The "unpaid toll" text is a scam

Escudo guide · Updated July 2026

Why this one is everywhere

Over the last two years this became the single most reported scam text in the United States. The FBI Internet Crime Complaint Center said it was getting thousands of toll scam complaints in a single month, and states from coast to coast put out warnings. The reason is simple. Almost everyone drives, almost everyone has used a toll road at some point, and a bill for twelve dollars feels too small to argue with. That small, believable number is the whole trick.

The text is sent by the million to random cell phone numbers. The senders have no idea whether you drive, which state you live in, or whether you owe anything. They are betting that enough people will recognize the toll brand and pay on reflex.

What the text looks like

The wording changes week to week, but the shape stays the same:

• It names a toll service you might know: E-ZPass, SunPass in Florida, FasTrak in California, TxTag in Texas or I-Pass in Illinois.
• It claims a small unpaid balance, often something oddly exact like $12.51, and threatens a late fee, usually around $50, if you do not pay today.
• It carries a link that looks almost right but is not: something like ezpass-toll.top or sunpass-pay.info, never the agency's real address.
• It pushes urgency. "Final notice." "Your account will be suspended." "Avoid a penalty and DMV hold."

Tap the link and you land on a page that looks like the real toll site. It asks for your name, home address, license plate and then, the part they actually want, your card number. Some versions go further and try to pull a verification code from your bank so they can drain the account directly.

The tells, once you know them

1. Real toll agencies do not bill you by text with a link. They mail a paper invoice to the address on your vehicle registration, or they charge the card already on your account. A pay-by-text link is the giveaway.
2. The web address is wrong. E-ZPass in your state has one official site. A hyphenated look alike ending in .top, .info, .vip or .xyz is not it.
3. The math is designed to feel harmless. Nobody disputes twelve dollars. That is on purpose.
4. It arrived out of nowhere. If you do not even have a toll transponder, or you have not driven that road, there is nothing to owe.

What to do right now

1. Do not tap the link. Opening it is low risk on an iPhone, but the page only exists to get you to type your details. There is nothing useful on the other side.
2. Check the real balance yourself. If a small worry remains, open your toll agency's official app, or type the address you already know into your browser. Never reach it through the text.
3. Report the text. Forward it to 7726 (it spells SPAM) so your carrier can act on it, then delete it.
4. File a complaint at the FBI's IC3.gov and at the FTC's ReportFraud.ftc.gov. It takes two minutes and it feeds the data that gets these numbers shut down.

If you already entered your card

This is the moment that matters, and moving fast fixes most of it.

1. Call your bank now, using the number on the back of your card or inside your official banking app. Not any number from the text or the fake site.
2. Freeze or replace the card. Ask them to watch for charges and issue a new one. A card number stolen tonight often gets tested within hours.
3. Watch for the follow up. People who have your details often call next, posing as your bank's fraud team, to squeeze out more. Hang up and call the bank yourself. A real bank never minds you calling back.
4. Never move money to a "safe account". No bank ever asks this. Anyone who does is the scam.

If you typed a code that your bank texted you during all this, treat it as urgent and call the bank straight away. That code is a key to your account, and sharing it is the one step that lets someone in.

Why the fake looks so real

These pages are cloned from the genuine toll sites, logo and all, and the sender number is spoofed so it reads like an official short code. None of that costs the scammers much. The same kit gets reused across every state, swapping E-ZPass for SunPass for FasTrak depending on where the number lives. It feels personal and specific. It is neither. To see the machine behind it, read how SMS scam gangs actually operate.

Report it

• Forward the text to 7726 to flag it with your carrier.
• File a report at IC3.gov and at ReportFraud.ftc.gov.
• If you entered card or personal details and worry about identity misuse, IdentityTheft.gov walks you through a recovery plan.
• Keep the message as evidence until you have reported it. Do not delete it in a panic.

You are not the problem

This scam works on careful people on a busy day, precisely because the amount is small and the brand is familiar. Catching it and looking it up means you did the right thing. The people most at risk are the ones who never search, often our parents and grandparents, so it is worth a quick call to tell Mom and Dad that no toll agency texts a link to pay.

That is what the Escudo app is for: it helps filter known scam patterns on the iPhone and sets them aside before they are read, so a fake toll notice is less likely to reach you in the first place. It does not promise to stop every scam or judge any single message, and it cannot tell you whether one specific message is a real threat. Nothing is deleted, it is only moved to a junk folder, and your messages never leave your phone.

More guides

If the text claimed to be your bank instead, see the fake bank text. If it was about a held package, see the USPS package fee scam. And if you already tapped a link, read what to do after you clicked.