Fake Toll Road Texts: A Growing Scam Threatening Consumers Nationwide

A chorus of warnings from various authorities is growing louder as a pervasive text message scam continues to target unsuspecting consumers. These fraudulent texts, masquerading as legitimate toll road collection notices, are designed to steal money and personal information from victims across the country. State and federal agencies are urging the public to exercise extreme caution and be vigilant against these deceptive schemes.

The Virginia Department of Motor Vehicles recently issued an alert to its residents, echoing similar warnings from the Pennsylvania Turnpike Commission and the Chesapeake Bay Bridge-Tunnel. These agencies are actively working to raise awareness about the scam and educate the public on how to identify and avoid falling victim to it.

The core of the scam revolves around sending text messages that appear to be official notifications from toll road agencies such as EZ Pass. These texts typically claim that the recipient owes money for unpaid tolls and provide a link to a fraudulent website where they are prompted to pay the alleged debt. However, these websites are carefully crafted to mimic legitimate toll road agency websites and are designed to steal credit card information, social security numbers, and other sensitive personal data.

According to a Federal Trade Commission (FTC) advisory, the primary goal of the scam is to defraud individuals by extracting money and pilfering their personal information. The FTC has been actively monitoring the situation and providing guidance to consumers on how to protect themselves.

Despite ongoing efforts by various outlets and agencies, including the FTC, to report on and combat the scam, new variations continue to emerge. The Turnpike Commission emphasized this point in a recent statement, highlighting the evolving nature of the threat and the need for constant vigilance.

The FTC issued a renewed warning about the scam in January, following a surge in reported incidents. The FBI reported receiving over 2,000 complaints in April alone, related to "smishing" scams impersonating toll road collection services in just three states. This indicates the widespread reach and significant impact of this fraudulent activity.

The prevalence of these scam texts is evident from reports across the United States. Staff members at USA TODAY in California, Washington D.C., Miami, New York City, Cincinnati, Indianapolis, and New Jersey have all confirmed receiving at least one version of the fraudulent text messages or variations thereof since the beginning of February.

The FTC advisory succinctly summarizes the situation: "Whether you’ve driven through a toll recently or not, you might’ve gotten a text saying you owe money for unpaid tolls. It’s probably a scam." This highlights the indiscriminate nature of the scam, as even individuals who have not recently used toll roads are being targeted.

The language used in the scam texts can vary depending on the location. For example, one scam message reported in Florida read: "Please pay your toll in Florida by January 21, 2025. In order to avoid excessive late fees and potential legal action on statements, please pay your tolls in time. Thank you for your cooperation and wish you a pleasant holiday. https://sunpass.com-8If5.sbs/us/". This example demonstrates the use of urgency and potential legal consequences to pressure recipients into clicking the link and providing payment information.

Other variations of the scam may instruct victims to copy and paste the provided link into their browser instead of directly clicking on it. This tactic is likely intended to bypass certain security measures or to make the link appear more legitimate to the recipient.

One message received by a USA TODAY staff member in Washington D.C. stated: "Pay your FastTrak Lane tolls by February 13, 2025. To avoid a fine and keep your license, you can pay at https://ezdrivema.com-xlk.vip/i/. (Please reply Y, then exit the text message and open it again to activate the link, or copy the link into your Safari browser and open it)." This example showcases the use of threats, such as fines and license suspension, to instill fear and prompt immediate action. It also includes a peculiar instruction to reply "Y" and reopen the text message, which is likely a technique to further disguise the malicious nature of the link.

The FBI and FTC strongly advise against clicking on any links or providing any personal information in response to unsolicited toll agency text messages demanding money. Instead, they recommend the following steps:

• Contact the toll agency directly: If you are unsure whether the text message is legitimate, contact the toll agency directly through their official website or phone number. Do not use the contact information provided in the text message.
• Check your account online: Log in to your toll road account online to verify whether you have any outstanding tolls.
• Report the scam: Report the scam to the FTC and the FBI’s Internet Crime Complaint Center (IC3).

Smishing, the technique used in these scams, is a type of social engineering attack that employs fake text messages to deceive individuals into downloading malware, sharing sensitive information, or sending money to hackers, according to IBM. The term "smishing" is a combination of "SMS" (short message service) and "phishing," an umbrella term for social engineering attacks that aim to trick people into revealing confidential information.

The proliferation of these fake toll road text scams highlights the importance of remaining vigilant and informed about the latest cyber threats. By understanding how these scams operate and following the recommendations provided by law enforcement and consumer protection agencies, individuals can significantly reduce their risk of becoming victims. Remember, always be skeptical of unsolicited text messages, especially those demanding money or personal information. When in doubt, contact the relevant agency directly through official channels to verify the legitimacy of the communication. Staying informed and cautious is the best defense against these increasingly sophisticated and pervasive scams.