The Federal Bureau of Investigation (FBI) has issued an urgent warning to iPhone and Android users across the United States about an expanding phishing scam involving fake toll payment texts. The agency advises users to immediately delete any suspicious text messages claiming unpaid toll fees.
According to the FBI, the scam is rapidly spreading state-by-state, targeting users with deceptive text messages that appear to come from legitimate toll authorities. The messages claim recipients owe money for unpaid tolls and must make immediate payments through provided links.
"These messages are likely scams designed not only to steal money but also to capture sensitive personal information like driver's license numbers that can be used for identity theft," warns the Federal Trade Commission (FTC).
The fraudulent operation works by directing victims to sophisticated fake payment portals that closely mimic official toll service websites. These counterfeit sites then harvest victims' banking details, credit card information, and personal data.
Cybersecurity investigators have traced these attacks to Chinese criminal groups who develop and maintain "commercial phishing kits." These groups have previously targeted shipping companies, tax agencies, and immigration services using similar tactics.
The scam has already affected thousands of users across multiple states including Massachusetts, California, North Carolina, South Carolina, Illinois, Colorado, and Florida. Victims report unauthorized transactions and identity theft following interaction with these fake payment portals.
To protect themselves, the FBI recommends users:
- Never click links in unexpected toll payment texts
- Verify any toll charges through official websites or customer service numbers
- Delete suspicious messages immediately
- Use phones with current operating system updates
- Enable phishing-resistant two-factor authentication
The FBI emphasizes that legitimate toll authorities will not demand immediate payment through text message links. Users who receive such messages should report them to law enforcement and their mobile carrier.