Fake unpaid-toll notices built to steal card and identity data.
A toll-road text claims you owe a small balance and warns that a larger penalty or collection action is coming. The included link resembles a state toll-program site, making a quick card payment feel easier than checking.
The balance and deadline are bait. The linked page is built to collect payment-card details and may also request personal information such as a Social Security number. Verify through the toll agency's website or phone number that you find independently, never through the message.
How the scam works
1
The unpaid-toll notice
An unexpected text names a highway program and says an overdue toll needs immediate attention.
2
The penalty pressure
The message threatens a late fee, account restriction, collection action, or another consequence to rush a small payment.
3
The lookalike link
A domain containing the toll brand or state name opens a page designed to resemble the official payment portal.
4
The data collection
The fake form asks for a card, address, driver's-license details, or other identity information that can be misused beyond the supposed toll.
Red flags to watch for
!
You did not request the message
An unsolicited payment link deserves verification even if you use the named road or have a toll account.
!
A threat tied to a quick payment
Scammers use escalating penalties to make the link feel safer than taking time to check the account yourself.
!
The domain only resembles the agency
Extra words, misspellings, hyphens, or unfamiliar domain endings can hide behind a convincing logo and page design.
!
Sensitive identity questions
A page that asks for a Social Security number or unrelated identity details to settle a routine toll is seeking more than a payment.
!
Sender details keep changing
The FBI has observed substantially similar toll messages moving between states while links and phone numbers change.
What to do
✓
Check the official toll account
Type the agency's known address yourself or find its website through your state's official site. Review the account there or call the published customer-service number.
✓
Do not reply or use the link
Delete the message after preserving it for a report. Forward it to 7726 (SPAM) and use your phone's report-junk feature.
✓
Replace a compromised card
If you entered card details, call the issuer using the number on the card, report the phishing page, review transactions, and follow the issuer's replacement instructions.
✓
Protect exposed identity data
If you shared a Social Security number or other sensitive information, create a recovery plan at IdentityTheft.gov and consider a credit freeze.
✓
Report the campaign
File reports at ReportFraud.ftc.gov and IC3.gov. Include the sending number and the website shown in the text.
Frequently asked questions
I drive on that toll road. Could the text still be fake?
Yes. The brand may be chosen because many recipients recognize it. Confirm any debt only by signing in through the agency's official site or calling a number you found independently.
What if the amount is very small?
A small charge lowers suspicion, but the fake form can capture a complete card number and identity details. The amount does not make the linked page trustworthy.
I opened the link but did not enter anything. What now?
Close the page and do not return. If you did not submit information or download anything, focus on reporting and deleting the text; keep your phone and browser updated.
Scambook