A new wave of toll scams is targeting Americans, with the FBI warning that the scam may be moving from state-to-state. The scammers are pretending to be tolling agencies and sending texts demanding money, claiming you owe unpaid road tolls.
The scam is simple: a text with a fake URL and phone number, supposedly from your local agency, asking you to pay a “toll amount.” However, this is a phishing attack, designed to steal your personal info and identity.
According to the FBI, the scammers are using updated commercial phishing kits developed by Chinese cybercriminal groups. These kits include templates to impersonate toll operators in multiple states.
The tactics used by these gangs are not new. They have targeted shipping companies, tax agencies, and immigration services, often targeting vulnerable individuals or those new to a country.
To avoid falling victim, the FBI advises:
* Check your account using the toll service’s legitimate website or contact their customer service phone number.
* Delete any suspicious texts.
* Ignore unsolicited calls from banks or tech support.
* Never agree to install software or move money.
* Don’t pay cold calling cops asking for cash.
The Oklahoma Turnpike Authority has also warned of scam texts, advising people to ignore them and delete them. Experts say the attacks are not overly sophisticated and can be easily spotted if you’re guarded against them.
This new wave of toll scams is a global problem, with reports emerging from Europe and the US. As security expert Brian Krebs notes, the emergence of these SMS phishing attacks coincided with the release of new phishing kit capabilities that closely mimic toll operator websites as they appear on mobile devices.
Remember to stick to basic safety rules to avoid falling victim to scams: never click on unsolicited links or calls, and always verify information before taking action.
Source: https://www.forbes.com/sites/zakdoffman/2025/02/08/fbi-warns-iphone-and-android-users-delete-all-these-texts-now