The Fake Toll Trap: Don’t Pay That Text

Picture this—you get an alert on your phone and it’s a text claiming you owe a toll of $5.99. The message warns of license suspension, penalties, or legal action if you you don’t act now. It looks official, referencing E-ZPass or NJ DMV, and includes a link to resolve the issue. But it’s a scam—and you’re not alone.

Smishing, or SMS phishing, is a fast-growing cyber threat that exploits urgency, trust in institutions, and mobile-first behavior. Over the past year, one specific tactic has surged across the country: fake toll violation texts.

The Surge in Toll Text Scams

From New Jersey to California, cybercriminals are flooding inboxes with convincing messages impersonating toll services. These texts claim recipients owe a small toll amount and direct them to a phishing website. According to the FBI’s Internet Crime Complaint Center (IC3), over 2,000 reports have been filed in 2025 alone about these toll scams.

In many cases, the messages appear to come from trusted sources, like “E-ZPassNJ” or “DMV Notification” with URLs that mimic government websites. The scam often includes threats of additional fines, license suspension, or court action to instill panic and prompt immediate clicks.

Anatomy of a Scam

Here’s how the typical toll smishing scam works:

1. Urgency & Threat: The message tells you that you owe a small toll fee and that failure to pay could result in legal trouble.
2. Fake Links: The link provided leads to a fake payment site that steals your personal or financial information.
3. Spoofed Sender IDs: Some messages appear to be from official-looking numbers or names to increase credibility.
4. Generic Greetings: Most texts avoid using your name, instead referring to you as an “E-ZPass user” or “Driver.”

Why It Works

This scam thrives on three major factors:

• Volume and Cost: Scammers can send thousands of texts cheaply.
• Trust in Toll Systems: Drivers assume tolling agencies will contact them about unpaid charges.
• Mobile User Habits: People are more likely to click on a text than they are to open and evaluate an email.

Risks to Victims

Victims of these scams may:

• Lose money through fake payments
• Unknowingly give up personal or banking information
• Have their credentials used for further fraud (e.g., adding cards to mobile wallets)

How to Stay Safe

• Don’t Click: Never tap on links from unexpected texts claiming unpaid tolls
• Verify Officially: Go directly to your toll agency’s website or contact customer service
  • NJ E-ZPass Login
  • NJ E-ZPass Customer Service
• Report: Forward suspicious messages to 7726 (SPAM) and report to FTC/IC3
• Educate: Share warnings with family and friends, especially vulnerable individuals

Final Thoughts

Toll smishing scams are only getting more sophisticated, leveraging fear, realism, and digital convenience to trick unsuspecting users. As technology advances, so do these scams. Awareness is the first—and most effective—defense. Think before you tap.

“What would Keanu Reeves do???”

— Emily Harris JD, CISSP, CIPP/US
Chief Information Security Officer

Want to Know More?

NJCCIC | SMiShing at Scale: A Deep Dive into Toll Violation Text Scams

NJ.gov | Here’s how to spot the new E-ZPass smishing scam targeting N.J. drivers