Unpaid Toll Text Scam: E-ZPass, SunPass & FasTrak Smishing
A text claims you owe a small unpaid toll and threatens a late fee. Learn why toll smishing became the most reported text scam, and how to check a real toll balance safely.
9 minute read
Written by ScamAlert Editorial Team
Fraud research and consumer protection reporting
Checked against primary sources
FTC, FBI IC3 and CFPB — how we verify
- Published:
- Updated:
The short answer
Toll authorities do not collect unpaid tolls by text link, and the amounts in these messages are deliberately trivial so you pay without thinking. The goal is your card details and, increasingly, a one-time passcode that lets the sender add your card to their own phone wallet. Check your balance by going to the toll agency yourself.
- The $6.99 toll is bait. Your card number and any code you enter are the actual target.
- Toll agencies bill unpaid tolls by mail to the registered vehicle owner, never by cold text.
- These campaigns name whichever system is regional — E-ZPass, SunPass, FasTrak, TxTag, PA Turnpike.
- Receiving one means nothing about you. They are blasted to number blocks, drivers or not.
It usually arrives on a weekday morning. "E-ZPass: You have an outstanding toll of $6.99. To avoid a late fee of $50.00, please settle your balance." A link follows, and often a warning that your vehicle registration could be suspended.
Toll smishing became one of the highest-volume consumer text scams in the United States because it solved a problem that other phishing lures struggle with: plausibility at scale. Almost everyone drives, most people have passed through an electronic toll at some point, and — crucially — hardly anyone knows their exact toll balance. There is no mental figure to contradict the message.
The amounts are calibrated. Six or seven dollars is small enough that disputing it costs more attention than paying it, and the threatened $50 penalty makes paying feel like the economically rational move. That asymmetry is the whole mechanism. The message is not trying to convince you it is important; it is trying to convince you it is trivial.
Billed by mail, not by text
US toll authorities pursue unpaid tolls through mailed violation notices to the registered vehicle owner — a process that does not begin with a cold SMS
Source: Federal Trade Commission — consumer alerts on toll scams
Why these texts are so convincing
Three design choices do most of the work, and recognizing them is more useful than memorizing any particular wording.
- Regional accuracy. Campaigns rotate the brand to match the recipient's area code — E-ZPass in the Northeast, SunPass in Florida, FasTrak in California, TxTag in Texas. Seeing the correct local system feels like evidence the sender knows something about you. It is not; it is a lookup on your area code.
- An unverifiable claim. You cannot immediately recall whether you owe $6.99 in tolls. Unlike a fake bank charge, there is nothing to contradict.
- Cheap resolution. The proposed fix is small, immediate and administrative. Scams that ask for a lot trigger scrutiny; scams that ask for pocket change trigger compliance.
| Signal | Genuine toll authority | Scam text |
|---|---|---|
| First contact | Mailed violation notice to the registered owner | Unsolicited SMS to a phone number |
| Amount | Itemized by crossing, with date and location | A single round-ish figure with no detail |
| Link domain | Official state or agency domain, often .gov | Lookalike such as ezpass-toll.info or a shortener |
| Threat | Statutory penalties explained in the notice | "Registration suspended", "late fee", 12–48 hour deadline |
| Payment page | Reached by you, through the agency site or app | Reached only by tapping the texted link |
| Asks for a passcode | Never | Common in the current variant |
How to check whether you actually owe a toll
The check takes a couple of minutes and definitively settles it. The rule is identical to every other notification scam: go to the organization yourself rather than following the message.
- Do not tap the link. Screenshot the message if you plan to report it.
- Identify your actual toll provider. If you have a transponder, it is on the device or your account statements.
- Search for the agency independently, or type the address you already know, and log in to your account there. Every major US toll system exposes your balance and crossing history.
- Check the vehicle. If you have no transponder and have not driven a toll road, there is nothing to owe.
- If a balance genuinely exists, pay it inside the agency's own site or app — never through a link you were sent.
- Forward the text to 7726 (SPAM) and delete it.
Red flags in a toll text
These messages are unusually formulaic. One flag is enough.
- You received it by text without ever registering a phone number with a toll agency.
- The domain is not the official agency site — check the registered domain before the first single slash.
- A deadline of 12, 24 or 48 hours, or a threat to suspend your registration.
- The amount is small and unitemized, with no crossing date or location.
- The message names a toll system that does not operate where you drive.
- The page asks for card details rather than logging you into an existing account.
- You are asked to enter a verification code that arrived separately.
- The sender is an email address, a long international number, or an iMessage account.
If you already paid or entered a code
Toll scam recovery timeline
- 1
Minutes 0–15
Freeze the card and request a new number
Lock it in your banking app, then call the number on the back of the card. Reissue matters here — the details are already captured and watching the account is not enough.
- 2
Minutes 15–30
If you entered a code, check for a wallet enrollment
Ask your bank specifically whether your card was added to a mobile wallet or a new device in the last hour, and have any such enrollment removed. This is the step people miss, and it is how the card keeps being used after reissue is requested.
- 3
Hour 1
Secure the account
Force a password reset, remove unrecognized devices and payees, and move off SMS-based two-factor authentication to an app or passkey where your bank supports it.
- 4
Day 1
Dispute and monitor
Dispute unauthorized charges in writing. Turn on transaction alerts at the lowest threshold and watch for small test charges rather than large ones.
- 5
Days 1–3
Report it
File at ReportFraud.ftc.gov and with IC3, and forward the original message to 7726 so the sending number feeds carrier blocklists.
Report a toll scam text
Also worth notifying your real toll agency — most maintain a fraud page and track impersonation of their brand.
These are official government resources. ScamAlert is not affiliated with any government agency and receives no compensation for these links.
Toll smishing is worth understanding not because it is dangerous in isolation — the individual loss is often small — but because it is the clearest demonstration of a principle that governs this entire category. The scam is not built around a convincing story. It is built around an amount too small to be worth thinking about, attached to a fact you cannot immediately verify. Once you notice that structure, the same defense works everywhere: never resolve a notification through the notification.
How to check an unpaid toll text safely
Verification steps for a text claiming an unpaid toll, and recovery steps if card details or a passcode were entered.
- 1
Do not tap the link
Screenshot the message for reporting. Every risk in this scam begins with navigating from the text.
- 2
Identify your real toll provider
Check your transponder or account statements. A message naming a system you do not use is fabricated.
- 3
Log in to the agency directly
Type the agency address yourself or use its official app, and review your balance and crossing history there.
- 4
Pay only inside the official site or app
If a balance genuinely exists, settle it through the agency’s own portal, never through a texted link.
- 5
Freeze the card if you paid
Lock it in your banking app and call the number on the back to report compromise and request a new card number.
- 6
Check for mobile wallet enrollment if you entered a code
Ask your bank whether your card was added to a new device or wallet in the last hour, and have it removed.
- 7
Report and forward to 7726
File at ReportFraud.ftc.gov, report to IC3, and forward the text to 7726 to feed carrier blocklists.
Frequently asked questions
Is the unpaid toll text real or a scam?
If it arrived as an unsolicited text with a payment link, treat it as a scam. US toll authorities pursue unpaid tolls by mailing a violation notice to the registered vehicle owner, itemized by crossing date and location. They do not open with a cold SMS demanding a small payment through a link. The reliable check is to log in to your actual toll account by typing the agency address yourself.
Why did I get an E-ZPass text when I live nowhere near an E-ZPass state?
Because the sender does not know where you live. Campaigns pick a toll brand by area code, and area codes travel with people who move. Numbers are also sourced from breaches and generated in blocks, so recipients frequently include people who do not drive at all. Receiving a message for the wrong region is itself a strong signal it is fraudulent.
I paid the toll. What is the actual damage?
Losing the few dollars is trivial; losing your card details is not. The page captured your full card number, expiry, CVV and billing address, which is everything needed for card-not-present fraud and is often resold in bulk. Freeze the card and request a new number rather than simply monitoring. If you also entered a verification code, ask your bank whether your card was enrolled in a mobile wallet on another device.
What happens if I ignore a real unpaid toll?
Genuine unpaid tolls escalate slowly and visibly: a mailed notice, then administrative fees, and in some states eventual registration or renewal holds. None of that happens within the 24 hours these texts threaten. The manufactured deadline exists specifically to stop you taking the two minutes needed to check your real balance.
Should I reply to ask them to stop?
No. Any reply confirms your number is active and read by a person, which typically increases the volume you receive. Criminal senders treat STOP as engagement rather than an opt-out. Forward the message to 7726, block the sender, and delete it.
Can the text harm my phone if I do not enter anything?
Receiving it cannot. Opening the link on an updated phone is very unlikely to cause harm on its own — phishing pages need you to type something or approve an installation. If you tapped through and entered nothing, close it and move on. Do not revisit the page to investigate.
Sources & further reading
Every guide on ScamAlert is checked against primary sources from US consumer protection and law enforcement agencies.
- [1]Consumer alerts on toll and delivery text scams — Federal Trade Commission
- [2]How to Recognize and Report Spam Text Messages — Federal Trade Commission
- [3]Internet Crime Complaint Center (IC3) — Federal Bureau of Investigation
Topics covered
- unpaid toll text scam
- ezpass scam text
- sunpass text scam
- fastrak scam text
- toll by mail scam
- is the unpaid toll text real
Editorial note: This guide is general consumer education, not legal or financial advice. Dispute deadlines, liability limits and reimbursement policies vary by institution and change over time. Confirm your specific rights with your bank or a qualified professional. See our editorial policy for how we research and review this content.
Sponsored content
Related guides
AI & Cyber
USPS Package Delivery Text Scam
A text says your USPS package is held for an incomplete address and asks for a small redelivery fee. Here is how the scam works, why the fee is not the point, and what to do.
Banking & Wire
Bank Fraud Alert Text Scam
A fake bank fraud alert text is the opening move in a bank impersonation scam. Learn how smishing works, the three requests that are always fraud, and the recovery steps that still work.
AI & Cyber
QR Code (Quishing) Scams
Fake QR code stickers on parking meters, restaurant tables and package slips route you to convincing payment clones. Learn how quishing works and how to check a code before you scan.