The text arrives without warning: “You owe $6.99 in unpaid tolls. Pay now to avoid additional fees.” It includes a link, a logo that looks like it belongs to EZ-Pass or SunPass, and just enough urgency to make you tap before you think. That is exactly what the scammers are counting on.
In a May 2026 consumer alert, the Federal Trade Commission confirmed that reports of government imposter scams jumped 40% in early 2025, with fake toll-payment texts identified as a primary driver. The agency described a nationwide wave of smishing messages that copy real toll-agency branding and route recipients to phishing sites designed to harvest credit card numbers, bank credentials, and personal identifiers like driver’s license numbers.
The financial damage is enormous and accelerating. Government imposter scams cost Americans $789 million in 2024, up from $618 million the year before, according to FTC data released in March 2025. That $789 million sits inside a record $12.5 billion in total reported fraud losses for the year, a 25% increase over 2023. And because the FTC has long acknowledged that most fraud goes unreported, the actual totals are almost certainly larger.
One important distinction: the 40% spike covers all government imposter scams, not toll texts alone. The FTC has not published a standalone count of toll-related complaints. But the agency singled out fake toll messages as the fastest-growing variant within the category, which is why the scam is drawing attention from federal and state officials simultaneously.
Why a $6.99 toll text is more dangerous than a fake IRS call
The scam works because it exploits something boring. Millions of drivers routinely rack up small, forgettable toll charges. A text about a $6.99 balance does not set off the same alarms as a phone call claiming you owe the IRS $5,000. The amount feels plausible, the sender looks official, and the late-fee warning creates just enough pressure to short-circuit skepticism.
The phishing links lead to convincing replicas of official toll-agency websites, complete with logos, payment forms, and data fields requesting far more personal information than any real toll transaction would ever need. Once a victim enters their details, scammers can drain bank accounts, open fraudulent credit lines, or sell the stolen data on dark-web marketplaces.
What makes the campaign especially brazen is its geographic sloppiness. Michigan Attorney General Dana Nessel warned consumers in August 2024 about smishing texts using SunPass branding and late-fee threats. SunPass is Florida’s toll system. Michigan does not operate it. Scammers blast these messages indiscriminately across area codes nationwide, betting that confusion and a sense of urgency will do the rest.
State and federal officials are raising alarms coast to coast
The warnings are not coming from a single region. Multiple state attorneys general and transportation departments have issued public advisories about toll-text phishing since mid-2024, with alerts documented in states including Michigan, New York, and others that do not even operate the toll systems being spoofed. The pattern is consistent: officials urge residents not to click links in any unsolicited text that claims to collect toll payments.
Federal law enforcement is paying attention, too. The FBI’s Internet Crime Complaint Center published a public service announcement in March 2024 specifically about toll-related smishing, urging consumers to report suspicious messages and avoid interacting with embedded links. That the FBI flagged the scheme more than a year ago, and the volume has only grown since, underscores how difficult these campaigns have been to shut down.
What remains unclear
Despite the volume of warnings, key questions are unanswered. The FTC’s Consumer Sentinel database tracks complaints by category and contact method but has not published a demographic breakdown showing which age groups or regions are hit hardest by toll-text scams specifically. There is also no public evidence of a coordinated federal-state enforcement operation targeting the people behind these messages, and no arrests have been publicly announced.
A secondary problem is emerging as well. As fraud alerts multiply, some drivers may begin ignoring legitimate notifications about low toll balances or unpaid charges, risking real late fees. Toll agencies have tried to clarify that they do not send payment demands by text with embedded links, but it is unclear whether that message is reaching enough people.
How to protect yourself right now
The FTC and state agencies agree on a core set of steps:
- Do not click links in unsolicited toll texts. No legitimate toll agency will demand immediate payment through a text-message link.
- Verify your balance independently. Log in to your toll account through the official website or app, or call the agency’s customer service number directly.
- Report the message. Forward suspicious texts to 7726 (SPAM), which routes them to your wireless carrier. You can also file a complaint with the FTC at ReportFraud.ftc.gov or with the FBI’s IC3 at ic3.gov.
- If you already clicked or entered information, contact your bank or credit card company immediately to flag the compromised accounts. Change passwords on any accounts that share the same credentials, and consider placing a fraud alert or credit freeze through the three major credit bureaus (Equifax, Experian, TransUnion).
The toll-text playbook mirrors decades of government imposter fraud
The toll-text wave fits a broader pattern that has exploited the IRS, Social Security Administration, and local courts for years. The playbook stays the same; only the hook changes. Scammers rotate through whichever agency or service feels most routine and least suspicious to the widest number of people. Right now, that is the small toll charge you half-remember possibly owing.
The FTC’s numbers make the trajectory clear: this category of fraud is growing faster than nearly any other, and the losses run into the hundreds of millions. Whether enforcement can catch up to a campaign that costs almost nothing to run and reaches millions of phones in a single blast remains the open question heading into the second half of 2026.
