--- title: "That Unpaid Toll Text Message Can Render Your Bank Empty! | Phish Protection" description: "That Unpaid Toll Text Message Can Render Your Bank Empty!: emailsecurity · That Unpaid Toll Text Message Can Render Your Bank Empty! Commuting from one place." image: "https://phishprotection.com/og/blog/that-unpaid-toll-text-message-can-render-your-bank-empty.png" canonical: "https://phishprotection.com/blog/that-unpaid-toll-text-message-can-render-your-bank-empty/" --- Quick Answer emailsecurity · That Unpaid Toll Text Message Can Render Your Bank Empty! Commuting from one place to another isn’t just time-consuming but can also feel heavy on your pocket. No, this is not about the rising prices of gasoline. In a serious turn of events, a new and alarming type of smishing incident has been sweeping across all the states of the USA. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fthat-unpaid-toll-text-message-can-render-your-bank-empty%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=That%20Unpaid%20Toll%20Text%20Message%20Can%20Render%20Your%20Bank%20Empty!&url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fthat-unpaid-toll-text-message-can-render-your-bank-empty%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fphishprotection.com%2Fblog%2Fthat-unpaid-toll-text-message-can-render-your-bank-empty%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fphishprotection.com%2Fblog%2Fthat-unpaid-toll-text-message-can-render-your-bank-empty%2F&title=That%20Unpaid%20Toll%20Text%20Message%20Can%20Render%20Your%20Bank%20Empty! "Share on Reddit") [ ](mailto:?subject=That%20Unpaid%20Toll%20Text%20Message%20Can%20Render%20Your%20Bank%20Empty!&body=Check out this article: https%3A%2F%2Fphishprotection.com%2Fblog%2Fthat-unpaid-toll-text-message-can-render-your-bank-empty%2F "Share via Email") ![Phish Protection blog post image](https://media.mailhop.org/phishprotection/images/2024/04/Phishing-Statistics-Latest-Figures.jpg) [emailsecurity](https://soundcloud.com/phishprotection) · [That Unpaid Toll Text Message Can Render Your Bank Empty!](https://soundcloud.com/phishprotection/that-unpaid-toll-text-message-can-render-your-bank-empty) Commuting from one place to another isn’t just time-consuming but can also feel heavy on your pocket. No, this is not about the rising prices of gasoline. In a serious turn of events, a new and alarming type of [smishing incident](https://therecord.media/new-york-city-government-smishing-attack) has been sweeping **across all the states of the USA**. Basically, the threat actors have been running an [SMS phishing](/phishing/smishing-organizations-need-to-keep-safe-from-phishing-scam) campaign all over the United States. The smishing campaign convinces commuters about **unpaid tolls**. The ultimate goal of the phishing actors is to access the credentials of naive people and make some quick money . The FBI or Federal Bureau of Investigation has been looking into the matter and has warned people against such [SMS frauds](https://timesofindia.indiatimes.com/gadgets-news/sms-fraud-why-it-is-new-headache-for-telecom-companies-globally-and-what-makes-it-more-dangerous-than-email-scams/articleshow/108082766.cms). Also, FBI is quite confident that this toll scam has affected other countries in different parts of the world. They have even mentioned this in detail in their[public service announcement](https://www.ic3.gov/Media/Y2024/PSA240412). ![Phishing Statistics Latest Figures](https://media.mailhop.org/phishprotection/images/2024/04/Phishing-Statistics-Latest-Figures.jpg) ### When and How Did This Start In The US? The unpaid toll scam started back in March 2024 in the USA. So far, almost[2000](https://darkreading.com/cyberattacks-data-breaches/fbi-smishing-campaign-unpaid-toll-notices)scams have been reported across the states. > The threat actors send out an SMS saying, “We’ve noticed an outstanding toll amount of $12.51 on your record.” It further goes on to say, “To avoid a late fee of $50.00, visit to **settle your balance**.” The text can be exactly like this, with a few variations in tonality, amount, toll service provider’s name, and so on. The [scammers make the SMS](https://kslnewsradio.com/2067347/beware-of-voting-scams/) **look credible** enough by imitating the toll collection service providers in the USA. ### Why Does Unpaid Toll Scam Seem So Convincing? SMS phishing has never disappointed [threat actors](https://www.thestar.com.my/news/nation/2024/04/19/upswing-in-sms-scams-says-bukit-aman). It has always been effective in robbing innocent people’s **hard earned money**. Similar is the case with the latest unpaid toll scam as well! FBI’s warning further hints at the possibility that the smishing incident **might escalate in the future**. [People are easily falling prey](https://thehackernews.com/2024/03/new-phishing-kit-leverages-sms-voice.html) to the unpaid toll scam because of this old-school **SMS phishing tactic**. Different toll service names and phone numbers used in the text messages further add to their authenticity. The [malicious link](/phishing-awareness/the-only-thing-worse-than-clicking-on-a-malicious-link-in-a-phishing-email) keeps changing everytime. It redirects the victims to legitmate-looking\*\* toll service websites\*\*. Then they are asked to make the payment and to enter their credentials using a familiar bank-style transfer process, similar to [how to transfer money from bank account](https://www.bitdegree.org/money-transfer/tutorials/how-to-transfer-money-from-bank-account). Once the victims type in the required information, all the data gets collected by the threat actors. ### Which States Are Facing Imminent Smishing Threat? FBI is acting tight-lipped when asked about the specific states under a [smishing attack](https://www.techbusinessnews.com.au/news/linkt-branded-toll-road-scams-on-the-rise-despite-telco-sms-scam-measures/). However, social media is replete with posts related to unpaid toll scams in Pennsylvania. One of the toll services in the state, The **Pennsylvania Turnpike**, has uploaded warning posts on the **social media platform X** with the ultimate aim of **spreading awareness**. They have urged commuters to stay aware of such [fraudulent text messages](https://www.wfla.com/news/hillsborough-county/sunpass-warns-drivers-about-fake-text-messages-claiming-tolls-are-due/) and to report them to relevant authorities. The post sheds light on how some people have received malicious text messages pretending to be The Pennsylvania Turnpike and trying to [collect personal details](https://www.darkreading.com/cyberattacks-data-breaches/sms-phishing-messages-target-uae-citizens-visitors). The toll service company has urged people not to click on any such unpaid toll link and **delete the SMS at the earliest**. X users further traced the unpaid toll scam **back to Australia**. Back in[2022](https://twitter.com/campisi%5Fanthony/status/1561271659486531584)and 2023, the entire Australia was affected by a similar SMS phishing scam where commuters were being sent unpaid toll text messages. An X user[tweeted](https://twitter.com/campisi%5Fanthony/status/1561271659486531584)about an SMS phishing text where the threat actors sent out text messages by imitating the identity of City Link- a Melbourne-based toll service provider. One year down the line, another X user based in WA or Western Australia tweeted about a somewhat [similar scam](https://bc.ctvnews.ca/mobile/north-vancouver-resident-loses-nearly-5k-through-smishing-scam-1.6834441?cache=ihcaobeag?ot=AjaxLayout). _He mentioned getting multiple unpaid toll text messages. But he immediately knew that it was a scam. This is because WA doesn’t have any tolls on their roads._ ![Phishing definition](https://media.mailhop.org/phishprotection/images/2024/04/phishing-definition-4121.jpg) ### How To File A Complaint If An Unpaid Toll SMS Ends Up In Your Inbox! The FBI has sent out a crystal clear message against the [cybercriminals](/phishing/cybercriminals-are-duping-millions-of-accounts-in-the-latest-facebook-phishing-campaign). They want the US citizens to **act vigilantly and report** against the threat actors every time they or their acquaintances receive a fraudulent smishing message. Here’s how you can do so: Visit the official website of IC3 ([www.ic3.gov](http://www.ic3.gov)). **Mention the phone number** from which you received the unpaid toll text message. Visit the legitimate website of the toll service provider. Note down the customer care number of the toll service provider. - \_ Call them and explain everything about the SMS you have received. Then, **delete the fraudulent text message** from your phone. Avoid clicking on the [malicious link attached to the SMS](https://thehackernews.com/2024/04/chinese-linked-lightspy-ios-spyware.html) at all costs ### Modern Technology- A Double-Edged Sword! Technology is supposed to make our lives simpler and better. And it has done so to such a great extent. However, cybercriminals too, have been in the race to **leverage advanced technology.** And that’s why more and more people should be aware about the [different types of cybercrimes](https://www.indiancybersquad.org/cyber-crime-types) happening around them. The sudden surge of unpaid toll [phishing scams in the US](https://www.cbsnews.com/news/online-fraud-losses-detection-social-media/) and the ripples it has caused across the FBI departments is a testament to the fact that threat actors have once again **bypassed security services** to access sensitive details of users. The classic SMS phishing emphasizes the significance of [phishing awareness training](/products/phishing-awareness-training) campaigns and [digital literacy](https://en.wikipedia.org/wiki/Digital%5Fliteracy). And the worst part about such [cybercrimes](/phishing-awareness/phishing-smishing-vishing-cyber-attacks-you-must-be-aware-of) is that they take place on a global scale and affect a **HUGE chunk of society**. So, if you are a commuter who travels daily from home to work and vice versa, then you need to pull up your socks now! \_Only your [awareness can prevent](/phishing-awareness/why-is-phishing-awareness-training-important-for-employees) them from breaking into your bank. \_ Even if you are a regular offender and have outstanding toll fees, you also need to check the status by connecting with the **official toll service providers**. If you click on the malicious link by mistake, **immediately change all the passwords** and usernames, and report the incident at IC3 at the earliest, while staying vigilant with [phishing protection](/) measures. ## Topics [ Phishing ](/tags/phishing/) ![Brad Slavin](https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager Founder and General Manager of DuoCircle. Product strategy and commercial lead across DuoCircle's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Protect your inbox from phishing attacks Real-time email security with 60-day free trial. No credit card required. [Start Free Trial](https://portal.duocircle.com/cart.php?a=add&pid=101&brand=phishprotection) [View Pricing](/pricing/) ## Related Articles [ Foundational 5m 0ktapus, Okta Breach Helps Attackers Launch Sophisticated Supply Chain Attacks Sep 5, 2022 ](/blog/0ktapus-okta-breach-helps-attackers-launch-sophisticated-supply-chain-attacks/)[ Foundational 4m 13 Spear Phishing Attacks Examples To Justify Investment For Phishing Prevention Solutions In Your Organization Aug 1, 2019 ](/blog/13-spear-phishing-attacks-examples-to-justify-investment-for-phishing-prevention-solutions-in-your-organization/)[ Foundational 4m All 14 centers of Kettering Health were affected by a massive ransomware attack, Major outage in the Ohio medical center May 23, 2025 ](/blog/14-centers-of-kettering-health-were-affected-by-massive-ransomware-attack-in-ohio-medical-center/)[ Foundational 4m 2021 Phishing Trends You Need To Be Wary Of Aug 2, 2021 ](/blog/2021-phishing-trends-to-be-wary-of/) ```json {"@context":"https://schema.org","@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"Phish Protection","url":"https://phishprotection.com","description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"That Unpaid Toll Text Message Can Render Your Bank Empty!","description":"That Unpaid Toll Text Message Can Render Your Bank Empty!: emailsecurity · That Unpaid Toll Text Message Can Render Your Bank Empty! Commuting from one place.","url":"https://phishprotection.com/blog/that-unpaid-toll-text-message-can-render-your-bank-empty/","datePublished":"2024-04-20T13:23:58.000Z","dateModified":"2026-04-17T15:43:10.000Z","dateCreated":"2024-04-20T13:23:58.000Z","author":{"@type":"Person","@id":"https://phishprotection.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://phishprotection.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/phishprotection/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"Phish Protection","url":"https://phishprotection.com","logo":{"@type":"ImageObject","url":"https://phishprotection.com/images/phishprotection-logo.png"},"description":"Advanced phishing protection and email security for businesses. Real-time threat defense, time-of-click protection, and seamless Office 365 integration.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://github.com/duocircle"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://phishprotection.com/contact/"},"knowsAbout":["Phishing Protection","Email Security","Anti-Phishing","Business Email Compromise","Ransomware Protection","Time of Click Protection","Office 365 Email Security","Advanced Threat Defense"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://phishprotection.com/blog/that-unpaid-toll-text-message-can-render-your-bank-empty/"},"articleSection":"foundational","keywords":"Phishing","wordCount":1064,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/phishprotection/images/2024/04/Phishing-Statistics-Latest-Figures.jpg","caption":"Phish Protection blog post image","width":1200,"height":630},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"FAQPage","mainEntity":[{"@type":"Question","name":"When and How Did This Start In The US?","acceptedAnswer":{"@type":"Answer","text":"The unpaid toll scam started back in"}},{"@type":"Question","name":"Why Does Unpaid Toll Scam Seem So Convincing?","acceptedAnswer":{"@type":"Answer","text":"SMS phishing has never disappointed [threat actors](https://www.thestar.com.my/news/nation/2024/04/19/upswing-in-sms-scams-says-bukit-aman). It has always been effective in robbing innocent people’s **hard earned money**. Similar is the case with the latest unpaid toll scam as well!"}},{"@type":"Question","name":"Which States Are Facing Imminent Smishing Threat?","acceptedAnswer":{"@type":"Answer","text":"FBI is acting tight-lipped when asked about the specific states under a [smishing attack](https://www.techbusinessnews.com.au/news/linkt-branded-toll-road-scams-on-the-rise-despite-telco-sms-scam-measures/). However, social media is replete with posts related to unpaid toll scams in Pennsylvania...."}}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://phishprotection.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://phishprotection.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://phishprotection.com/foundational/"},{"@type":"ListItem","position":4,"name":"That Unpaid Toll Text Message Can Render Your Bank Empty!","item":"https://phishprotection.com/blog/that-unpaid-toll-text-message-can-render-your-bank-empty/"}]} ```