Attention truckers! A scam is making its way across the U.S., targeting those who frequently navigate toll roads. Scammers are sending fake text messages that appear to be from toll operators like E-ZPass or Sunpass, warning about unpaid tolls and potential fines.
If you click on the link in these messages, you risk landing on a fraudulent website designed to steal your personal and financial information. With security researchers tracing this scam back to Chinese smishing groups, it’s not only crucial for you to stay informed, but protect yourself from these deceptive tactics that could hit your wallets — big time!
What you need to know about the fake toll scam
As reported by KrebsOnSecurity, the scam begins with a text message claiming to be from a toll road operator, such as E-ZPass or Sunpass. The message warns about unpaid tolls and the possibility of fines, forcing recipients to act quickly. Victims are directed to a fake website mimicking the toll operator’s site, where they are asked to provide sensitive information, including payment card details and one-time passwords.
Security researchers have traced the scam to Chinese smishing groups known for creating and selling sophisticated SMS phishing kits. One such kit, “Lighthouse,” makes it easy for scammers to spoof toll road operators in multiple states. These kits are designed to trick users into sharing financial information, which is then used to commit fraud.
Reports of these phishing attacks have surfaced across the U.S., targeting users of toll systems like EZDriveMA in Massachusetts, Sunpass in Florida, and the North Texas Toll Authority in Texas. Similar scams have been reported in states including California, Colorado, Connecticut, Minnesota, and Washington. The phishing pages are mobile-optimized and won’t load on non-mobile devices, making them even more deceptive.
Phishing scams are evolving
Recent advancements in phishing kits include better deliverability through integration with Apple iMessage and Android’s RCS technology, bypassing traditional SMS spam filters. These methods increase the likelihood of victims receiving and engaging with fraudulent messages.
The phishing sites are operated dynamically in real-time by criminals, making them harder to detect and shut down. Even individuals who don’t own a vehicle have reported receiving these messages, indicating random targeting.
7 ways to stay safe from toll scam messages
By staying aware and following the steps below, you can protect yourself from falling victim to toll scams.
1) Verify directly with toll operators: If you receive a message about unpaid tolls or fines, do not click on any links. Instead, visit the official website of your toll operator or contact their customer service directly to verify the claim.
2) Install strong antivirus software: The best way to safeguard yourself from malicious links in toll scam text messages is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe. Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android & iOS devices.
3) Do not share personal information: Never provide sensitive details like payment card information, Social Security numbers, or one-time passwords (OTPs) via text or unverified websites. Legitimate toll operators will not request such information through SMS.
4) Enable two-factor authentication (2FA): Use 2FA for your accounts whenever possible. This adds an extra layer of protection by requiring two forms of verification, reducing the risk of unauthorized access even if some details are compromised.
5) Be wary of urgency in messages: Scammers often create a sense of urgency, claiming immediate action is required to avoid penalties. Take a moment to assess the situation and verify the legitimacy of the message through official channels.
6) Report suspicious messages: If you suspect a phishing attempt, report it to the Federal Trade Commission (FTC) or the FBI’s Internet Crime Complaint Center (IC3). Include details like the sender’s phone number and any links in the message. Additionally, inform your mobile carrier to help block similar scams.
7) Use a personal data removal service: Consider using a reputable data removal service to reduce your online footprint and minimize the risk of scammers obtaining your personal information. These services can help remove your data from various data broker sites, making it harder for scammers to target you with personalized scams. While no service promises to remove all your data from the internet, having a removal service is great if you want to constantly monitor and automate the process of removing your information from hundreds of sites continuously over a longer period of time. Check out my top picks for data removal services here.
Kurt’s key takeaway
Listen, your time and money are valuable, so don’t let scammers derail you. Always verify any unexpected messages about tolls directly with the toll operator before taking action. By staying informed and cautious, you can keep your hard-earned cash safe from these malicious scams.
What steps do you think should be taken to ensure that scammers are held accountable for their actions? Let us know by writing us at Cyberguy.com/Contact.
For more tips like these, sign up for Kurt the CyberGuy’s daily newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
Kurt Knutsson — best known as “Kurt the CyberGuy” — has a deep love of technology that makes life better. Because of this, along with a passion for helping others, he created the largest syndicated tech lifestyle franchise on television. As a trusted source, Kurt’s unique insider access to major tech launches and industry visionaries has helped earn him two Emmy Awards and a Golden Mic.
Kurt lives between his home in California and New York City, where he is also the chief tech contributor on Fox News & Fox Business networks beginning his mornings on Fox & Friends.
Kurt’s a curious guy. Like many entrepreneurs in life, he wears several hats like running a private investment fund, giving inspirational talks, mentoring start-ups and traveling the world chasing down the next breakthrough.
To find out more about Kurt, visit CyberGuy.com. To sign up for his daily newsletter, click here.
You can also subscribe to his social media channels:
