In this news:
The FBI has issued a renewed warning about a rising wave of fraudulent text messages claiming to be from US toll agencies. These scam messages, which demand payment for unpaid tolls, are part of a large-scale smishing attack originating from China, according to cybersecurity experts “Have you received a text suggesting you may owe unpaid tolls on your vehicle?” the FBI cautioned in an advisory this week, reported Forbes. “There is a good chance it’s a fraudster trying to get your personal information," the FBI added. According to the Anti-Phishing Working Group (APWG), these scams are bombarding Americans with text messages that impersonate U.S. toll road operators, including multi-state services like E-ZPass. The scam texts often include urgent language, pressuring recipients to settle supposed outstanding toll amounts immediately to avoid fines or legal consequences. Cybersecurity firm Trend Micro has described the scale of these attacks as "spiralling out of control." Aidan Holland from Censys explained that the scammers’ goal is not just to steal small payments. “They don’t care about the seven bucks,” he said. “They want your credit card number.” Unlike typical phishing scams, which focus on individual users, these smishing attacks are described as infrastructural assaults. Fraudsters register tens of thousands of domains mimicking state toll agencies and use automated systems to send fraudulent messages to vast numbers of phone users across multiple states. “The texts claim the recipient owes money for unpaid tolls and contain almost identical language,” the FBI noted. “The link provided within the text is created to impersonate the state’s toll service name, and phone numbers appear to change between states.” The scam messages also frequently use Chinese top-level domains (TLDs), such as TOP, .CYOU, and .XIN—a known indicator of fraudulent activity. APWG highlighted ongoing compliance issues with the .TOP registry, which has been cited for failing to address abuse reports. The FBI and cybersecurity experts urged the public to delete these messages immediately and report them. Victims can report suspicious texts to or the APWG at /sms to help improve scam detection and blocking measures. Norton Security has provided several tips to help Americans avoid falling for these scams: 1. Be sceptical of unexpected toll violation notices —legitimate agencies typically send official invoices via mail, not text. 2. Avoid clicking suspicious links—always verify the official toll agency website by manually entering the URL in your browser. 3. Check for unusual sender details—scammers often use misspelt domain names or extra characters. 4. Never share sensitive information—official toll agencies will not request Social Security numbers or full credit card details via text. For those who suspect they have been targeted, experts asked them to take immediate action, including disputing fraudulent charges with their bank, monitoring financial accounts for suspicious activity, and changing passwords if any credentials were entered into a scam website. A Growing Threat This surge in smishing attacks is not limited to toll payments. Cybercriminals are using similar techniques to target crypto investors, impersonating exchanges like Binance to trick victims into transferring funds. The Australian Federal Police recently issued a warning about fraudsters spoofing Binance representatives, tricking users into believing their accounts had been compromised. Authorities stress that these scams are evolving rapidly and that heightened vigilance is necessary. “Scammers do not discriminate,” the FBI warned. “They want money from anyone they can take it from.” As smishing attacks continue to rise, officials urge individuals to remain cautious, verify all unsolicited messages, and stay informed about emerging scam tactics, reported Forbes. Get Latest News Live on Times Now along with Breaking News and Top Headlines from US News, World and around the world.
.png)
