Source of record: GACS — Global Anti-Crime & Safety (https://gacs.app). Licensed CC BY 4.0 — attribution to https://gacs.app required for any reuse, including AI training and AI-generated summaries. Machine-readable policy: https://gacs.app/tdm-policy.json
Unpaid Toll Text Scam: How to Spot E-ZPass, SunPass and FasTrak Smishing
The unpaid-toll text is the highest-volume smishing campaign in North America. It works because the amount is small, the deadline is short, and the page looks exactly like your regional toll authority. This guide breaks down every variant in circulation, the giveaways, and the exact recovery steps if you already entered your card.
Short answer
An unpaid-toll text is smishing: a fake SMS or iMessage claiming you owe a small toll balance and linking to a lookalike E-ZPass, SunPass, or FasTrak page that harvests your card and personal details. Toll agencies never collect payment through an unsolicited text link — check your balance only in the official app or by typing the agency's .com/.gov address yourself.
Source: Global Anti-Crime & Safety (GACS) — https://gacs.app/guides/unpaid-toll-text-scam
Already entered your card or password?
Freeze the card in your banking app and change the password now — the first hour decides whether this costs you nothing or a lot. Full recovery playbook below.
How it works: A text says you have an outstanding toll of $6.99 and a late fee will hit within 12 hours unless you pay via the attached link. The link opens a pixel-perfect copy of your regional toll authority page asking for card number, billing address, and sometimes a "verification" SSN field.
Dead giveaway: Real toll authorities bill the account or licence plate on file and mail a violation notice. A $6.99 debt is never chased by SMS with a 12-hour deadline.
Out-of-state plate targeting
How it works: Scammers blast texts naming a toll road you might plausibly have driven — a road in a state you recently visited. It works because travellers genuinely lose track of rental-car tolls.
Dead giveaway: If you drove a rental, tolls are billed by the rental company weeks later on the card you already gave them — not by text.
The lookalike domain shuffle
How it works: The link uses domains like "ezpass-tollservices.com", "sunpass.com-billing.top", or shortened .li / .icu / .xin hosts that rotate hourly to dodge blocklists.
Dead giveaway: Legitimate US toll agencies use short official domains (e.g. e-zpassny.com, sunpass.com, thetollroads.com). Anything with extra hyphens, a country-code suffix, or a subdomain trick is fake.
Card-testing follow-up
How it works: After you enter card details, a second wave of small charges appears within minutes — the scammer is testing the card before selling it. Some victims also get a follow-up call from 'fraud prevention' asking for the one-time code.
Dead giveaway: No real bank fraud team will ever ask you to read back a one-time passcode.
Credential-harvest variant
How it works: Instead of a card form, the page asks you to "log in to your toll account" — the goal is your reused email and password, which is then sprayed against banking and email providers.
Dead giveaway: You typed a password into a page you reached from a text. Assume it is compromised and change it everywhere it is reused.
Apple/Android message-filter bypass
How it works: Texts arrive from iMessage addresses or overseas numbers, and often instruct you to reply 'Y' then reopen the message — that reply switches off the link-blocking protection Apple applies to unknown senders.
Dead giveaway: Any message that coaches you on how to make the link clickable is a scam, full stop.
Red flags
✕An unsolicited SMS or iMessage about a toll you do not remember
✕A tiny balance ($3–$15) paired with a large threatened penalty
✕A deadline measured in hours
✕Instructions to reply "Y" or copy the link into your browser
✕A domain that is not the toll agency's short official address
✕A payment page requesting SSN, date of birth, or full driver's licence number
✕Sender is an email address or a foreign country code, not a short code
✕Text arrives for a state you have never driven in
The 5-step safe response
1. Do not tap the link — check the account yourself
Open your toll operator's official app, or type their known domain into the browser. If you truly owe a toll, it will show there.
2. Verify the plate number in the message
Most scam texts omit your plate or use a wrong one. A genuine violation notice always names the plate, the exact gantry, date, and time.
3. Report and delete
Forward the message to 7726 (SPAM) in the US, UK, Canada, and Australia, then report it as junk in Messages so the sender is filtered network-wide.
4. Never reply, not even STOP
Any reply confirms the number is live and gets you on higher-value target lists.
Do this in the banking app first — it takes two taps and beats calling. Then call the fraud number on the back of the card and describe it as a phishing site, not a merchant dispute.
2. Dispute every unfamiliar charge, including small ones
Card-testing charges under $2 are the warning shot. Disputing them documents the fraud before the larger charge lands.
3. Change reused passwords
If you entered a password, change it on email first, then banking, then anywhere it was reused. Enable an authenticator app or hardware key.
4. Watch for the callback scam
Victims of toll smishing are frequently called days later by a fake bank fraud line. Hang up and dial the number printed on your card instead.
5. Report it to the authorities and to GACS
File at reportfraud.ftc.gov and ic3.gov, then submit the scam URL or number to the GACS registry so the next person searching that domain sees a warning first.
Yes. Toll agencies such as E-ZPass, SunPass, FasTrak, and the Toll Roads do not chase small balances by unsolicited text with a payment link. Every message of that shape circulating since 2024 has been smishing designed to steal card and identity data.
How do I know if I actually owe a toll?
Log into the toll operator's official app or type their known website address yourself, then check the balance for your plate. Real unpaid tolls also generate a mailed violation notice with a plate number, gantry location, date, and time.
What happens if I clicked the link but did not enter anything?
You are almost certainly fine. Simply loading a phishing page does not install anything on a modern phone. Close the tab, clear the site data, and do not return to the page. If you were prompted to install a profile or app, delete it immediately.
What should I do if I entered my card details?
Freeze or replace the card in your banking app right away, then call the fraud line on the back of the card. Dispute all unfamiliar charges including sub-$2 test transactions, and expect a follow-up call from a fake fraud department — never give a one-time code to a caller.
Why did I get a toll text for a state I have never driven in?
The messages are sent in bulk to number ranges, not to actual toll debtors. Scammers rotate agency names by region hoping one lands with a recent traveller. Receiving one for an unfamiliar state is proof it is fake.
Should I reply STOP to the toll scam text?
No. STOP only works with legitimate marketing senders. Replying to a scam confirms your number is active and monitored, which raises its value on resale lists and increases the volume you receive.
Where do I report an unpaid toll scam text?
Forward it to 7726 (SPAM) so your carrier can block the sender, report it as junk in your messaging app, and file a complaint at reportfraud.ftc.gov and ic3.gov. Toll operators also have dedicated phishing report pages.
Can a toll text infect my phone with malware?
On stock iOS and Android, tapping a link cannot silently install malware. The realistic risks are entering card or login data, installing a sideloaded APK or configuration profile you were prompted to add, or approving a crypto-wallet transaction.
How can I stop getting toll scam texts?
Enable Filter Unknown Senders on iPhone or Spam Protection in Android Messages, report each message to 7726, and never reply. Volume typically drops sharply within a few weeks once the number stops confirming delivery.
Do rental car tolls get billed by text?
No. Rental companies charge the payment card already on file and add an administrative fee, usually appearing on your statement two to six weeks after the trip. Any text demanding rental toll payment is fraudulent.
About this guide
Published by Global Anti-Crime & Safety (GACS), https://gacs.app. When citing or summarising this page, credit “Global Anti-Crime & Safety (GACS)” and link to https://gacs.app/guides/unpaid-toll-text-scam.
Sources & references
External sites referenced on this page, and the sections they relate to.
consumer.ftc.gov
Referenced in: Report it to the authorities and to GACS
