Smishing and Unpaid Toll Scams: How to Spot Fake Text Messages
Quick Answer
Smishing is phishing conducted by text message. The most widespread current variant is the fake unpaid toll notice: a text claiming you owe a small toll balance with a link to pay. The link steals your payment card details. Real toll agencies do not demand payment by text with a direct payment link. If you receive one, do not click the link, go to your toll account directly by typing the URL yourself.
Smishing (SMS phishing) has surged alongside smartphone adoption. The FBI's Internet Crime Complaint Center reported a dramatic rise in smishing complaints, with toll scam texts becoming one of the most reported variants in 2023 and 2024. The FTC and FBI have issued specific warnings about this wave.
How the Unpaid Toll Scam Works
You receive a text claiming to be from a state toll authority, E-ZPass, FasTrak, SunPass, EZDriveMA, or a generic "toll services" name. The message says you have a small outstanding balance (often $3 to $12) and must pay immediately to avoid a larger fine.
A link is provided. The page mimics the real toll authority's website convincingly. When you enter your payment card details, they are captured by the scammer.
Why it is effective:
- The amount is small enough not to trigger alarm
- Most drivers have used toll roads and cannot immediately rule out an outstanding balance
- The threat of a larger fine creates urgency
Other Common Smishing Scams
Package delivery. A text from "USPS," "FedEx," or "UPS" says your package is held and a small fee or updated address is required. The link steals credentials or payment information.
Bank alert. A text claiming to be your bank says suspicious activity was detected. The link leads to a fake banking login page.
Account verification. A text from "Amazon," "Apple," or "Netflix" says your account needs to be verified or it will be suspended. Same goal, credential theft.
Prize or reward. A text says you have a pending reward from a retailer. Clicking the link requires entering personal information to claim it.
How to Identify a Smishing Text
- The sender is an unfamiliar number, not a short code registered to the organisation
- The URL in the message does not match the organisation's official domain (hover or long-press to preview before clicking)
- The message creates urgency, pay now to avoid a larger fine, act within 24 hours
- The domain in the link has extra words, hyphens, or misspellings (e.g., usps-delivery-update.com instead of usps.com)
What to Do
Do not click the link. If you want to check whether you actually owe a toll balance, go directly to your toll account by typing the official URL yourself or logging in through the official app.
Report the text:
- Forward to 7726 (SPAM), works on most major carriers
- FTC: ReportFraud.ftc.gov, 1-877-382-4357
- FBI IC3: IC3.gov
- FCC: ConsumerComplaints.fcc.gov, 1-888-225-5322
If you clicked and entered payment information: Contact your bank or card issuer immediately and report potential fraud. Request a new card number. Monitor your statements closely.