The FBI has issued a warning to smartphone users in the United States. Fake toll road payment texts are spreading across states, targeting both iPhone and Android users.
Massive Surge in Scam Toll Texts
Scammers are sending fraudulent text messages claiming recipients owe unpaid toll fees. The messages contain links leading to fake websites designed to steal financial and personal information. The FBI warns people to delete these messages immediately.
The Anti-Phishing Working Group (APWG) reports that the scam is spreading rapidly. The messages impersonate multi-state toll operators, including EZPass. These texts follow the same fraudulent pattern as phishing messages related to package deliveries and other financial transactions.
Have you received a text suggesting you may owe unpaid tolls on your vehicle? There is a good chance it’s a fraudster trying to get your personal information. Learn more about this scam here: https://t.co/zYW4AzhdzG pic.twitter.com/iSA7b4NeYN
— FBI Seattle (@FBISeattle) March 19, 2025
Tens of Thousands of Fake Domains Registered
Hackers use thousands of fake domains mimicking state toll agencies. The links change frequently to evade detection. Many scam domains use lesser-known Chinese top-level domains such as .TOP, .CYOU, and .XIN.
APWG highlights compliance issues with these domains. ICANN issued a breach letter to the .TOP Registry in July 2024, citing non-compliance with abuse reporting and mitigation requirements. As of March 2025, the case remains unresolved.
19 Billion Spam Texts Sent in One Month
Robokiller, a spam detection service, reports that over 19 billion spam texts were sent in the U.S. in February alone. Cybersecurity experts warn that the scam is not about collecting small toll payments.
Aidan Holland from Censys explains that attackers aim to steal credit card details rather than just small amounts. The Federal Trade Commission (FTC) warns that these scams can also lead to identity theft.
FBI’s Response and Public Advisory
The FBI urges recipients of these scam texts to report them. The agency suggests checking accounts using official toll service websites and deleting any suspicious messages.
State officials have joined the warning. New York State Governor Kathy Hochul emphasises the importance of public awareness, stating, “Public safety is my top priority, which is why I’m urging New Yorkers to take caution against senseless scammers sending fake E-ZPass text messages in an attempt to collect money for fake unpaid tolls.”
Tactics Used by Scammers
The scam texts use similar wording and urgent language to pressure victims into making payments. A new variation of the scam message reads:
“City Department of Transportation Final warning: $6.99 owed. Must pay by 03/17 to close case or face court summons. Settle now: Thank you for your cooperation.”
Figure 1: Spam text sent to a user
Trend Micro warns that scammers use urgency to trick recipients into clicking links. These messages often claim that failing to pay will result in fines or legal action.
Cybersecurity Experts Call for Stronger Measures
Trend Micro’s Jon Clay states that Apple does not take action against such threats. He explains that Android adds scam numbers to a spam list, but scammers change numbers frequently.
The open nature of SMS and RCS protocols makes blocking these messages difficult. Cybersecurity companies stress the need for stronger measures from phone manufacturers and mobile networks.
How to Identify and Avoid the Scam
Norton advises users to stay cautious of unexpected toll violation notices. Legitimate toll agencies do not send random emails or texts demanding payment.
Key warning signs include:
- Sudden notices for unpaid tolls without prior knowledge
- Urgent or threatening language pressuring immediate payment
- Unusual sender email addresses or website links with slight misspellings
- Suspicious links that do not match official toll agency websites
- Requests for personal details such as Social Security or credit card information
Also Read: Trump Awards Boeing $20 Billion Contract for Next-Gen Fighter Jet
Scammers Expanding Beyond Toll Messages
Experts predict that scammers will shift tactics once the toll scam loses effectiveness. Other phishing scams using similar methods could target different sectors.
The FBI advises people to stay vigilant against all unexpected payment requests via text. People who have clicked on scam links should monitor their accounts and change key passwords.
Authorities Urge Public to Report Scam Texts
The FBI and APWG encourage people to report scam messages to help improve fraud detection. Reports can be submitted to the FBI’s Internet Crime Complaint Center at IC3.gov or to APWG at apwg.org/sms.
Government agencies continue to warn the public against clicking on suspicious links. Authorities emphasise that staying informed and cautious is the best defence against digital fraud.
