FWIW, this sort of thing is one of the reasons why I give a different address to each organisation that want my email address. That way, I know who's been careless with my details and can block any address that attracts a lot of spam. It also lets me check whether a message was sent to an appropriate address. For example, I'd know that the phishing spam in the OP was spam because it wouldn't have been sent to the address I gave DVLA. Similarly, I know that all those Paypal scam messages are bogus because they're not sent to the address that I gave Paypal.