How to spot the fake ‘unpaid toll’ or DMV text scam
Your phone buzzes. It’s a text saying you owe $6.99 for an unpaid toll, with a link to “pay now and avoid the $50 late fee.” Maybe you drove on a toll road last week. Maybe you live somewhere with no toll roads at all. Either way, the text is fake.
These messages have flooded U.S. cell phones for over a year now, and the FTC reported this month that government-imposter scams are up roughly 40%, largely because of them. A newer variant trades the toll agency for the DMV and threatens to suspend your license over an unpaid “traffic violation.” Same trap, different uniform.
What to watch for
Real toll agencies and state DMVs don’t text you out of the blue with a payment link. If your account is actually in arrears, you’ll get a paper bill at the address on your registration. A few specifics give the fake away:
- The link points to a domain that has nothing to do with the actual agency. Common patterns: ezpass-info[.]com, dmv-pay[.]us, sunpass-billing[.]org. The real ones live on .gov or the agency’s known site.
- Amounts are small on purpose, usually $4 to $15, so it feels easier to just pay and move on.
- A deadline sits a day or two away, with a much larger penalty attached.
- Sender ID is a long phone number you’ve never seen, or has an unusual prefix like +63, +44, or +1-883.
- “Dear Customer” greeting. No name, no plate, no vehicle details.
If you’ve already tapped the link
Close the page. Don’t enter anything else. If you got as far as the form, assume the data you typed is in someone else’s hands and act accordingly:
- Card details: call the number on the back of that card and report it. Ask for a new card and freeze the old one right away.
- Driver’s license, address, date of birth: those go into resale databases. Expect more phishing in the next few weeks, and consider a free credit freeze at all three bureaus.
- Apple Pay or Google Pay users: your bank can usually migrate the token to the replacement card without you re-adding every merchant.
- Keep the original text. Don’t delete it. Forward it to 7726 (SPAM), which routes it to your carrier’s abuse team.
The follow-up call is where the real money goes
Don’t call any number in the message. The dangerous version of this scam isn’t the $6.99 — it’s the live person waiting on the other end of that number, posing as the “fraud department” or claiming to be with the FBI, and they are good at it. The small text is just the softening. People have lost five figures on the call that came after, because by then the story sounded official.
And don’t try to “test” the link from another device to see what’s on it. These pages fingerprint the browser that visits and can serve a different payload to different visitors, so poking at it teaches you nothing and can cost you.
If money already moved
Call your card issuer or bank within hours, not days. Ask for a fraud chargeback and a new card number. File a complaint at ic3.gov so the case is on federal record, and report the text to the real toll authority for your state (most have a fraud page on their .gov site).
Let me set a realistic expectation on the “who did this” question, because it comes up every time. A single toll or DMV text is one of thousands fired off the same throwaway infrastructure, routed through numbers and domains that are gone before the week is out and operated from outside the country. Attributing one of those blasts to a named individual almost never pays off. Where investigation earns its keep is later — if you got pulled into the follow-up call and real money moved through traceable rails, or the same crew keeps coming back at you. If the loss is significant, or the contact isn’t stopping, that’s where we can help. Start with the resource hub on the homepage for the right reporting channel, or look at Investigation Help for a guided next step.
The unpaid toll text is one of the cheapest scams to run and one of the easiest to fall for at 8 a.m. on a Monday. Knowing the shape of it is most of the defense.
— Lisa, GCCI