Toll Road Text Scams (E-ZPass, FasTrak, SunPass)

How the Toll Road Text Scam Works

Across the United States, drivers and non-drivers alike are receiving urgent text messages claiming they owe money for unpaid road tolls [FTC]. This tactic is known as "smishing" (SMS phishing). The scammers send unsolicited text messages designed to look like official alerts from regional toll collection systems, such as E-ZPass, FasTrak, SunPass, I-PASS, or EZDriveMA [FCC] [Krebs on Security].

According to security researchers, this surge in activity is driven by sophisticated, commercial phishing kits (such as "Lighthouse") sold by cybercriminals [Krebs on Security]. These kits generate highly convincing, mobile-optimized pages that mimic legitimate state tolling websites. The ultimate goal is to trick you into entering your credit card details, driver's license number, or one-time passwords, which the scammers then use to load your payment cards into mobile wallets or commit identity theft [FTC] [Krebs on Security].

Because these messages are sent to randomly generated phone numbers, many recipients do not even own a vehicle or live in the state mentioned in the text [Krebs on Security].

Red Flags of a Toll Scam Text

While scammers try to make their messages look official, several key indicators can help you spot a fraudulent text:

• Urgent or Threatening Language: The text will often threaten immediate late fees (such as a $50 fee on a $12.51 balance) or account suspension if you do not pay immediately [IC3] [FCC]. Legitimate toll operators do not use high-pressure tactics via text [FCC].
• Generic Greetings: Messages may address you as "Dear Customer" or "E-ZPass user" rather than using your actual name [FCC].
• Suspicious Links: The URL provided in the text will not match the official toll agency website. Scammers use domains that look similar (e.g., "myturnpiketollservices.com") to deceive you [IC3].
• International or Group Numbers: The text may come from an international phone number or include multiple unknown numbers in the recipient list [NY Gov] [FCC].
• Requests to Reply: Some texts ask you to reply with "Y" or another character to receive the payment link [NY Gov]. Do not reply.

What to Do in the Moment

If you receive a text message claiming you owe an outstanding toll balance, take these steps immediately:

1. Do Not Click the Link: Clicking the link can expose your device to malware or direct you to a phishing site designed to steal your financial credentials [NY Gov].
2. Do Not Reply: Do not reply to the message, including pushing a button or responding "Y" or "N" [FCC].
3. Verify Independently: If you believe you might actually owe a toll, open your web browser and navigate directly to the official tolling agency's website (such as EZPassNY.com or TollsByMailNY.com) [NY Gov]. Log into your account or call their official customer service number to check your balance [IC3].
4. Report and Delete: Use your phone's built-in "report junk" or "block" feature [FTC]. You can also forward the message to 7726 (SPAM) to alert your mobile carrier [FTC].

What to Do If You Already Clicked or Paid

If you entered your personal or financial information on a suspected phishing site, you must act quickly to secure your accounts:

• Contact Your Bank: Immediately notify your credit card company or bank. Dispute any unauthorized charges and request a new card if you entered your payment details [IC3].
• Secure Your Identity: If you provided sensitive information like your Social Security number or driver's license number, take efforts to secure your personal information and financial accounts [IC3].
• Run a Security Scan: If you clicked the link, check your device for unauthorized apps, as clicking the link can allow scammers to install ransomware or other programs [NY Gov].
• File Official Reports: Report the scam to the FBI's Internet Crime Complaint Center at www.ic3.gov, including the sender's phone number and the URL listed in the text [IC3]. You can also file a complaint with the FTC at reportfraud.ftc.gov [NY Gov].

Defense First: A Two-Minute Setup

To protect yourself from future smishing attempts, take a moment to adjust your phone's settings:

• Use Built-In Reporting: Use your phone's built-in features to report junk and block unwanted messages [FTC].
• Block Known Scammers: Block individual numbers immediately after receiving a suspicious text [NY Gov].
• Keep Official Contacts Handy: Save the official customer service numbers for your local tolling agencies in your contacts so you can easily verify communications.

Quick Answers

Do toll agencies send text messages to collect unpaid balances?

No. Toll operators typically do not use text messages to collect on overdue accounts, nor do they use high-pressure or threatening language to demand immediate payment [FCC].

Why did I get a toll text if I don't own a car?

Scammers use automated systems to send these texts to thousands of random phone numbers at once [Krebs on Security]. Receiving a text does not mean your personal information has been leaked or that you have an active toll account.

How can I safely check if I actually owe a toll?

Never use the link in the text message. Instead, open your browser, search for your state's official tolling agency website, and log in directly, or call their verified customer service number [IC3] [FCC].