The Text Is Fake — Here's What It Actually Does

If you received a text claiming you have an unpaid toll from E-ZPass, SunPass, FasTrak, or a similarly named tolling authority, and it includes a link to 'pay now' or 'avoid late fees,' it is a phishing scam. The FTC and toll agencies across the country have issued repeated warnings about this exact message — no legitimate tolling authority sends a text with a payment link and threatens same-day penalties. Real toll bills arrive by mail or through your existing account, never by unsolicited text.

The link in the text goes to a fake page that looks like a toll authority's payment portal. It asks for your name, address, and — critically — your full credit card number, expiration date, and CVV. Once you submit that page, the scammers have everything they need to make fraudulent charges, and in some versions of the scam, the page also silently harvests your login credentials if you were logged into your real email at the time.

Why This Scam Spread So Fast

This scam runs at enormous scale because sending mass text messages is cheap, and the premise is plausible to almost anyone who drives — most people can't immediately rule out having passed through a toll they forgot about. The messages use urgency ('pay within 24 hours to avoid a $50 late fee') to short-circuit the instinct to check the sender or the link before clicking.

The fake payment pages are often well-designed, using the real toll authority's logo and color scheme, and the URL is chosen to look plausible at a glance — a domain like ezpass-fees.com or sunpass-pay.net rather than the authority's real, official domain.

What to Do Right Now If You Already Clicked and Paid

1. Contact your bank or card issuer immediately. Report the charge as fraudulent and ask them to cancel and reissue the card — don't just dispute the one transaction, since the scammers now have the full card number and can attempt more charges.

2. Check whether you entered any other personal information — your name, address, or date of birth entered on the fake page can be used for identity theft even without the card, so it's worth placing a free fraud alert with one of the three credit bureaus (Equifax, Experian, TransUnion).

3. Change your email and financial account passwords if you may have been logged into your email when you clicked the link, and turn on two-factor authentication.

4. Report the text. Forward it to 7726 (SPAM) and file a report with the FTC at reportfraud.ftc.gov and the FBI's IC3 at ic3.gov — these reports help track the networks behind mass smishing campaigns.

5. Check your real toll account directly by typing your toll agency's actual website address into your browser (never the link from the text) to confirm whether you genuinely owe anything.

For a full, personalized damage assessment — what's likely exposed based on what you entered, and the exact order to act in — use Scam Detective's recovery tool. It walks through the same checklist above but tailored to your specific situation.

How to Spot the Next One Before You Click

Toll agencies do not send text messages demanding immediate payment through a link. Any text claiming to be from E-ZPass, SunPass, FasTrak, or a state tolling authority that includes a payment link should be treated as fake by default. Delete it, and check your account directly through the agency's real app or website if you're unsure whether you owe anything.

If you're ever unsure whether a link in a text or email is legitimate, paste it into Scam Detective before you click through on your phone. You'll get a free instant risk score and verdict, then can unlock the full report with your email or for $0.50.