The FTC says fake toll-road texts are now the fastest-growing scam in America

A short text message claiming a driver owes a few dollars in unpaid tolls has become one of the most common fraud attempts landing on American phones. The Federal Trade Commission has repeatedly flagged these fake toll notices as a booming form of “smishing,” or phishing carried out over SMS, and the pattern is now so widespread that transportation departments in state after state have issued their own public warnings.

The mechanics are simple and cheap to run at scale, which is exactly why the volume has climbed so fast. A message arrives warning of a small overdue balance, threatens late fees or a suspended registration, and attaches a link to a convincing but fake payment page. The dollar figure is deliberately low, the deadline deliberately tight, and the whole design is built to make a busy person tap before thinking.

How the toll-text smishing scheme is built

The FTC’s consumer alert describes the core script plainly: a text says a person owes money on a toll and includes a link to pay, sometimes citing a specific unpaid amount and a looming penalty. According to the FTC’s guidance on the scam, the link leads to a spoofed website that either harvests a victim’s personal and financial details or pushes them to hand over a card number for a toll that was never actually owed.

What makes the campaign hard to stamp out is its industrial scale. Investigators tracking the operation have documented one network registering more than 10,000 lookalike domains impersonating toll authorities across at least 10 U.S. states, with the fake pages tailored to mimic real agencies by name. Because the underlying kits are sold and reused, a single takedown does little; a new batch of domains and a fresh wave of texts can appear within days.

Why the FTC ranks text fraud among the fastest-rising threats

The agency’s own data help explain the alarm. In an FTC Data Spotlight on text scams, fake toll and delivery messages ranked among the most-reported categories, with government-impersonation texts driving a sharp jump in complaints as fraudsters posed as tolling agencies and other official bodies. The commission’s reporting has tied the broader surge in imposter texts to billions of dollars in consumer losses across recent years, and toll notices have been a leading engine of that growth.

State enforcers have echoed the pattern. The office of California’s attorney general issued its own warning about a surge in text-based toll scams, urging residents not to click links in unexpected toll messages and to verify any balance directly with the official tolling agency. The consistency of these advisories, from federal to state level, is part of why the scam is now treated as a top-tier consumer threat rather than a passing nuisance.

The tells that separate a real toll notice from a fake

Legitimate tolling agencies generally do not demand instant payment through a link texted out of the blue, and they do not threaten immediate registration suspension over a couple of dollars. As a security walkthrough of the FTC warning notes, the fraudulent messages lean on urgency and small, believable amounts precisely because those cues short-circuit skepticism. Odd sender numbers, shortened or misspelled web addresses, and requests for card details on a page that does not match the agency’s real site are all signals that a message is not what it claims to be.

The safest response is also the simplest: do not tap the link. A driver who genuinely wants to check for an unpaid toll can look up the agency’s official website or phone number independently, rather than trusting the contact information inside the suspicious text. Typing a known web address by hand, or using a bookmark, sidesteps the entire trap.

Reporting a fake toll text and limiting the damage

The FTC asks recipients to report scam texts at ReportFraud.ftc.gov and to forward the message to 7726, the shortcode that spells “SPAM,” which routes the sample to wireless carriers working to block the senders. Deleting the message afterward removes the temptation to revisit it later. Anyone who did click a link and enter card or login details should treat it as a compromise, contacting the card issuer, changing any reused passwords, and watching statements for unfamiliar charges.

Because the toll scheme is engineered for volume, the individual defense that matters most is a habit rather than a gadget: assume any unexpected payment demand delivered by text is fake until proven otherwise, and verify through a channel the sender did not provide. That single reflex neutralizes not only fake toll notices but the wider family of impersonation texts riding the same playbook.

This article was researched and drafted with the assistance of AI and reviewed before publication.

More from Morning Overview