Toll Road Scam Texts: Fake E-ZPass, SunPass, and TxTag Messages Explained

If you've received a text message saying you have unpaid tolls, you're not alone. The FBI, FTC, and state attorneys general across the country have issued urgent warnings about a massive wave of toll road phishing texts that has become one of the most common scams in the United States.

Here's what the text typically looks like:

E-ZPass Toll Services: Our records indicate your vehicle has an outstanding toll balance of $6.99. To avoid a $50.00 late fee, please settle your balance at: ezpass-payment-center.com

Or this variation:

SunPass Notice: You have an unpaid toll of $4.35 from 01/28/2026. Failure to pay within 48 hours will result in additional penalties. Pay now: sunpass-tollpay.net

These messages are fake. The FBI's Internet Crime Complaint Center (IC3) reported receiving over 2,000 complaints about toll road smishing texts in a single month, and the real numbers are likely far higher since most people don't file reports.

How the Scam Works

Mass Text Campaigns

Scammers use automated systems to send millions of texts impersonating toll agencies — E-ZPass (used across 19 states), SunPass (Florida), TxTag (Texas), FasTrak (California), I-Pass (Illinois), and others. They don't know if you actually use toll roads. They're betting that enough recipients do — and that anyone who recently drove on a toll road will think twice before ignoring the message.

The Phishing Site

The link leads to a website that mimics the real toll agency's payment portal. It often copies the official logo, color scheme, and layout closely enough to pass a quick glance. The site asks you to enter your full name, home address, vehicle information, and credit or debit card details to "pay" the outstanding toll.

Harvesting Your Information

The toll amount is always small — usually between $3 and $12 — because it feels inconsequential enough to just pay. But paying means handing over your card number, which scammers then use for fraudulent purchases, sell on the dark web, or use to set up recurring charges on subscription services you didn't sign up for.

Some versions also collect your driver's license number or the last four digits of your SSN, which enables more targeted identity theft.

Why This Is the Biggest Smishing Scam of 2025-2026

Several factors have made toll road scams explode in prevalence. Toll roads are increasingly common and use electronic tolling, so many drivers aren't sure exactly how billing works. The amounts are small enough to feel legitimate. Many people have experienced real toll billing confusion before. The scam works regardless of whether the victim uses toll roads — the fear of a penalty is enough to prompt action.

The scam has been so pervasive that E-ZPass, SunPass, TxTag, and other agencies have added prominent warnings to their websites and apps. The FBI issued a public service announcement specifically about this scam in early 2025, and state attorneys general in Florida, Texas, New York, Massachusetts, and Pennsylvania have all issued consumer alerts.

Red Flags to Watch For

1. Toll agencies don't send billing notices via text message. E-ZPass, SunPass, and most toll agencies communicate through their apps, physical mail, email (if you've opted in), or their online portals. They do not send unsolicited text messages demanding payment.

2. The link doesn't go to the official toll agency website. Real toll agency domains are easy to verify: ezpassny.com, sunpass.com, txtag.org, bayareafastrak.org, etc. Anything with extra words like "payment-center," "toll-pay," or "balance-update" in the URL is fake.

3. The message threatens late fees or penalties. Real toll agencies do charge late fees, but they don't threaten you via text message with a 48-hour deadline. They send multiple notices through official channels over weeks or months.

4. The text asks you to click a link to pay. Legitimate toll agencies direct you to their official website or app by name. They don't include clickable payment links in text messages.

5. You received the text from a regular phone number. Real toll agency communications come from verified short codes or through their official apps, not from random phone numbers with area codes from states you've never visited.

6. The dollar amount is suspiciously small. Scammers keep amounts between $3-$12 because they know you're more likely to "just pay it" without questioning whether it's real.

What to Do When You Get a Toll Road Scam Text

Do not click the link. No matter how legitimate it looks, don't tap or click the URL in the text.

Check your real toll account directly. If you have an E-ZPass, SunPass, or other toll account, log in through the official app or website by typing the URL directly into your browser. If you actually have an unpaid balance, it will show up there.

Report the text. Forward the message to 7726 (SPAM). File a complaint with the FBI's IC3 at ic3.gov. Report it to your state's attorney general.

Delete the text. After reporting, delete the message to avoid accidentally clicking the link later.

If you already clicked and entered information: Contact your bank or card issuer immediately to report potential fraud and request a new card. Change passwords for any accounts that use the same email/password combination. Monitor your credit reports for unusual activity. Consider placing a fraud alert or credit freeze.

How Toll Agencies Actually Communicate

E-ZPass: Billing happens through your online account at your state's E-ZPass website. Unpaid tolls generate a "Toll-by-Mail" invoice sent to the registered owner's address via physical mail. You can also check your account through the official app.

SunPass: Sends billing statements through the SunPass app or email if you've opted in. Unpaid tolls result in a physical "Toll-by-Plate" invoice mailed to the vehicle's registered address.

TxTag: Communicates through the TxTag app, your online account, and physical mail. They do not send payment demands via text message.

The pattern is the same across all toll agencies: official app, online account, or physical mail. Never unsolicited text messages with payment links.

---

Received a suspicious toll text? Don't click the link — paste it into our free scam scanner instead. Our tool analyzes the message for phishing patterns, checks the URL against known scam databases, and tells you instantly whether it's a scam.