A text arrives warning that you have an unpaid toll and a late fee is about to be added — just tap the link to settle it before it grows. It looks routine, and that is the trap. Fake toll texts have exploded into one of the most common scams around, and they are after far more than a few dollars. Our GetMyPassword team explains how to recognize a toll text scam and what to do.
How the scam works
You get a text claiming to be from a toll agency — using names like E-ZPass, FasTrak or a local authority — saying you owe a small unpaid toll and must pay immediately to avoid penalties. The link leads to a convincing but fake payment page. The real goal is not the tiny toll; it is your card number and personal details, which the scammer harvests when you “pay.” Some pages also try to install something or capture a login. The small amount is bait to make paying feel easy and harmless.
Red flags to watch for
- An unexpected text about a toll, often for roads you have not driven.
- Urgency and a small late fee that grows, pushing you to pay fast.
- A link to an unofficial site — a strange or look-alike web address, not the real agency.
- A request for card details on a page you reached from the text.
- Odd sender numbers, sometimes from overseas, and slightly off wording.
What to do instead of tapping
Do not tap the link. If you want to be sure about a toll, go to your toll agency’s official website yourself or use its app — look up the address rather than trusting the one in the text — and check your real balance there. Delete and report the message as junk or phishing. A genuine toll bill will be available through the official account, never only through a surprise text demanding instant card payment.
The few dollars are not the prize — your card number is. A real toll can always be checked on the agency’s own site, so the link in the text is the one thing you never need.
How to protect yourself
Treat any unexpected “pay now” text as suspect, and never enter card details on a page you reached from a message. If you already tapped and entered anything, contact your bank, watch for fraudulent charges, and change any password you may have exposed. Because these pages often fish for logins too, keep your accounts behind a unique password from our password generator and two-factor authentication, so a fake toll never becomes a real account breach.
Frequently asked questions
How do I know if a toll text is a scam?
Watch for an unexpected text about an unpaid toll, urgency and a growing late fee, a link to an unofficial or look-alike site, and a request for card details. Real toll bills are available through the agency’s official account, not a surprise text.
What should I do if I get a fake toll text?
Do not tap the link. Check any real toll balance by going to your toll agency’s official website or app yourself, then delete and report the text as phishing. Never enter card details on a page reached from the message.
What if I already paid through the link?
Contact your bank right away to flag the charge and protect your card, watch for further fraudulent activity, and change any password you may have entered. Enable two-factor authentication on accounts that could be affected.