Summary
In recent months, a surge in text message scams has caught the attention of consumers and cybersecurity experts alike, with reports indicating a staggering 900% increase in these deceptive attacks. One of the most prevalent tactics involves fraudulent toll collection messages, designed to trick recipients into clicking on malicious links and surrendering personal or financial information. These texts often impersonate well-known toll agencies, threaten penalties or license suspensions, and appear alarmingly legitimate.

How the Scam Works 

An individual will receive a text message from what appears to be a state tollway collection service, like the Illinois Tollway, the Florida Turnpike (Sunpass), Georgia Peach Pass, NC Quick Pass, or E-ZPass VA. The text message states the user owes a road toll fee, and must pay it immediately to avoid a late fee. Other variations are in Massachusetts for $6.99, Georgia Peach Pass for $3.75, the Ohio Turnpike for $7.60 or even $97.50, with a $150 penalty, and Texas Toll for $7.79. 

The message includes a link to settle your balance, which seems to be from the state’s toll service, making it appear legitimate. However, if you click the link, you might notice that they are requesting sensitive personal information, such as your Social Security number. If you proceed and provide your personal and payment details on the website, scammers could gain access to this information, potentially resulting in financial losses.

How to Spot a Toll Scam

• Legitimate agencies DO NOT send payment requests via text.
• Scams will give the target a deadline (i.e., 12 hours) to get the target to move quickly.
• Scams likely come from unknown numbers and have strange URLs attached.

How to Avoid Text Message Scams

• Verify your outstanding toll balance with the legitimate agency. Instead of clicking on the link in the text message, go to your web browser, find the toll service’s actual website, and log in to your account to verify if you have any outstanding toll payments. Another way to verify this is by calling the toll service’s customer service line. Do not call the phone number that texted you or any phone numbers included in the text message. Instead, find the toll service’s legitimate phone number on their website. State road toll collection agencies will never request payment via text message.

• Know the warning signs of a fake text. If you receive an unusual text message, especially originating from an out of country area code, there are several things to look for to help you identify if it’s fraudulent. 
  
  
• Don’t click on links or download files that are unexpectedly texted to you. It may be hard to identify if a link sent in a text message is safe. Scammers can disguise a URL to appear legitimate when it isn’t.
  
  
• Don't give out your personal information. Phishing scams frequently request personal information such as your birthdate and Social Security number. Never disclose this information unless you are absolutely certain that you are communicating or working with a legitimate entity that you can trust.
  
  
• Block the number and delete the message. Do not engage with the scammer if you think you received a fake text message. Instead, block the phone number and delete the text message. Refusing to engage and blocking the phone number can help prevent scammers from contacting you again.
  
  
• If you receive a text message impersonating a road toll collection service, report it. You can file a report to help warn others about this new scam. Reporting scams helps consumers become aware of scams and helps law enforcement track down scammers.

REMEMBER:  If you are the target of a Toll Scam:

• DO NOT click the link, copy and paste into a search bar, or anything that would access the link.

• DO report the number to the FTC (https://www.reportfraud.ftc.gov), FBI IC3 (https://www.ic3.gov/), and report to your toll agency.  

• DO verify your toll balance by visiting your official Toll Agency’s website.