Hacker Sells 170 Ghost MOTs Through Garage System

A shocking cyber security breach involving an MOT testing station has once again highlighted the growing threat of “ghost MOTs” across the UK motor trade.

According to recent reports, hackers allegedly gained access to a garage’s MOT testing system and issued around 170 fraudulent MOT certificates within a single week. The garage says the vehicles were never physically tested, with the fake MOTs effectively sold online using compromised credentials.

The story has sparked serious concern throughout the MOT industry, not only because of the scale of the fraud, but because it demonstrates how vulnerable some garages may still be to cyber attacks.

What Is a Ghost MOT?

A “ghost MOT” is an MOT certificate issued without the vehicle ever being inspected.

In many cases, rogue testers deliberately abuse the MOT Testing Service (MTS) system for profit. However, this latest incident appears different. The garage involved claims hackers infiltrated its systems and used access credentials to create fake passes remotely.

That distinction matters.

This was not simply an MOT tester cutting corners. It appears to have been organised cyber-enabled fraud using legitimate garage access.

Why This Case Matters

The MOT scheme relies heavily on trust, accountability and secure digital systems. If criminals can gain access to garage accounts and issue certificates remotely, the consequences go far beyond paperwork.

Potentially dangerous vehicles could remain on UK roads unchecked, including cars with:

• Worn tyres
• Faulty brakes
• Steering defects
• Dangerous corrosion
• Lighting failures

Industry experts have already warned that ghost MOT fraud is increasing rapidly across the UK. Recent figures suggest reported cases have doubled within a year.

The concern for genuine MOT businesses is equally serious. A compromised garage risks:

• DVSA investigations
• Suspension from testing
• Reputational damage
• Insurance complications
• Loss of customer trust

Even if the garage itself is the victim.

Could This Happen to Other Garages?

Unfortunately, yes.

Many independent garages still rely on weak passwords, shared logins, outdated PCs, or poorly managed networks. Cyber security often takes a back seat to workshop operations, especially in smaller businesses.

Commentary surrounding the case has suggested phishing attacks or stolen credentials may have been involved rather than sophisticated “Hollywood-style” hacking.

That means simple security failures could open the door to major fraud.

Common vulnerabilities include:

• Shared MOT login details
• Weak passwords
• No multi-factor authentication
• Staff clicking phishing emails
• Unsecured remote desktop software
• Old Windows systems without updates

The DVSA Is Already Tightening Controls

The DVSA has been increasing efforts to tackle MOT fraud in recent years.

Measures already introduced or trialled include:

• Monitoring unusually fast MOT completion times
• Analysing abnormal pass rates
• Increased enforcement investigations
• Photo capture requirements during tests
• Stronger audit trails within MTS

The agency has also suspended hundreds of testers and garages linked to fraudulent activity.

Cases like this will almost certainly accelerate further security measures.

What MOT Testers and Garage Owners Should Do Now

This incident should serve as a wake-up call for every MOT station in the UK.

Garages should immediately review:

Password Security

Every MOT user account should have a unique, strong password that is changed regularly.

Staff Access

Remove old employee accounts and avoid shared logins between testers.

Email Awareness

Train staff to recognise phishing emails and suspicious links.

Device Security

Ensure workshop computers are updated, protected by antivirus software, and properly secured.

Audit MOT Activity

Regularly check MOT histories, timestamps and unusual testing patterns.

Cyber Essentials

Consider obtaining Cyber Essentials certification to improve basic protections.

Protecting the Reputation of the MOT Industry

Most MOT testers operate professionally and responsibly. However, stories like this damage public confidence in the entire sector.

For honest garages, maintaining strong cyber security is no longer optional. Protecting MTS access is now just as important as calibrating equipment or following proper test procedures.

As the automotive industry becomes increasingly digital, cyber crime is becoming another workshop risk garages must actively manage.

The tools criminals use are evolving quickly, and the MOT industry will need to evolve with them.

For MOT testers and garage owners, the message is simple:

Your MOT bay may be secure. But is your computer system?

How MOT Shield Can Help Protect Your Garage

Cases like this highlight just how vulnerable MOT Testing Stations can become, even when the business itself may be the victim rather than the offender. When DVSA investigations begin, garages can quickly find themselves facing disciplinary correspondence, penalty points, suspension risks, and significant stress trying to navigate complex compliance procedures alone.

This is where MOT Shield from motester.co.uk can provide vital support for garages and MOT testers. MOT Shield gives Testing Stations affordable access to experienced MOT consultants who can provide professional representation and guidance if disciplinary action or DVSA investigations arise. The service includes written representation, expert advice, and consultant support throughout the process, helping garages protect their MOT authorisation and respond correctly to serious compliance issues.

In an era where cyber threats, ghost MOT fraud, and increased DVSA scrutiny are becoming more common, having professional backup in place could make all the difference between protecting your business and risking costly consequences.