A New Scam Targets Toll Road Users with Phishing Texts
A new scam is spreading across the United States, targeting toll road users with fake text messages claiming to be from toll road operators. The scam typically begins with a message claiming that the recipient has unpaid tolls and is at risk of being charged fines. To resolve the issue, the message asks for card details and a one-time password, which is then used to steal the victim’s money.
Security researchers believe that Chinese smishing groups are behind this scam, selling SMS-based phishing kits to thousands of scammers. These kits allow scammers to spoof toll road operators, making it easy for them to trick victims into sharing financial information.
The scam has already been reported across the United States, affecting users of toll systems in states such as Massachusetts, Florida, Texas, California, Colorado, Connecticut, and Washington. The phishing pages are designed to look like the genuine toll road operator’s website, making it difficult for victims to identify the scam.
To stay safe from this scam, it is essential to be vigilant and follow these simple steps:
1. Verify directly with toll operators: If you receive a message about unpaid tolls or fines, do not click on any links. Instead, visit the official website of your toll operator or contact their customer service directly to verify the claim.
2. Install strong antivirus software: Installing antivirus software can help protect your devices from malicious links and alert you to phishing emails and ransomware scams.
3. Do not share personal information: Never provide sensitive details like payment card information, Social Security numbers, or one-time passwords via text or unverified websites. Legitimate toll operators will not request such information through SMS.
4. Enable two-factor authentication (2FA): Use 2FA for your accounts whenever possible. This adds an extra layer of protection by requiring two forms of verification, reducing the risk of unauthorized access even if some details are compromised.
5. Be wary of urgency in messages: Scammers often create a sense of urgency, claiming immediate action is required to avoid penalties. Take a moment to assess the situation and verify the legitimacy of the message through official channels.
6. Report suspicious messages: If you suspect a phishing attempt, report it to the Federal Trade Commission or the FBI’s Internet Crime Complaint Center. Include details like the sender’s phone number and any links in the message. Additionally, inform your mobile carrier to help block similar scams.
7. Use a personal data removal service: Consider using a reputable data removal service to reduce your online footprint and minimize the risk of scammers obtaining your personal information. These services can help remove your data from various data broker sites, making it harder for scammers to target you with personalized scams.