The FTC confirmed in May that a single text message, claiming twelve dollars in unpaid tolls, has become the fastest-growing government impersonation fraud in the country. One fraud-restoration firm logged a 104 percent jump in victims this year alone.
Risk Score: 5/5
The Offense
It is a text message, nothing more, claiming you owe a small unpaid toll balance and threatening a late fee, a suspended registration, or worse if you do not pay immediately through a link. The agency named in the message is real. The text is not. Every toll authority in the country has now confirmed, on the record, that none of them send payment demands by SMS.
Red Flags
- A text claiming to be from a toll agency such as E-ZPass, FasTrak, SunPass, or a state turnpike authority, requesting payment through a link
- A specific, oddly precise dollar figure, commonly cited around twelve dollars and fifty-one cents, designed to feel too small to question
- A threat of late fees, legal action, or a suspended license attached to a routine toll notice
- A link that does not match the toll agency’s actual domain, often close enough to pass a glance
Modus Operandi
The text arrives cold, to a number picked at random, with no connection to whether you actually drive, own a car, or hold a toll account at all. It names a real agency, borrows its branding, and manufactures urgency in a single line: pay now or face a penalty. The link routes to a cloned payment page built to harvest a card number, an address, and often a Social Security number under the guise of “identity verification.” Behind the operation sits organized infrastructure, not a lone actor. Investigators tracing these campaigns have connected clusters of them to smishing kits sold and reused across multiple criminal groups, which is why the exact same twelve-dollar-and-fifty-one-cent figure keeps showing up in unrelated states. The FBI’s IC3 logged more than 60,000 complaints tied to this single tactic in its first year alone, and the number has only grown since. AI text generation has since made the messages more convincing and far cheaper to send at volume, personalizing wording and timing without any real added cost to the people running it.
Law
This is prosecuted as wire fraud under 18 U.S.C. Section 1343, and where the message impersonates a government entity specifically, additional identity-fraud statutes apply on top of the underlying fraud charge. The FTC pursues civil enforcement under the FTC Act for the deceptive impersonation itself, running parallel to any criminal case the Justice Department brings. Because the campaigns route through disposable numbers and offshore infrastructure, prosecutions to date have focused less on individual senders and more on dismantling the smishing kits and payment-harvesting sites that power dozens of campaigns at once.
Prevention
No toll agency in the United States sends a payment demand by text message, full stop. Every major toll authority, from E-ZPass to SunPass to FasTrak, has confirmed this directly and repeatedly. Treat any text claiming otherwise as fake before reading past the first line, not after clicking through to check.
What to Do
Do not click the link, under any circumstance. Delete the message, or better, report it by forwarding to 7726 (SPAM), which routes it to your carrier’s fraud detection system. If you already clicked and entered payment or personal information, contact your bank immediately to flag your card, freeze your credit through all three bureaus, and file a report at the FBI’s Internet Crime Complaint Center, ic3.gov, along with a complaint to the FTC at reportfraud.ftc.gov. If you have any doubt about a genuine toll balance, check it directly through your toll agency’s official app or website, never through a link a text message provides.
Forensic Analysis and Intelligence
What makes this fraud category distinct from typical phishing is its indifference to the target. Most fraud narrows in on a plausible victim, someone likely to have a bank account, a job, an aging parent. Toll smishing does not bother. The messages go out to numbers with no known connection to tolling at all, which tells investigators the economics work on volume alone: send enough texts, and a small enough fraction clicking through still nets real money at scale. That same infrastructure, disposable numbers, cloned payment pages, AI-personalized text, is increasingly reused across other impersonation categories, meaning a toll text today and a fake delivery notice or a fake court summons next month may trace back to the identical criminal operation running different branding on the same machinery.
Why This One Keeps Winning
Toll smishing succeeds where more elaborate fraud fails precisely because it asks so little. Twelve dollars does not trigger the same caution a request for thousands would. It reads as routine, almost forgettable, exactly the kind of message a person pays without a second thought between two other tasks. The FTC’s confirmation in May that this is now the fastest-growing form of government impersonation fraud in the country is not a signal that the tactic has gotten more sophisticated. It is a signal that low-friction, high-volume fraud is winning against attention spans stretched thin by exactly this kind of routine, forgettable request, and that the next version of this attack will look just as boring as the last one.
ForensicTimes · forensictimes.com · Global Investigative Journalism on Crime, Justice, and Forensic Science · This report reflects verified open-source and wire reporting current as of publication. © 2026 ForensicTimes. All Rights Reserved.
