Skip to content
ScamAlertScamAlert home
AI & Cyber

Unpaid Toll Text Scam: E-ZPass, SunPass & FasTrak Smishing

A text claims you owe a small unpaid toll and threatens a late fee. Learn why toll smishing became the most reported text scam, and how to check a real toll balance safely.

9 minute read

SA

Written by ScamAlert Editorial Team

Fraud research and consumer protection reporting

Checked against primary sources

FTC, FBI IC3 and CFPB — how we verify

Published:
Updated:

The short answer

Toll authorities do not collect unpaid tolls by text link, and the amounts in these messages are deliberately trivial so you pay without thinking. The goal is your card details and, increasingly, a one-time passcode that lets the sender add your card to their own phone wallet. Check your balance by going to the toll agency yourself.

  • The $6.99 toll is bait. Your card number and any code you enter are the actual target.
  • Toll agencies bill unpaid tolls by mail to the registered vehicle owner, never by cold text.
  • These campaigns name whichever system is regional — E-ZPass, SunPass, FasTrak, TxTag, PA Turnpike.
  • Receiving one means nothing about you. They are blasted to number blocks, drivers or not.

It usually arrives on a weekday morning. "E-ZPass: You have an outstanding toll of $6.99. To avoid a late fee of $50.00, please settle your balance." A link follows, and often a warning that your vehicle registration could be suspended.

Toll smishing became one of the highest-volume consumer text scams in the United States because it solved a problem that other phishing lures struggle with: plausibility at scale. Almost everyone drives, most people have passed through an electronic toll at some point, and — crucially — hardly anyone knows their exact toll balance. There is no mental figure to contradict the message.

The amounts are calibrated. Six or seven dollars is small enough that disputing it costs more attention than paying it, and the threatened $50 penalty makes paying feel like the economically rational move. That asymmetry is the whole mechanism. The message is not trying to convince you it is important; it is trying to convince you it is trivial.

Billed by mail, not by text

US toll authorities pursue unpaid tolls through mailed violation notices to the registered vehicle owner — a process that does not begin with a cold SMS

Source: Federal Trade Commission — consumer alerts on toll scams

Why these texts are so convincing

Three design choices do most of the work, and recognizing them is more useful than memorizing any particular wording.

  1. Regional accuracy. Campaigns rotate the brand to match the recipient's area code — E-ZPass in the Northeast, SunPass in Florida, FasTrak in California, TxTag in Texas. Seeing the correct local system feels like evidence the sender knows something about you. It is not; it is a lookup on your area code.
  2. An unverifiable claim. You cannot immediately recall whether you owe $6.99 in tolls. Unlike a fake bank charge, there is nothing to contradict.
  3. Cheap resolution. The proposed fix is small, immediate and administrative. Scams that ask for a lot trigger scrutiny; scams that ask for pocket change trigger compliance.
Real toll notices vs. toll smishing
SignalGenuine toll authorityScam text
First contactMailed violation notice to the registered ownerUnsolicited SMS to a phone number
AmountItemized by crossing, with date and locationA single round-ish figure with no detail
Link domainOfficial state or agency domain, often .govLookalike such as ezpass-toll.info or a shortener
ThreatStatutory penalties explained in the notice"Registration suspended", "late fee", 12–48 hour deadline
Payment pageReached by you, through the agency site or appReached only by tapping the texted link
Asks for a passcodeNeverCommon in the current variant

How to check whether you actually owe a toll

The check takes a couple of minutes and definitively settles it. The rule is identical to every other notification scam: go to the organization yourself rather than following the message.

  1. Do not tap the link. Screenshot the message if you plan to report it.
  2. Identify your actual toll provider. If you have a transponder, it is on the device or your account statements.
  3. Search for the agency independently, or type the address you already know, and log in to your account there. Every major US toll system exposes your balance and crossing history.
  4. Check the vehicle. If you have no transponder and have not driven a toll road, there is nothing to owe.
  5. If a balance genuinely exists, pay it inside the agency's own site or app — never through a link you were sent.
  6. Forward the text to 7726 (SPAM) and delete it.

Red flags in a toll text

These messages are unusually formulaic. One flag is enough.

  • You received it by text without ever registering a phone number with a toll agency.
  • The domain is not the official agency site — check the registered domain before the first single slash.
  • A deadline of 12, 24 or 48 hours, or a threat to suspend your registration.
  • The amount is small and unitemized, with no crossing date or location.
  • The message names a toll system that does not operate where you drive.
  • The page asks for card details rather than logging you into an existing account.
  • You are asked to enter a verification code that arrived separately.
  • The sender is an email address, a long international number, or an iMessage account.

If you already paid or entered a code

Toll scam recovery timeline

  1. 1

    Minutes 0–15

    Freeze the card and request a new number

    Lock it in your banking app, then call the number on the back of the card. Reissue matters here — the details are already captured and watching the account is not enough.

  2. 2

    Minutes 15–30

    If you entered a code, check for a wallet enrollment

    Ask your bank specifically whether your card was added to a mobile wallet or a new device in the last hour, and have any such enrollment removed. This is the step people miss, and it is how the card keeps being used after reissue is requested.

  3. 3

    Hour 1

    Secure the account

    Force a password reset, remove unrecognized devices and payees, and move off SMS-based two-factor authentication to an app or passkey where your bank supports it.

  4. 4

    Day 1

    Dispute and monitor

    Dispute unauthorized charges in writing. Turn on transaction alerts at the lowest threshold and watch for small test charges rather than large ones.

  5. 5

    Days 1–3

    Report it

    File at ReportFraud.ftc.gov and with IC3, and forward the original message to 7726 so the sending number feeds carrier blocklists.

Report a toll scam text

Also worth notifying your real toll agency — most maintain a fraud page and track impersonation of their brand.

These are official government resources. ScamAlert is not affiliated with any government agency and receives no compensation for these links.

Toll smishing is worth understanding not because it is dangerous in isolation — the individual loss is often small — but because it is the clearest demonstration of a principle that governs this entire category. The scam is not built around a convincing story. It is built around an amount too small to be worth thinking about, attached to a fact you cannot immediately verify. Once you notice that structure, the same defense works everywhere: never resolve a notification through the notification.

How to check an unpaid toll text safely

Verification steps for a text claiming an unpaid toll, and recovery steps if card details or a passcode were entered.

  1. 1

    Do not tap the link

    Screenshot the message for reporting. Every risk in this scam begins with navigating from the text.

  2. 2

    Identify your real toll provider

    Check your transponder or account statements. A message naming a system you do not use is fabricated.

  3. 3

    Log in to the agency directly

    Type the agency address yourself or use its official app, and review your balance and crossing history there.

  4. 4

    Pay only inside the official site or app

    If a balance genuinely exists, settle it through the agency’s own portal, never through a texted link.

  5. 5

    Freeze the card if you paid

    Lock it in your banking app and call the number on the back to report compromise and request a new card number.

  6. 6

    Check for mobile wallet enrollment if you entered a code

    Ask your bank whether your card was added to a new device or wallet in the last hour, and have it removed.

  7. 7

    Report and forward to 7726

    File at ReportFraud.ftc.gov, report to IC3, and forward the text to 7726 to feed carrier blocklists.

Frequently asked questions

Is the unpaid toll text real or a scam?

If it arrived as an unsolicited text with a payment link, treat it as a scam. US toll authorities pursue unpaid tolls by mailing a violation notice to the registered vehicle owner, itemized by crossing date and location. They do not open with a cold SMS demanding a small payment through a link. The reliable check is to log in to your actual toll account by typing the agency address yourself.

Why did I get an E-ZPass text when I live nowhere near an E-ZPass state?

Because the sender does not know where you live. Campaigns pick a toll brand by area code, and area codes travel with people who move. Numbers are also sourced from breaches and generated in blocks, so recipients frequently include people who do not drive at all. Receiving a message for the wrong region is itself a strong signal it is fraudulent.

I paid the toll. What is the actual damage?

Losing the few dollars is trivial; losing your card details is not. The page captured your full card number, expiry, CVV and billing address, which is everything needed for card-not-present fraud and is often resold in bulk. Freeze the card and request a new number rather than simply monitoring. If you also entered a verification code, ask your bank whether your card was enrolled in a mobile wallet on another device.

What happens if I ignore a real unpaid toll?

Genuine unpaid tolls escalate slowly and visibly: a mailed notice, then administrative fees, and in some states eventual registration or renewal holds. None of that happens within the 24 hours these texts threaten. The manufactured deadline exists specifically to stop you taking the two minutes needed to check your real balance.

Should I reply to ask them to stop?

No. Any reply confirms your number is active and read by a person, which typically increases the volume you receive. Criminal senders treat STOP as engagement rather than an opt-out. Forward the message to 7726, block the sender, and delete it.

Can the text harm my phone if I do not enter anything?

Receiving it cannot. Opening the link on an updated phone is very unlikely to cause harm on its own — phishing pages need you to type something or approve an installation. If you tapped through and entered nothing, close it and move on. Do not revisit the page to investigate.

Sources & further reading

Every guide on ScamAlert is checked against primary sources from US consumer protection and law enforcement agencies.

  1. [1]Consumer alerts on toll and delivery text scams Federal Trade Commission
  2. [2]How to Recognize and Report Spam Text Messages Federal Trade Commission
  3. [3]Internet Crime Complaint Center (IC3) Federal Bureau of Investigation

Topics covered

  • unpaid toll text scam
  • ezpass scam text
  • sunpass text scam
  • fastrak scam text
  • toll by mail scam
  • is the unpaid toll text real

Editorial note: This guide is general consumer education, not legal or financial advice. Dispute deadlines, liability limits and reimbursement policies vary by institution and change over time. Confirm your specific rights with your bank or a qualified professional. See our editorial policy for how we research and review this content.

Sponsored content

Related guides

AI & Cyber

USPS Package Delivery Text Scam

A text says your USPS package is held for an incomplete address and asks for a small redelivery fee. Here is how the scam works, why the fee is not the point, and what to do.

9 min readUpdated July 21, 2026

Banking & Wire

Bank Fraud Alert Text Scam

A fake bank fraud alert text is the opening move in a bank impersonation scam. Learn how smishing works, the three requests that are always fraud, and the recovery steps that still work.

11 min readUpdated June 18, 2026

AI & Cyber

QR Code (Quishing) Scams

Fake QR code stickers on parking meters, restaurant tables and package slips route you to convincing payment clones. Learn how quishing works and how to check a code before you scan.

11 min readUpdated June 30, 2026