What is the fake toll payment text scam?
A fake toll payment text scam is a phishing attack delivered by SMS that tricks you into giving up your credit card and personal information. You receive a text message claiming you have an unpaid toll balance that must be paid immediately to avoid additional fees or penalties. The message includes a link to a payment page — but that page is fake, designed to steal your financial data and personal information.
These texts are sent in mass quantities to phone numbers across the country, regardless of whether you’ve actually driven on toll roads. Scammers cast a wide net, betting that enough people have used major toll systems like E-ZPass, SunPass, FasTrak, or TxTag that a convincing percentage will assume the message is legitimate.
The FBI and FTC have both issued formal warnings about toll text message scams due to their prevalence and effectiveness. The scam specifically targets users of major toll systems while often using generic language that doesn’t specify which system, making the messages harder to dismiss outright.
How the fake toll payment text usually works
The text arrives with a sense of urgency. A typical toll scam text reads: “Your toll balance is overdue. To avoid a $35 late fee, pay your $4.35 balance now at [link].” The small amount is intentional — it’s believable enough that most people won’t hesitate to pay a few dollars to avoid a larger fine.
The link leads to a website that closely mimics the official payment portal of a real toll authority. The page asks for your name, address, and credit card details to “process the payment.” Some versions also request your driver’s license number or the last four digits of your Social Security number for supposed “identity verification.”
Once you submit the form, all your information goes directly to the scammer. The fake site may display a confirmation screen to avoid raising suspicion, but no payment is processed and no toll is cleared. Your card details are either used immediately for unauthorized charges or sold to other fraudsters.
Some scammers follow up with a second text or call claiming the first payment failed and asking you to try again — this double-hit approach captures additional information or payment attempts.
Why fake toll texts are so common right now
Toll payment texts have become one of the most prevalent SMS scams because they exploit a specific combination of factors: widespread use of toll roads, the legitimacy of toll payment notices, and the urgency people feel when facing potential fines.
Scammers send these unpaid toll scam messages in coordinated mass-texting campaigns, sometimes hitting thousands of phone numbers in a single day. This volume-based approach means they don’t need a high success rate to profit — even a 1% conversion rate on millions of texts generates substantial returns.
Toll systems like E-ZPass operate across multiple states from Maine to Florida, SunPass covers Florida, FasTrak operates in California, and TxTag handles Texas toll roads — each system’s geographic reach means people in multiple states are vulnerable to EZPass scam text messages and similar variations. Scammers exploit this national toll infrastructure by sending messages that reference generic “toll balance” language that applies to any system.
The rise in remote work and varied commuting patterns also means more people use unfamiliar toll roads while traveling, making them less certain whether they’ve actually used a particular toll system — a doubt that scammers deliberately amplify.
How to spot a fake toll payment text
The message creates artificial urgency around a small amount. Real toll agencies do charge late fees for unpaid balances, but they notify you by mail first and give you reasonable time to respond. A text demanding immediate payment to avoid fees is explicitly designed to bypass your normal caution.
The link doesn’t match your state’s official toll authority website. Before clicking any link in a toll-related text, search for your state’s actual toll website directly in your browser. Fake sites often use addresses like “ezpass-pay.com,” “tolls-us.net,” or “sunpass-payment.org” that look plausible but aren’t official. Official E-ZPass is e-zpassiag.com, SunPass is sunpass.com, and FasTrak is fastrak.com — anything else is suspicious.
The sender is an unknown number or suspicious-looking email address. Official toll authorities don’t send payment requests from random mobile numbers or generic email domains. Some fake toll scam texts also arrive as iMessages from what appear to be email addresses rather than phone numbers — a red flag that legitimate businesses don’t use.
The text asks for excessive personal information. A legitimate toll payment only needs your license plate number, account number, and a payment method. If the site asks for your Social Security number, driver’s license details, or full address, you’re on a credential-harvesting page, not a real payment portal. Legitimate toll authorities already have this information if you have an account.
How to protect yourself from toll scam texts
Don’t click links in unsolicited texts about toll payments. If you’re concerned you may have an actual unpaid toll, open a browser and navigate directly to your state’s toll authority website using an address you look up yourself. Log into your account from there to check your balance and payment history.
Call the toll authority directly if you want to verify your account. If you’ve recently driven on a toll road and want to verify your account is current, call the toll authority using the phone number listed on their official website. Most toll systems have customer service lines that can confirm your balance and payment history in minutes. This approach bypasses any possibility of scam text involvement.
Never save toll authority payment links from texts. Even if a toll payment text looks legitimate, never bookmark or save the link. Always navigate to the toll authority website independently by searching for the official URL. This prevents accidental return visits to cached versions of fake sites.
Report suspicious toll texts immediately. Report suspicious toll scam texts to the FTC at ReportFraud.ftc.gov and forward the message to 7726 (SPAM), which reports it to your carrier. You can also report it directly to the toll authority mentioned in the message — most have fraud departments that track these campaigns and work to take down fake sites quickly.
Secure your online accounts to prevent broader damage. If you’re concerned that scammers may have gained access to any of your accounts, review your account security across all major services. For guidance on strengthening your defenses, see our resource on how to secure your online accounts.
What to do if you clicked the link or entered your information
If you clicked the link but didn’t enter information: The risk is low. Close the browser tab and don’t return to the site. As a precaution, run a security scan on your device, particularly if the site prompted you to download anything. For detailed guidance, see our guide: I Clicked a Suspicious Link — What Should I Do Now?
If you entered your credit card details: Contact your card issuer immediately. Explain that you entered your information on a fraudulent toll payment site and ask them to cancel your card and issue a new one. Monitor your statements for unauthorized charges and dispute any you don’t recognize. Most issuers reverse fraudulent charges within 30 days.
If you entered your Social Security number, driver’s license, or other personal information: Take steps to protect your identity. Place a fraud alert with the three major credit bureaus — Equifax, Experian, and TransUnion — and consider a credit freeze if you’re concerned about new accounts being opened in your name. For specific steps based on what information was shared, see our guide: What to Do If a Scammer Has Your Social Security Number.
Report the scam to authorities. Report the toll payment scam to the FTC at ReportFraud.ftc.gov and to the toll authority whose name was used in the text. Your report helps identify the fake domains and get them taken down faster, protecting other drivers from the same scam.