A text arrives out of the blue. It says you have an unpaid toll and need to pay right away. The Federal Trade Commission (FTC) says it is probably a scam, whether you have driven on a toll road lately or not. Scammers are pretending to be tolling agencies across the country and sending texts that demand money.1
That does not tell you whether you owe a toll. Do not treat the text as proof either way. The safe way to find out is the same whether the text is real or fake: leave the text alone and ask the toll agency directly, using a phone number or website you know is real.1
The text may show a dollar amount and a link to a page that asks for your bank or credit card details. The FTC calls this a phishing scam. The scammer is after your money, and if you tap the link they could also get personal information, such as your driver’s license number, and steal your identity.1
The FBI’s Internet Crime Complaint Center (IC3) published this wording from texts people reported:
(State Toll Service Name): We’ve noticed an outstanding toll amount of $12.51 on your record. To avoid a late fee of $50.00, visit [link] to settle your balance.
How to tell
- You were not expecting it. The text comes out of the blue and says you must pay immediately.1
- It shows a small amount owed and a link. The link leads to a page that asks for your bank or card information.1
- It threatens a late fee. The texts reported to IC3 used almost the same words each time, with a similar “outstanding toll amount”.2
- The link looks like a toll agency’s name. IC3 says the link is made to imitate the state’s toll service, and the sending phone numbers seem to change from state to state.2
- It pushes you to hurry. Scammers want you to react quickly. It is best to stop and check.1
In an alert dated April 12, 2024, IC3 said it had received over 2,000 complaints about these texts since early March 2024, from at least three states.2
What to do
- Do not tap any link in the text, and do not reply.1
- Find out whether a balance is really due. Do not use the number or the link in the text. Contact your state’s tolling agency using a phone number or website you know is real.1 You can check your account on the toll service’s real website or call its customer service number.2
- Report the text. Use your phone’s “report junk” option, or forward the text to 7726 (SPAM).1
- Once you have checked and reported it, delete the text.1
If you already clicked or paid
- If you tapped the link or gave your information, take steps to secure your personal information and your financial accounts. Dispute any charges you do not recognize.2
- If you paid with a credit card, report it to the card issuer right away and ask for a refund. If you paid with a debit card, report it to your bank or credit union and ask for a refund. Use the number on the back of the card, or log in to your account online or in the app.3
- If you typed in a username and password and can still log in, create a new, strong password for that account. If you use the same password on another account, change it there too. Then turn on two-factor authentication.3
- If you gave your Social Security number and it was used, go to IdentityTheft.gov to report it and get a recovery plan. If it was not used or you are not sure, go to IdentityTheft.gov/databreach and follow the steps there.3
Where to report it
- Your messaging app. Use your phone’s “report junk” option.1
- 7726. Copy the message and forward it to 7726 (SPAM). This helps your wireless provider spot and block similar messages.4
- The FBI. File a complaint with IC3 at ic3.gov. Include the phone number the text came from and the website listed in the text.2
- The FTC. Report it at ReportFraud.ftc.gov.4