Scammers are getting more creative, and one of their favorite tricks is making fake websites look almost identical to legitimate ones. The goal is simple, and that’s to trick people into handing over sensitive information such as their full name, credit card number, account details, and other personal data.

Government agencies aren’t immune either. Motorists have recently been targeted by text messages claiming they have an outstanding No Contact Apprehension Policy (NCAP) violation that needs to be settled through a provided link. (What is NCAP? Read more: MMDA NCAP: How it works and what you need to know).

Clicking that link and entering your payment or personal information could put your bank account and other financial details at risk.

So, how can you tell if an NCAP text is legitimate?

Fake NCAP notification text message | Photo courtesy of John Mendoza

What the MMDA says

According to the Metropolitan Manila Development Authority (MMDA), there are several red flags every motorist should watch for when receiving an alleged NCAP notification.

1. It should come from “MMDA_NCAP”

The MMDA says its official NCAP text notifications are sent only from “MMDA_NCAP.”

There’s also an important catch. The notification system can only send messages to motorists who have an existing account on the agency’s vehicle portal and have explicitly consented to receive notifications.

If you don’t meet those conditions, treat the message as a scam.

2. MMDA does not send payment links

A legitimate NCAP notification from the MMDA will not contain a link redirecting you to a payment page. Scammers often use links leading to fake websites designed to look like official MMDA pages. Once there, motorists may be asked to enter personal or financial information.

3. No late-payment penalties or surcharges

Scam messages often create a sense of urgency by claiming that an NCAP violation will incur additional penalties or surcharges if it isn’t paid immediately. The MMDA maintains that legitimate NCAP violations do not have late-payment penalties or surcharges. An unpaid violation may instead result in additional hassle when the vehicle’s registration comes up for renewal.

4. Your name should not appear in the notification

Another tactic scammers use is including the recipient’s name to make the message appear more legitimate. The MMDA maintains that its official NCAP notifications will not include the name of the vehicle owner or registered owner.

So, if you receive an NCAP text asking you to click a link and pay a supposedly urgent fine, don’t panic and don’t click.

Users will be directed to a phishing website like this | Photo courtesy of John Mendoza

What cybersecurity experts say

Spotting a fake NCAP text message isn’t rocket science. Aside from the specific red flags identified by the MMDA, there are a few basic cybersecurity practices that can help motorists avoid these scams.

1. Check the language and grammar 

Poor grammar, unusual wording, spelling mistakes, or awkwardly translated sentences can be warning signs that a message isn’t from a legitimate government agency.

But don’t rely on grammar alone, though. Scammers can produce convincing messages, while legitimate agencies can occasionally send messages containing minor errors. But it helps to always treat this unusual language as a red flag.

2. Don’t click. Delete.

If a text message looks suspicious, don’t click any links, open attachments, or reply to it. Delete the message instead. This reduces the chance of accidentally opening the link later or entering sensitive information on a fake website.

Legit MMDA website | screen shot from mayhulika.mmda.gov.ph

3. Check the website address carefully

If you want to check if you have an NCAP violation, go directly to the MMDA’s official NCAP website: mayhulika.mmda.gov.ph. Don’t use the link provided in a suspicious text message.

Also, pay close attention to the domain name. Small changes such as extra words, hyphens, or a different domain extension can indicate a fake website designed to look legitimate. An official website will have dot gov dot ph (mmda.gov.ph) on it; if it has a different one, treat it as fake.

If you want an easier way, use the eGov app.

4. Verify only through the official website

Once you’re on the official MMDA NCAP website, you can enter your vehicle’s license plate number and MV file number, which can be found on your vehicle’s Certificate of Registration (CR), and follow the instructions.

If you do have an outstanding NCAP violation, use only the official payment channels provided by the MMDA.

5. Always assume it’s fake

An NCAP notice should never be an excuse to hand over your credit card number, online banking credentials, passwords, PINs, or one-time passwords (OTPs). Even if a website looks exactly like the real thing, don’t assume it’s legitimate simply because it carries an MMDA logo or uses familiar colors and layouts.

6. Don’t panic

Scammers want you to act before you have time to think, and these messages claiming that your fine will suddenly increase, your account will be suspended, or you must pay within a few hours are designed to make you panic.

Stop, verify, and only then take action. If there’s a legitimate violation, check it yourself through the official MMDA website instead of following instructions from an unsolicited text message.

And perhaps the easiest way to avoid that nagging thought of “May violation ba ako?” is to simply follow the traffic rules whenever you’re behind the wheel (or handlebar).