Fake Toll Violation Scams

Fake toll violation scams — sometimes called toll smishing — involve criminals sending text messages that impersonate road toll authorities or electronic toll collection systems such as E-ZPass, SunPass, FasTrak, and similar services. The message states that you have an outstanding unpaid toll fee and that a fine or administrative charge is accruing. A link directs you to a fake payment portal where your card details are harvested.

These scams have become one of the most frequently reported smishing campaigns since 2023 and remained widespread through 2024 and 2025. They are successful partly because many drivers do use toll roads and could plausibly have an outstanding balance, and partly because the amounts cited — typically a few dollars or pounds — feel small enough that paying quickly without scrutiny seems reasonable. The payment itself may be small, but the harvested card details are used for much larger fraudulent transactions.

The scam does not require the sender to know whether you actually use toll roads in your area. Messages are sent in bulk to large numbers of phone numbers, and even a small proportion of recipients who happen to use a toll road — or who are uncertain — will click the link. Some messages are geo-targeted to appear relevant to specific regions or road networks.

Real toll authorities in every country are clear: they do not send payment links by text message, and no legitimate toll agency threatens fines via unsolicited SMS. Any text claiming an unpaid toll requires you to click a link and enter payment details should be treated as fraudulent.

You receive an SMS — often appearing to come from a shortcode or a number that mimics a toll service's format — stating that your vehicle has an outstanding toll fee. The message provides a plausible amount, such as a few dollars, and states that if it is not paid within a short window a larger fine will be added. A link is included to pay immediately.

The link leads to a convincing fake website styled to match a real toll payment portal, with the authority's logo, colour scheme, and form fields. You are asked to enter your vehicle's number plate or account number to 'look up the unpaid toll', and then your payment card details to settle it. Both the vehicle details and the card number are captured and used by the scammer.

In more sophisticated variants, the fake portal is designed to also capture your name, address, and phone number under the guise of 'billing address verification', providing a complete identity profile in addition to the card details.

Some variants arrive by email rather than SMS, using spoofed sender addresses that appear to come from the toll authority's domain. Others have appeared via iMessage or Android messaging apps with styling designed to look like official service notifications.

The combination of a small, plausible debt and a sense of urgency — pay now or face a larger fine — is highly effective. The amount is small enough that checking it carefully can feel disproportionate, and the link looks like a standard payment portal rather than something suspicious.

Many drivers genuinely do use toll roads and may be uncertain whether all their transactions were processed correctly. This uncertainty is enough to prompt a proportion of recipients to click the link even when they are broadly aware of smishing as a threat category.

The use of well-known toll brand names — E-ZPass, SunPass, FasTrak, ULEZ — adds apparent legitimacy to messages targeting people in those specific service areas.

A driver receives a text message claiming their E-ZPass account shows an unpaid toll of [small amount] and that a [larger amount] fine will be added if not paid within 12 hours. The link leads to a professional-looking site with the E-ZPass logo. They enter their car registration and card details. The small amount may or may not actually be charged, but over the following week larger unauthorised transactions appear on the card. The card details were harvested and sold or used directly.

[Toll authority]: unpaid toll fee of [amount] on your account. Pay before [date] to avoid a [larger amount] fine: [fake link]

E-ZPass Notice: your account has an outstanding balance of [amount]. Settle now to avoid penalties: [fake link]

TOLL PAYMENT REQUIRED: [amount] due from [date]. Avoid late fees — pay here: [fake link]

Your [toll service] account shows an unpaid charge. Resolve within 12 hours to avoid suspension: [fake link]

Unpaid toll notice: vehicle [plate] has [amount] outstanding. Click to pay and avoid a [larger amount] fine: [fake link]

FINAL REMINDER: [Toll authority] — [amount] unpaid. This will be referred to collections if not settled today: [fake link]

If you believe you may have a genuine outstanding toll, log in to your account directly through the toll authority's official website or app — accessed by typing the official address into your browser, not by following a text link. Your genuine account balance will be visible there.

Alternatively, call the toll authority using the number on their official website. They can confirm whether your account has any outstanding charges. Real toll authorities do not send payment links by SMS. If the message you received contains a link to a domain that does not exactly match the toll authority's official website, it is fraudulent.

Never enter payment card details on a page reached by following a link in an unexpected text message. Even if the site looks convincing, the domain address in your browser bar is the most reliable indicator of whether you are on a real or fake site.