That "Unpaid Toll" Text Is a Scam — Here's How to Tell (And What To Do)

"You have an unpaid toll of $4.35. Pay within 48 hours to avoid a $50 late fee."

Seen something like this pop up on your phone? You're not alone. Toll road scam texts exploded in 2025, surging by 900%, and they're still rolling in this year — getting more convincing every week.

What the scam looks like

The text follows a pretty consistent formula:

• Pretends to be from a toll authority (EZPass, SunPass, TxTag, FasTrak, or whatever system operates in your state)
• References a small, believable charge — usually $3 to $12
• Threatens you with late fees, license suspension, or a collections account if you don't act fast
• Includes a link that looks official but really goes to a fake payment page

The dollar amounts are chosen deliberately. Scammers count on you not verifying a $6 charge — you'll just pay it to make the headache go away. That's exactly what they're banking on.

Why this scam works so well

It works because of how it's designed:

• Plausibility. Most of us have driven on a toll road. "Maybe I actually did miss one?"
• Low stakes, high pressure. A $6 fine doesn't seem worth investigating, but the threat of a bigger penalty makes you want to pay now.
• Authority. Government agencies and toll agencies? They feel official. Trustworthy.
• Regional targeting. Scammers send these to numbers in areas with toll roads, so it feels personally relevant.

How to know it's a scam

Legitimate toll authorities don't send payment texts. Here's how they actually operate:

• They mail physical violation notices to the address on your vehicle registration
• They automatically deduct charges from a prepaid account if you have one
• If you genuinely owe, you get a paper bill with weeks to respond — not a text with a 48-hour deadline
• They've got no reason to text you a payment link

Red flags to watch for:

• The link doesn't match the real toll agency website (e.g., "ezpass-payment-verify.com" instead of "ezpassva.com")
• The text pushes artificial urgency — "24 hours," "48 hours," or "final notice"
• It tells you to click a link instead of directing you to the official app or website
• The sender is a regular mobile number, not an official short code

What to do

If you haven't clicked the link

• Don't click it. Don't reply. Don't call any number in the message.
• Report it. Forward the text to 7726 (SPAM) to flag it to your carrier.
• Delete it.
• Check your actual toll account if you need peace of mind — but go directly to the official app or website. Don't use any link from the text.

If you already clicked the link

• Entered payment info? Call your bank or credit card company right away. Request a replacement card. Keep a close eye on your statements.
• Entered a password? Change it on the real toll agency site and on any other account that uses that same password.
• Just clicked but didn't enter anything? You're probably okay, but run a security scan on your phone just to be safe.

Why these scams keep getting worse

The 2025 surge wasn't a fluke. 2026 is bringing new tactics:

• Machine-written messages that perfectly copy the tone and style of real toll agencies
• Spoofed sender numbers that look like official short codes
• Personalized targeting using data breaches — victims have reported texts mentioning their actual vehicle or home state
• Multi-stage attacks where the first text seems routine, then a follow-up "confirmation" text closes the trap

Standard spam filters check who sent the message and compare it against known spam databases. But these toll scams use new numbers constantly, and the message text looks legitimate to basic filters. Behavior-based detection works differently: it analyzes the actual patterns and intent behind a message, not just the sender's number.

Catching these scams before they get you

The scam detection inside Rampart looks for the warning signs built into these messages:

• Urgency language — deadline pressure designed to rush you into acting without thinking
• Authority impersonation — fake claims about being from government agencies or official systems
• Suspicious link patterns — domains that imitate real organizations but aren't legitimate
• Financial requests from strangers — any text asking for payment or financial info from an unknown number

It all happens in the background the moment the text arrives. No forwarding, no second-guessing, no clicking on sketchy links.

The bottom line

Toll road scams aren't disappearing anytime soon. They're too profitable and too cheap to run. Your best defense is knowing what to watch for — and having good technology watching your back.

When you're not sure: always verify through the official source before clicking any payment link in a text. Go to the toll agency's real website or call the number on your toll pass. Never, ever click a link from a text message demanding payment.