Starting earlier year there has been a noticeable increase in Smishing messages – phishing attempts sent via SMS – sent by cybercriminals posing as toll road authorities. While the majority of these scams are delivered via text message, some people have received similar emails as well.
The content of these messages often mimics legitimate toll road services such as E-ZPass, FasTrak, TheTollRoad, TxTag, PATurnpike, or NYTurnpike. The message will claim that this is your final reminder to pay your outstanding tolls – usually between $20 to $30 – by a certain date to avoid legal action. The payment amount is intentional as it lowers suspicion and increase the likelihood that the person will pay without verifying its legitimacy.
Here are a few important tips to keep in mind with any messages you receive that include payment or an urgent action.
- Avoid Clicking Suspicious Links. If you receive a message demanding toll payment, do not click on any embedded links. If you genuinely believe you might owe a toll, go directly to the official website of your local toll collection agency by typing the URL into your browser.
- Check the Sender’s Information. Many of these scam messages are sent from suspicious email addresses—often Gmail or other free email providers—regardless of whether the message comes through SMS or email. Legitimate toll road authorities typically send messages from official domains (e.g., @ezpass.com, @thetollroads.com, etc.), not personal email accounts.
- Look for Red Flags, Poor grammar, urgent deadlines, threats of legal action, or unusual phrasing can all be signs of a scam. If a message doesn’t “feel right,” trust your instincts and investigate further.
Smishing attacks are growing in sophistication and frequency, but a little skepticism and attention to detail can go a long way in protecting yourself. Stay vigilant, and when in doubt, always go directly to the source.