The Federal Bureau of Investigation (FBI) is warning smartphone users in the U.S. to delete fraudulent text messages appearing to come from toll road services, delivery companies and government agencies.
The latest so-called smishing scams—phishing attacks via SMS—have exploited more than 10,000 newly registered domains, using fake payment demands to steal personal and financial information.
Since early March 2024, the FBI’s Internet Crime Complaint Center (IC3) has received over 2,000 complaints related to fraudulent toll payment messages.
“The texts claim the recipient owes money for unpaid tolls and contain almost identical language,” the FBI stated. “However, the link provided within the text is created to impersonate the state’s toll service name, and phone numbers appear to change between states.”
How to Identify Dangerous Smishing Messages
The FBI warns that these scam text messages follow a specific format, typically claiming that the recipient owes a small amount for unpaid tolls and providing a fraudulent payment link. One common example reads:
“(State Toll Service Name): We’ve noticed an outstanding toll amount of $12.51 on your record. To avoid a late fee of $50.00, visit [fraudulent website link] to settle your balance.”
Pixabay/Pexels
Authorities emphasize that legitimate toll agencies do not send payment requests via text. Michigan’s Department of Transportation (MDOT) confirmed that “staff from the Mackinac Bridge Authority, Sault Ste. Marie International Bridge Administration, and Blue Water Bridge do not contact customers via text.” Toll violations are only sent via mail.
The Federal Trade Commission (FTC) also warned: “Not only is the scammer trying to steal your money, but if you click the link, they could get your personal info and even steal your identity,” according to Forbes.
What to Do If You Receive a Smishing Message
The FBI, FTC and cybersecurity experts recommend taking immediate action if you receive a suspicious text:
- Do not click on any links or respond. Even replying to the message can confirm to scammers that your number is active, increasing the risk of further attacks.
- Verify claims directly with the toll agency or service provider. The FBI advises users to “check your account using the toll service’s legitimate website [or] contact the toll service’s customer service phone number.”
- Report the scam. The FBI urges victims to “file a complaint with the IC3, www.ic3.gov, [and include] the phone number from where the text originated [and] the website listed within the text.” Suspicious messages can also be forwarded to 7726 (SPAM) to be reported to mobile carriers.
- Delete the text immediately. Keeping fraudulent messages on your phone increases the risk of accidental interaction.
The FBI warns that if you clicked a fraudulent link or provided personal information, you should take steps to secure your financial accounts and dispute any unfamiliar charges.
Nationwide Alerts and High-Risk Areas
The FBI has tracked widespread scam activity, with cybersecurity firm McAfee identifying the top five most targeted cities as:
- Dallas, Texas
- Atlanta, Georgia
- Los Angeles, California
- Chicago, Illinois
- Orlando, Florida
Officials in Virginia, Maryland, Indiana, North Carolina, Georgia, and Ohio have also issued public warnings due to increased scam reports (Forbes).
FBI’s Official Response
In its latest statement, the FBI advises: “If you receive one of these texts, the following is suggested: File a complaint with the IC3, check your account using the toll service’s legitimate website, contact the toll service’s customer service phone number, and delete any smishing texts received.”
The FTC reiterated the importance of caution, stating: “Scammers want you to react quickly, but it’s best to stop and check it out. Don’t click on any links in, or respond to, unexpected texts.”
What’s Next
With smishing scams on the rise, the FBI’s warning serves as a critical reminder to remain cautious with unsolicited texts. If you receive a suspicious message:
- Do not engage with it.
- Verify claims through official sources.
- Report the scam.
- Delete the text immediately.
For more details on protecting yourself from cyber threats, visit the FBI’s IC3 website at www.ic3.gov.