The toll road text scam may be the most widely seen phone scam in America right now. It arrives as a text message claiming you owe a small unpaid toll — often around $12.51 — and warning of a $50 late fee unless you pay immediately through a link. Millions of people have received some version of it, including many who have never driven on a toll road in their lives. The text looks official, the amount seems too small to question, and the link takes you to a page dressed up like your state’s toll agency. None of it is real: the page is built to harvest your credit card number, and sometimes your driver’s license number and Social Security number as well.
This is not a small-time operation. In April 2024, the FBI’s Internet Crime Complaint Center (IC3) issued a public service announcement after receiving over 2,000 complaints in about a month about smishing texts impersonating road toll services in at least three states — and warned the scam was moving from state to state. The FTC’s 2024 data shows that 16% of all reported fraud attempts were text-based, costing consumers $470 million. Security researchers at Palo Alto Networks’ Unit 42 later traced one smishing operation to more than 194,000 phishing addresses, finding that toll services were the single most impersonated category, with nearly 90,000 dedicated phishing addresses.
The good news: this scam has one of the simplest defenses of any fraud covered on this site. Real toll agencies do not collect payments through links in random text messages. Once you know what real toll billing looks like, the fake texts practically identify themselves. Below is the full breakdown — the exact wording to watch for, why the texts ask you to reply “Y,” and the three things to do every time one lands on your phone.
How the Toll Road Text Scam Works
Step 1: The blast. Scammers send the text to enormous lists of phone numbers — they are not targeting you specifically, which is why people who never use toll roads get them too. The FBI found that the texts use “almost identical language” across complaints, with a nearly identical “outstanding toll amount” each time, and that the sending phone numbers change from state to state.
Step 2: The familiar example. A real example quoted by the FBI reads: “(State Toll Service Name): We’ve noticed an outstanding toll amount of $12.51 on your record. To avoid a late fee of $50.00, visit https://myturnpiketollservices.com to settle your balance.” The amount is deliberately small — small enough that many people pay before they stop to check. The real prize was never the twelve dollars; it is the full card number you type in.
Step 3: The “reply Y” trick. Many versions of the text ask you to reply “Y” before opening the link. This is not bureaucracy — it is technical. On iPhones, links from unknown senders stay disabled until you reply or add the sender to your contacts, so your reply is the one step the attacker cannot do for you. And note: replying “STOP” is still a reply — every response confirms to the sender that your number is live and active, which makes it more valuable when traded.
Step 4: The lookalike payment page. The link leads to a convincing replica of a state toll agency site — E-ZPass, FasTrak, I-PASS, or a generic “Toll Enforcement Authority” page complete with legal jargon, violation details, and threats of registration suspension or collections. The page asks for your card details and, in many versions, your driver’s license and other identity documents. Everything you enter goes straight to the criminals.
Step 5: The harvest. Security researchers have documented how phished card data from these campaigns is rapidly loaded into Apple Pay and Google Wallet, letting criminals spend from your card through their own phones. What started as a $12.51 “toll” can become thousands in fraudulent charges before you notice.
Red Flags of the Toll Road Text Scam
- A text about tolls you don’t remember owing — or from an agency in a state you’ve never visited. Scammers blast these texts indiscriminately. Receiving one with no connection to your driving is the clearest sign it’s fake.
- A payment link in the text. Legitimate toll agencies send bills by mail or handle payments through their own app or your existing account. They do not text you a link and ask you to pay through it.
- A demand to “reply Y” or take an extra step to open the link. No legitimate toll agency asks you to reply to a text to activate a payment link. That step exists only to bypass your phone’s spam protections.
- A suspicious domain. The FBI specifically warned that the link “is created to impersonate the state’s toll service name” — a lookalike domain, not the agency’s real website. Researchers found campaigns using hundreds of thousands of such addresses, including many on the Chinese .xin top-level domain.
- Threats of immediate penalties. “Pay by today or face a $50 late fee and suspension of your registration” is pressure language. Real toll violations arrive by mail with a formal notice and a real dispute process, not a text demanding instant payment.
- Requests for your driver’s license or Social Security number. A toll payment needs a payment method — not your identity documents. Any toll site asking for those is harvesting your identity.
- Tiny amounts designed to bypass your skepticism. The FTC and state DMVs have warned about texts claiming a “small amount” in unpaid tolls. The small figure is deliberate: it makes you pay first and check later.
How to Check Whether You Actually Owe a Toll: 5 Steps
- Do not click the link and do not reply. Not even to text STOP. Delete the message without engaging — any reply confirms your number is active.
- Type the toll agency’s address yourself. Open your browser and type the official website of your state’s toll agency from memory or a search you run yourself — never use the link or phone number in the text. Log in to your existing account or use the agency’s “pay a toll” lookup.
- Use the agency’s official app or phone number. If you prefer to call, find the customer service number on the agency’s official website, not in the text message.
- Check how the agency actually bills you. Toll agencies send violation notices and invoices by U.S. mail, or through an account you created. If you have never created an account with that agency and never received mail from them, a text demanding payment is not real.
- When in doubt, ask the agency directly. A two-minute call to the real customer service line settles the question completely. That is the step scammers hope you skip.
What to Do If You Already Clicked or Paid
If you clicked the link but entered nothing, you are almost certainly fine — close the page and delete the text. If you entered card details, treat it as compromised immediately: call your bank or card issuer, report the fraud, and request a replacement card with a new number. Review your statements for unfamiliar charges and dispute any you did not authorize.
If you entered your driver’s license number, Social Security number, or other identity documents, take identity-theft precautions: place a fraud alert with the three credit bureaus (Equifax, Experian, and TransUnion), consider a full credit freeze, and visit IdentityTheft.gov for a personalized recovery plan from the FTC. Change any passwords you entered on the fake site, especially if you reuse them elsewhere.
How to Report a Toll Road Text Scam
Every report helps investigators map these campaigns, which hop between states and domains constantly:
- Forward the text to 7726 (SPAM). This reports it to your mobile carrier’s spam-filtering system. You can also use your phone’s built-in “report junk” option.
- FTC: Report at ReportFraud.ftc.gov. The FTC’s January 2025 consumer alert on this exact scam — “Got a text about unpaid tolls? It’s probably a scam” — urges consumers to report and delete these messages.
- FBI Internet Crime Complaint Center: File at ic3.gov. The FBI’s April 2024 public service announcement specifically asks victims to include the phone number the text came from and the website listed in the text.
- Your state toll agency and attorney general: Many state toll agencies and DMVs now run their own warnings about these texts; notifying them helps them alert other drivers in your state.
Sources
- FBI Internet Crime Complaint Center (IC3), Public Service Announcement I-041224-PSA, “Smishing Scam Regarding Debt for Road Toll Services” (April 12, 2024) — https://www.ic3.gov/PSA/2024/PSA240412
- Infosecurity Magazine, “FBI Warns of Massive Toll Services Smishing Scam” — https://www.infosecurity-magazine.com/news/fbi-toll-services-smishing-scam/
- MalwareTips, “Toll Enforcement Authority Scam Texts — What You Need To Know” — https://malwaretips.com/blogs/toll-enforcement-authority-scam-texts/
- Cybernoz, “New warning issued over toll fee scams” (May 2025, citing Malwarebytes, FTC 2024 Annual Data Book, and state DMV warnings) — https://cybernoz.com/new-warning-issued-over-toll-fee-scams/
- Sheftali.net, “Unpaid Toll Text: Why It Says Reply Y” (October 2026, citing BleepingComputer, Malwarebytes, and Palo Alto Networks Unit 42) — https://www.sheftali.net/2026/10/unpaid-toll-text-why-it-says-reply-y.html
- Black Enterprise, “Unpaid Toll Scam Is Now A National Smishing Campaign” (quoting the FTC’s March consumer alert) — https://www.blackenterprise.com/unpaid-toll-text-national-scam/amp/
Last reviewed: October 2026
This article is for education only and is not financial or legal advice.