A new smishing scam is circulating, tricking recipients into believing they owe unpaid tolls to E-ZPass and other toll service providers. The fraudulent messages attempt to steal personal and financial information under the guise of overdue payments.
How the Scam Works
Scammers send text messages posing as E-ZPass, SunPass, Peach Pass, or other toll providers. The messages typically contain a link and claim that the recipient must pay an outstanding toll balance immediately to avoid penalties such as fines or license suspension.
These messages often:
- Originate from random phone numbers or email addresses.
- Include a shortened or suspicious URL.
- Use urgent and threatening language to prompt quick action.
- Request small payment amounts, making them seem plausible.
Once a recipient clicks the fraudulent link, they are redirected to a website designed to look like an official toll provider’s page. Here, scammers collect sensitive information, including credit card details and personal data, for fraudulent use.
A First-Hand Experience with the Scam
I received an E-ZPass smishing text the other day. At first glance, it appeared legitimate, but upon closer inspection, there were clear signs of fraud. The sender’s number started with +63 970 081 5446. This is a dead giveaway that the message is fake—the +63 country code belongs to the Philippines, where E-ZPass does not operate.
Another red flag was the link in the message. It attempted to look like an official E-ZPass website but was actually disguised as “e-zpass.com-emzwsedl.xin.” The hyphen after “e-zpass.com” is the key detail here—it extends the domain name, making “e-zpass.com” appear legitimate at first glance, but the actual domain is “.xin.” This is not an official E-ZPass domain, further proving the scam’s fraudulent nature.
What to Do If You Receive a Scam Text
If you receive a suspicious E-ZPass-related text:
- Do not click any links.
- Report the message as spam or junk to your phone carrier.
- Delete the text from your device.
If you have already clicked the link and provided personal information:
- Contact your bank and credit card company immediately to report potential fraud.
- Monitor your accounts for unauthorized transactions.
- Consider freezing your credit to prevent identity theft.
How to Verify Legitimate Toll Notices
To confirm whether you have unpaid tolls:
- Visit the official website of your toll provider directly (e.g., E-ZPass, SunPass).
- Log in to your account or contact customer service for verification.
- Be cautious of unexpected toll notifications, especially if you do not own a vehicle or use toll roads.
Staying Safe from Future Scams
Cybercriminals frequently update their tactics, so staying informed is key. Use these best practices to avoid falling victim to smishing scams:
- Never provide personal or financial information via text message.
- Enable spam filters on your phone to block fraudulent messages.
- Regularly check your financial statements for unauthorized charges.
Scams like these rely on fear and urgency to deceive individuals. By staying vigilant and informed, you can protect yourself from financial and identity theft threats.
Feeling lost in the digital world? Dr. Tom is here to help!
Join Dr. Tom every week in his column, Dr. Tom’s Cyber Bits and Tips, for byte-sized advice on all things cyber and tech. Whether you’re concerned about online safety, curious about the latest cybercrime trends, or simply want to navigate the ever-evolving digital landscape, Dr. Tom has you covered.
From practical cybersecurity tips to insightful breakdowns of current threats, Dr. Tom’s column empowers you to stay informed and protect yourself online. So, dive in and get savvy with the web – with Dr. Tom as your guide!
Sign up for our Sunday Spectator. Delivered to your inbox every Sunday, with all the news from the week.
