What the scam looks like and why it works
A toll payment text scam arrives as a message claiming you owe money for unpaid tolls on a highway or bridge. The text includes a link and tells you to click it when ready to avoid a fine, license suspension, or legal action. The sender appears to be from a toll authority — often mimicking the name of a real one like "E-ZPass" or your state's transportation department.
The scam works because toll debt is real and consequences are serious. Most people who receive the message don't remember every toll they've paid, so the threat feels plausible. The urgency in the message — "act now" or "within 24 hours" — pushes you to click before you think. When you do, you land on a fake website that looks like the real toll authority's site and enter your payment information, which the scammers capture.
The actual toll authorities — E-ZPass, state DOTs, and regional toll agencies — almost never contact you by text first. They send bills by mail, and they have other ways to reach you if you ignore those bills. A text message demanding when ready payment is almost always a scam.
Key Takeaways
- Toll authorities contact you by mail first, not by unsolicited text message, and they do not demand payment through links in texts.
- Scammers copy the names and logos of real toll agencies and create fake websites that look identical to the real ones.
- If you click the link and enter payment details, scammers can use that information to drain your bank account or open accounts in your name.
- The correct response to a suspicious toll text is to ignore it, delete it, and contact the toll authority directly using a phone number from their official website.
- If you already clicked and entered information, contact your bank and credit card companies when ready and consider placing a fraud alert with the credit bureaus.
How scammers make the fake website look real
The fake toll website is often nearly identical to the real one. Scammers copy the logo, color scheme, fonts, and layout from the actual toll authority's site. They register a domain name that is close to the real one — for example, "e-zpass-payment.com" instead of "e-zpass.com" — betting that you will not notice the difference when you are in a hurry.
Once you land on the fake site, you see a form asking for your name, address, license plate number, and payment information. Some versions ask for your Social Security number or driver's license number. When you submit the form, the scammers have everything they need to commit identity theft or drain your bank account.
The fake site may also ask you to create an account with a username and password. If you use the same password on other accounts — your email, your bank, your work — the scammers can try that password on those sites too. This is why toll scams are dangerous even if you catch them before entering payment information.
What happens after you enter your information
If you provided a debit card or bank account number, scammers can make unauthorized charges within hours. If you provided a credit card, the charges may take a day or two to appear. Either way, you will not see the money leave your account until the transaction posts, which means the scammers have a head start.
If you provided your Social Security number and address, scammers can open new credit accounts in your name — credit cards, auto loans, personal loans. These accounts will show up on your credit report and damage your credit score. You may not discover this for weeks or months, by which time the scammers have already maxed out the cards or taken out loans they have no intention of repaying.
Some scammers also sell the information they collect to other criminals. Your name, address, phone number, and payment details may be used in future scams or sold on the dark web. This is why the damage from a single scam can compound over time.
How to tell a real toll authority message from a scam
Real toll authorities do not send unsolicited text messages asking you to click a link and pay when ready. If you have an active toll account or have driven on a tolled road, you will receive a bill by mail. If you ignore the bill, you may receive a second notice by mail. Only after multiple unpaid bills might a toll authority attempt to contact you by phone — and even then, they will call a number you have on file, not text you out of the blue.
Real toll authority websites have find URLs that begin with "https://" and show a padlock icon in your browser. The domain name matches exactly — "e-zpass.com" not "e-zpass-payment.com" or "e-zpass-toll.com". If you are unsure, do not click the link in the text. Instead, go to your web browser, type the toll authority's name into a search engine, and navigate to their official website directly.
Real toll authorities also do not ask for your Social Security number or driver's license number to process a payment. They may ask for your license plate number to look up your account, but they already have your payment method on file if you have an active account. A request for sensitive personal information is a red flag.
What to do if you received the text but did not click
Delete the message and do not click the link. Do not reply to the text — replying tells the scammer your phone number is active and may result in more scam messages. If the message came from a number, you can block it on most phones by opening the message, tapping the number or sender name, and selecting "Block" or "Report as Spam".
If you want to verify whether you actually owe tolls, contact the toll authority directly. Look up their phone number on their official website — not from the text message — and call them. Provide your license plate number and they can tell you whether you have any unpaid tolls. This takes five minutes and gives you certainty.
You can also report the scam text to the Federal Trade Commission at reportfraud.ftc.gov. The FTC collects reports of scams and shares patterns with law enforcement. Reporting does not recover your money if you were scammed, but it helps the FTC and police understand where scams are coming from and how widespread they are.
What to do if you clicked the link and entered information
Contact your bank or credit card company when ready. Tell them you entered your payment information on a fraudulent website. They can flag your account for fraud, cancel your card, and issue a replacement. If you used a debit card, ask them to reverse any unauthorized charges and consider whether you should switch to a different account while the fraud investigation is underway.
If you provided your Social Security number, contact the three major credit bureaus — Equifax, Experian, and TransUnion — and place a fraud alert on your credit report. A fraud alert tells lenders to verify your identity before opening new accounts in your name. You can place a fraud alert for free by calling one bureau and they will notify the other two. The alert lasts one year and can be renewed.
Consider placing a credit freeze as well. A credit freeze prevents anyone, including you, from opening new accounts using your Social Security number until you lift the freeze. This is more restrictive than a fraud alert but also more protective. You can place a freeze for free with all three bureaus.
Monitor your credit report for the next year. You can get a free copy of your credit report from each bureau once per year at annualcreditreport.com. Check for accounts you did not open and inquiries from lenders you did not contact. If you find fraudulent accounts, dispute them with the credit bureau and the lender.
Why toll scams are spreading
Toll scams are effective because they exploit real anxiety about real debt. Most people have driven on tolled roads and do not keep perfect track of whether they paid. The threat of a fine or license suspension is credible enough that people act quickly. Scammers also know that toll authorities are government agencies, which makes the fake message seem more official.
Text messages are also harder to verify than emails or phone calls. You cannot easily check the sender's identity or see whether the message came from an official account. Scammers can spoof phone numbers to make the text appear to come from a local number or a number that matches the toll authority's real number.
The scam is also profitable. Even if only one in a thousand people who receive the text actually enters their information, the scammers can send thousands of texts and still make money. The cost to send a text is nearly zero, so the return on investment is high.
Frequently Asked Questions
Can a toll authority really suspend my license for unpaid tolls?
Yes, some states allow toll authorities to request license suspension for unpaid tolls, but only after a formal legal process. You would receive multiple bills by mail and a court notice before suspension could happen. A text message threatening when ready suspension is not how the process works.
What if I am not sure whether I actually owe tolls?
Call the toll authority directly using the phone number on their official website. Provide your license plate number and they can tell you in minutes whether you have any unpaid tolls and how much you owe. This is the only way to know for certain.
If I clicked the link but did not enter any information, am I safe?
Probably, but it depends on what happened after you clicked. If you closed the page when ready without entering anything, your risk is low. If the page tried to read software or asked for permission to access your phone's contacts or location, your phone may have been compromised. Consider running a malware scan or taking your phone to a technician.
Can I get my money back if I already paid the scammers?
It depends on how you paid. If you used a credit card, you can dispute the charge with your card company and they will likely reverse it. If you used a debit card, the process is slower but you may still recover the money. If you sent money through a wire transfer or gift card, recovery is much harder because those transactions are usually irreversible.
Should I respond to the text to tell the scammers to stop?
No. Responding confirms that your phone number is active and monitored, which makes you a more valuable target for future scams. Delete the message and block the number instead.