What To Know About Malicious Smishing Scams

Smishing scams are targeting people across the U.S., with fraudsters posing as legitimate agencies to extract sensitive financial data.

Key Takeaways

Scammers send fake text messages claiming unpaid tolls to steal financial information.
Messages impersonate known toll services like FastTrak and E-Z Pass.
Texts often threaten penalties for non-payment and include misleading links.
The FBI and FTC urge consumers to report suspicious texts to the IC3 center.

Understanding Smishing Threats

A scam wave is sweeping across the U.S., exploiting road toll payment systems. These scams, termed “smishing,” blend SMS with phishing tactics. Targeting unsuspecting individuals, fraudsters send text messages allegedly from legitimate toll agencies, demanding fines for fictitious unpaid tolls. Such texts often contain links mimicking authentic toll agency websites, prompting victims to enter sensitive personal data, including bank and credit card details.

Even states without toll roads, like Vermont, witness these scams. Vermont Attorney General Charity Clark warns people, “We do not have toll roads in Vermont but travelers may mistake these scams for actual toll operators in other states.” Spam links, imbued with urgency, might state unverifiable charges, posing unsuspecting users the risk of data theft.

Did you receive a message that said you have unpaid tolls? STOP! It's likely a smishing scam. Don't click the link. Think to yourself, did you really travel a toll road recently and not pay? Don't become a scam victim: https://t.co/u72RMKyS6G pic.twitter.com/5cmRQHNkAt

— FBI Pittsburgh (@FBIPittsburgh) February 11, 2025

The Anatomy of a Typical Smishing Scam

The scammers typically impersonate well-known toll services like FastTrak or E-Z Pass. Messages usually declare fake penalties—license suspension or DMV reporting—to push recipients to act hastily. These deceitful messages often include non-clickable links that victims are urged to copy into their browsers. McAfee and other cybersecurity experts emphasize avoiding these tactics and accessing only verified websites for bill payments.

Unfortunately, these scams are not uncommon incidents. The Federal Bureau of Investigation (FBI) reported receiving over 2,000 such complaints last April. Spam text formats include false payment demands with fabricated deadlines. It also entails phishing URLs which deviously mirror legitimate domain names.

Taking Preventative Measures

Authorities urge citizens to ignore suspicious texts and engage with real toll service websites and contact numbers. An FTC consumer alert from January advised users, “Whether you’ve driven through a toll recently or not, you might’ve gotten a text saying you owe money for unpaid tolls. It’s probably a scam.” Individuals are further encouraged to report these texts using phone features such as “report junk,” or forwarding them to services like 7726 (SPAM).

If someone falls victim to such scams and their data is potentially compromised, it’s crucial to secure personal information and notify respective financial organizations. Reporting incidents to the FBI’s Internet Crime Complaint Center (IC3) provides additional tracking and deterrent efforts against these fraudulent schemes.