Fake Toll Messages Are Flooding Phones In A Nationwide Scam

Forbes - Apr 6th, 2025
Open on Forbes

A sophisticated phishing campaign is targeting mobile users across the U.S. by impersonating trusted toll agencies like E-ZPass and FasTrak. Victims receive text messages that appear as official toll notices, warning of unpaid tolls and potential fines. These messages urge immediate payment via links to fake toll payment pages designed to steal personal and financial information. The scam is notable for its intensity, with some users receiving up to seven messages daily from random email addresses, allowing them to bypass spam filters. The campaign leverages features in Apple's iMessage and Android's RCS messaging systems, exploiting vulnerabilities to increase the likelihood of user interaction.

This phishing wave is believed to be driven by professional phishing-as-a-service (PhaaS) operations such as Lucid and Darcula, which provide comprehensive kits for launching large-scale scams. These platforms offer tools like web hosting, SMS delivery systems, and fake landing pages, making it easier for criminals to conduct organized attacks. As cybercrime becomes more professionalized, these scams become more widespread and harder to detect. The trend highlights a shift towards multi-platform phishing attacks, with smartphones being a primary target due to their central role in daily activities. Users are advised to remain cautious, employ security measures, and report suspected scams to relevant authorities to help curb the spread of such campaigns.

Story submitted by Fairstory

RATING

7.0
Fair Story
Consider it well-founded

The article provides a comprehensive overview of a current phishing scam, effectively educating readers about the tactics used by scammers and offering practical advice for protection. It excels in clarity, timeliness, and public interest, making it a valuable resource for readers seeking to understand and mitigate the risks of mobile phishing scams. However, the article could be improved by incorporating direct citations from authoritative sources, which would enhance its accuracy and source quality. Additionally, engaging with a broader range of perspectives, including those of law enforcement and cybersecurity experts, would provide a more balanced view and potentially increase its impact. Overall, the article is informative and relevant, but it would benefit from greater transparency and source attribution.

RATING DETAILS

8
Accuracy

The story is largely accurate in describing the widespread phishing campaign targeting mobile users by impersonating toll agencies. It accurately details the methodology used by scammers, such as using urgency and mimicking legitimate toll payment pages. The mention of phishing-as-a-service operations like Lucid and Darcula aligns with known trends in cybercrime professionalization. However, the story could benefit from additional verification regarding the scale of the campaign and the specific involvement of these PhaaS operations. The text would be more robust if it included direct citations from official sources or cybersecurity experts to support these claims.

7
Balance

The article provides a thorough overview of the phishing scam, focusing on the techniques used by scammers and the potential impact on victims. However, it lacks perspectives from law enforcement or toll agencies, which could provide a more balanced view of the efforts being made to combat such scams. Including insights from cybersecurity professionals about the broader implications of phishing-as-a-service would also enhance the balance of perspectives.

9
Clarity

The article is clearly written, with a logical flow that guides the reader through the details of the phishing campaign. The language is straightforward, and the structure effectively breaks down the scam's methodology, impact, and potential countermeasures. The use of specific examples, such as the example scam text, helps to illustrate the points made and aids in reader comprehension.

6
Source quality

The article does not explicitly cite sources or provide direct quotes, which affects the assessment of source quality. While the information aligns with general knowledge about phishing scams and cybercrime trends, explicit references to studies, experts, or official statements would improve the credibility and reliability of the content. The inclusion of such sources would help substantiate the claims made about the phishing campaign and the involvement of specific PhaaS operations.

5
Transparency

The article lacks transparency in terms of source attribution and the basis for its claims. It does not disclose how the information was obtained or provide links to supporting evidence. This absence of transparency makes it difficult for readers to assess the validity of the claims. Providing more context about the sources of information and any potential conflicts of interest would enhance the transparency of the article.

Sources

  1. https://www.caranddriver.com/news/a64255409/toll-roads-text-scam/
  2. https://www.axios.com/local/seattle/2025/03/19/toll-bill-scam-fake-texts-wsdot-good-to-go
  3. https://consumer.ftc.gov/consumer-alerts/2025/01/got-text-about-unpaid-tolls-its-probably-scam
  4. https://www.thecsb.com/got-a-text-about-unpaid-tolls-its-probably-a-scam/