Call free on 0800 229 4441

DVLA insider jailed over £1.3m vehicle records fraud

Former DVLA employee Matthew Holloway manipulated official records to give stolen and damaged cars clean identities. He got four years; his network made off with seven figures.

Dave at EasyReg
Published 10 Jun 2026 · 4 min read

£1.3 million. That's how much a DVLA insider fraud network boosted car values by manipulating the official vehicle records you rely on when buying a car — turning write-offs into clean cars, cloned plates into legitimate registrations, and stolen vehicles into apparently legal motors. The man at the centre, former DVLA employee Matthew Holloway, was jailed for four years this week after secretly altering records that underpin the entire UK vehicle registration system.

The scheme, which ran for at least two years, shows what happens when someone with database access decides the rules don't apply. Holloway, 32, from Birchgrove in Swansea, had administrative privileges that let him change vehicle histories, registration marks, and keeper details without triggering the usual oversight. Every alteration looked legitimate because it was coming from inside the system.

How the fraud worked

The network operated like this: dealers and facilitators would identify damaged, stolen, or cloned vehicles that were essentially worthless in their current state. They'd pass details to Holloway, who would log into DVLA systems and clean up the records. A write-off became an undamaged car. A cloned registration became unique. A stolen vehicle acquired a legitimate history.

The fraud was only detected when DVLA's internal auditing spotted patterns in Holloway's access logs — too many record changes, too many high-value alterations, too many requests from the same external contacts. By then, the network had artificially inflated the value of dozens of vehicles by an average of over £20,000 each.

The wider network

Holloway wasn't working alone. The court heard evidence of at least six other individuals involved in the scheme, including vehicle dealers who sourced the problematic cars and facilitators who coordinated between the dealers and Holloway. Two other men from Swansea — Andrew Evans, 35, and Dean Carpenter, 38 — were also jailed as part of the same investigation.

The scheme relied on Holloway's access, but it was structured like a business. Dealers paid fees for each "cleaning" service, typically between £1,000 and £3,000 depending on the complexity of the record changes required. For a stolen Range Rover with a problematic history, £3,000 to make it sellable at £40,000 was apparently easy money.

What it means for the market

The fraud highlights how much trust the used car market places in DVLA data. When you're buying a car, the V5C registration document and the DVLA database are your primary sources for the vehicle's legitimacy. If someone inside the agency can alter that data, the entire foundation shifts.

The agency says it has since tightened access controls and audit procedures to prevent similar fraud, but the case raises questions about how many other problematic vehicles might have acquired clean histories before the scheme was detected. There's no suggestion that current DVLA records are unreliable, but it's a reminder that the data is only as trustworthy as the people who manage it.

For private plate buyers, the case doesn't change much — personalised registrations are handled through different systems with different oversight. But it's worth remembering that the registration marks we buy and sell depend on the integrity of the same database that Holloway was manipulating.

The aftermath

Holloway was dismissed immediately when the fraud was identified and has now been jailed for four years. The other network members received sentences ranging from 18 months to three years. The DVLA says it has recovered some of the fraudulent gains, but didn't specify how much of the £1.3 million has been clawed back.

A DVLA spokesperson called it "a serious breach of trust by a former employee" — which it clearly was, but also a systematic failure of the controls that should prevent exactly this kind of insider access abuse. The agency processes millions of vehicle transactions every year; the integrity of that data is what makes the whole system work.

Four years seems light for £1.3 million worth of fraud, but at least the network has been dismantled and the access points closed off. Whether similar schemes are operating elsewhere in the system is a question only better auditing will answer.

Dave at EasyReg
Customer success at EasyReg. Writes about the UK private plate market.