Beware the Toll Road Text Scam: How Smishing is Targeting Drivers Nationwide

As technology advances, so do the tactics of cybercriminals who exploit it for fraudulent activities. An alarming threat that has been growing rapidly includes fake text messages about unpaid toll fees, also known as “smishing.”

This scheme preys on drivers across the nation, tricking them into revealing sensitive information under the guise of settling fictitious toll debts.

Here’s everything you need to know about this toll scam and some practical tips to prevent losing your money and identity to the fraudsters running it.

How the toll scam “smishing” works

The toll scam, known as “smishing,” has been targeting drivers with alarming text messages that claim they owe unpaid tolls. These texts use urgent language to instill fear of hefty fines and legal consequences, pushing recipients to act quickly without questioning the legitimacy of the claim.

Often, the message mentions a small toll amount—like $12.51—making the demand seem more plausible and encouraging swift payment to avoid escalating fees. The texts are crafted to closely resemble legitimate communications from toll authorities. They may even use official branding and language, making them look convincing at first glance.

Once the recipient is ready to pay the fake toll fee, the message directs them to click a link that appears to be affiliated with official toll collection services. However, the link doesn’t lead to a legitimate payment portal. Instead, it’s designed to steal personal information—like credit card details, social security numbers, or login credentials—to commit further fraud.

The scam has rapidly spread across multiple states, with cybercriminals adapting their tactics to local toll systems to maximize their reach and impact.

The anatomy of a toll scam text

The toll scam text messages are carefully engineered to deceive. Here’s how they typically unfold:

1. Attention-grabbing alerts: The recipient is informed of an unpaid toll, often with a unique, specific amount listed, creating a sense of urgency.

2. Consequences highlighted: The message threatens significant penalties or legal actions if immediate payment is not made, further fueling anxiety and urgency.

3. Fraudulent links: A link is provided, purporting to direct the recipient to a payment portal. These links are often crafted to resemble legitimate websites to elude suspicion.

4. Data harvesting: Upon clicking the link, victims are led to a fake website designed to extract personal information, such as credit card details or login credentials.

The scam’s success hinges on psychological manipulation, leveraging anxiety and the drive to resolve perceived debts quickly. The scammers know how to tap into these emotions, pushing recipients to act before they’ve had a chance to stop and think. The key is to stay calm, take a moment to assess the situation, and avoid jumping to action without verifying the claim.

How smishing impacts victims

The repercussions of falling victim to smishing can be severe. Those who respond to these fake messages might unknowingly hand over sensitive data like credit card numbers or bank account details. Clicking on the malicious links can also result in malware being downloaded onto the user’s device, granting cybercriminals access to personal data or allowing further propagation of the scam.

Since early 2024, the FBI’s Internet Crime Complaint Center (IC3) has received over 2,000 complaints about smishing texts masquerading as toll road authorities. The scam has spread across various states, adapting quickly to exploit differing regions’ road services and regulations.

The Toll Roads’ advisory

In response, legitimate toll agencies like The Toll Roads have issued advisories urging customers not to interact with such messages. They emphasize that official communications will never request sensitive account details via text. Customers are advised to verify notifications by logging into their official accounts at secure portals provided by the agency.

What to do if you receive a scam text

1. Do not click links: Avoid clicking any links in unsolicited text messages or providing personal information.

2. Verify the message: Check your toll account through the official website to confirm your account status.

3. Report the phishing attempt: Report the text message to the FBI’s Internet Crime Complaint Center (IC3) at www.ic3.gov and the Federal Trade Commission at ReportFraud.FTC.gov.

4. Safeguard your information: If you’ve clicked a link or provided information, immediately contact your bank or credit card company to secure your accounts.

Preventative measures

To shield yourself from smishing attacks, it’s vital to take proactive steps:

1. Register on the Do Not Call list: Register your number with the National Do Not Call Registry to reduce unsolicited contacts.

2. Use block features: Use your phone’s built-in features to block and report spam texts.

3. Be skeptical: Always scrutinize texts requesting private information, especially those with unfamiliar URLs.

4. Educate yourself: Stay informed about common scam tactics and regularly update your knowledge on identifying phishing attempts.

Use reverse phone lookup

To further try and safeguard yourself from potential scams, consider using a reverse phone lookup tool. This service allows you to try and identify unknown numbers before engaging with suspicious texts. By signing up for ReversePhone, you may be able to verify who is trying to contact you and avoid falling prey to scams. Staying informed about who’s contacting you can be a simple yet effective way to stay one step ahead.