the cybersecurity company behind the research, warns of fraud and privacy risks.
Some bots request personal details, putting users at risk of identity theft or data breaches.
The problem is compounded by a backlog of test-takers, which started during the COVID-19 pandemic.
Shortages of test supervisors mean delays have become routine.
The DVSA aims to cut wait times to 7 weeks by December, but that’s looking increasingly unlikely.
Without effective anti-bot measures, the system remains easy to exploit.
CAPTCHA tests, often used to block bots, are only placed at the beginning of the DVSA process.
Bots can bypass this easily using open-source frameworks and CAPTCHA-solving tools.
Even beginner coders can build a DIY scalper bot with little knowledge.
No laws currently exist to ban the use of bots in driving test bookings.
As a result, learners are stuck in limbo, with many losing the chance to take their tests before their theory certificates expire.
DVSA’s enforcement is primarily aimed at instructors misusing the system, not scalper bots.
DataDome stresses that core booking infrastructure is vulnerable, not just select endpoints.
Bots have created a parallel economy, where booking access is based on how much you can pay.
Some scalpers claim to make thousands daily, taking advantage of a broken system.
Frustrated learners often resort to paying touts out of desperation, perpetuating the cycle.
Meanwhile, the DVSA’s failure to modernize its cybersecurity allows this to continue unchecked.
The UK government has not yet introduced specific legislation to tackle this type of automated exploitation.
Automation in public services, once a symbol of efficiency, is now a double-edged sword.
DataDome highlights the urgency of building bot-resistant platforms for public access services.
Without changes, scalper bot networks will continue to dominate key booking systems.
The public outcry grows as more learners speak out about unfair delays and high resale prices.
Some online users have begun to share bot-dodging tactics, but success is limited.
The UK’s slow digital response highlights a gap between cybersecurity needs and policy action.
While action is promised, time is running out for those stuck in the backlog.

What Undercode Say:

This issue is a glaring example of how automation—designed to streamline services—can be weaponized when left unchecked. The UK driving test crisis isn’t just about slow government services; it’s about the inability of public institutions to evolve in the face of modern cyber threats.

The DVSA’s site is an outdated system, riddled with vulnerabilities. By only applying anti-bot measures to select endpoints and using a basic CAPTCHA that bots can easily bypass, the agency has essentially created a digital loophole. DataDome’s ability to break through using publicly available tools exposes how minimal the DVSA’s defense strategy truly is.

At the heart of the matter is digital inequality. Those with money or tech-savviness—or both—are able to manipulate access to public services, while ordinary citizens get left behind. This sets a dangerous precedent. Government-run booking systems should serve everyone equally, but the rise of bot-driven profiteering is turning that promise into a myth.

Let’s not overlook the financial predation happening here. When test slots are resold for nearly four times their original price, it’s no longer a minor annoyance—it’s economic exploitation. Worse, many learners are teenagers or young adults, the demographic least equipped to handle such inflated costs. They’re being priced out of a service that’s essential for jobs, education, and independence.

Moreover, the ethical implications are alarming. The collection of extra personal information by these resellers isn’t just shady—it opens doors to potential identity fraud and online scams. The longer this goes unregulated, the more normalized this behavior becomes. Scalpers are becoming emboldened, even boasting about their earnings online.

And let’s talk about the regulatory vacuum.

The DVSA’s promise to reduce wait times feels more like a PR move than a functional strategy. Without addressing the underlying technical failures, no number of new policies will solve the root of the problem. Technology needs to be part of the solution—not just more paperwork and policing of instructors.

This isn’t just a story about driving tests. It’s about the future of digital governance. If we can’t secure something as basic as a test booking, how will we protect more complex systems? From passport applications to healthcare appointments, the bot problem is only going to grow.

Ultimately, this crisis is a call to action. Public service platforms must be rebuilt with bot protection at their core. The longer we delay, the more we erode public trust—and the greater the risk becomes.

Fact Checker Results:

Bot-driven test booking in the UK is confirmed by cybersecurity firm DataDome, a reputable source.
The DVSA currently lacks robust bot protection across its entire booking system.
There is no UK law explicitly banning scalper bots for public service access, creating a legal loophole.