In this news:
road payment
A widespread and aggressive phishing campaign is hitting mobile users across the U.S., posing as trusted toll agencies like E-ZPass, The Toll Roads, FasTrak, and various state DMVs.
The Scam: Familiar, Aggressive, And Hard To Stop
Victims are receiving text messages that look like official toll notices. The messages typically warn of unpaid tolls, fines, or license suspensions if payment is not made immediately. The scam relies on urgency: deadlines are tight, consequences sound severe, and the message includes a link to a toll payment page that looks legitimate.
Click the link, and you land on a mobile-only phishing website designed to steal personal and financial information. These sites closely mimic real toll agency portals—the same layout, the same colors, and even the same language. The only giveaway is the web address, which often uses suspicious or misspelled domains.
What is different about this campaign is the intensity. Some users report getting up to seven of these texts in a single day. The messages often come from random email addresses, which helps them sneak past spam filters.
Example scam text:
'Your toll payment for E-ZPass Lane must be settled by April 4, 2025. To avoid fines and the suspension of your driving privileges, kindly pay by the due date.’
Scammers are also exploiting features in Apple's iMessage and Android's RCS messaging systems. For example, iMessage disables links in messages from unknown senders. To bypass this, scammers prompt users to reply—once they do, the link becomes clickable.
.png)
