Toll road text scams: fake E-ZPass and unpaid toll alerts
A toll text scam usually starts with a tiny amount of money: $3.95, $6.99, or $11.42. The message says you owe an unpaid toll and will face late fees, license suspension, or collections if you do not pay right now. The link looks close to a real toll agency, but it is built to steal your card number, billing address, and sometimes your account login.
These scams work because they are boring. A fake bank alert feels suspicious. A fake toll notice feels like an annoying errand you can clear in thirty seconds. That is exactly the trap.
What the message usually says
The wording changes by state, but the pattern is consistent: a small balance, a short deadline, and a link that does not belong to the official toll agency.
"E-ZPass: You have an unpaid toll invoice. Pay today to avoid a $50 penalty."
"SunPass notice: Your account has an overdue balance. Update payment now."
"FasTrak final reminder: Outstanding toll detected. Resolve before enforcement."
"Parking authority: unpaid ticket will be sent to collections unless paid today."
Red flags
The link uses a strange domain, extra words, hyphens, or a country-code ending that does not match the agency.
The message pressures you with same-day penalties or license action.
It asks for a card payment before showing a real invoice number tied to your plate or account.
It arrives from a random phone number instead of a short code or official notification channel.
The page asks for too much information: full card number, Social Security number, date of birth, or online banking login.
How to verify safely
Do not tap the link in the text.
Search for your state toll agency or type the official website yourself.
Log in through the real site or app and check for unpaid tolls there.
If you do not have an account, use the official "pay by plate" page from the real agency site.
Call the card issuer immediately and say you entered card details on a phishing site. Ask for a new card number, dispute the charge if it posted, and watch for follow-up attempts. If you reused a password on the fake toll page, change that password anywhere else it was used.
Got an unpaid toll text?
Paste the link or full text into ScamKit before you tap it. The scanner can flag lookalike domains, suspicious wording, and unsafe payment flows.