A growing smishing scam is sweeping across the United States, targeting residents with deceptive text messages claiming unpaid tolls. Authorities warn these messages, appearing deceptively legitimate, are part of a scheme to steal personal information and money.
According to Danny Jenkins, CEO of ThreatLocker, a Central Florida-based cybersecurity firm, recipients may initially view these messages as harmless. "So, they might seem benign. Oh, I’m going on SunPass. I’m paying a toll. They need my driving license number. That seems reasonable, but it’s a scam," he explained. Jenkins and the Federal Trade Commission (FTC) caution users to be vigilant.
The scam's foundation lies within text messages prompting recipients to click links guiding them to fake but convincing websites closely mirroring real toll authorities. These deceptions have been rampant since the FBI first alerted the public last April, with over 2,000 complaints logged. Much of the recent warnings were reiterated by the FTC on January 17, emphasizing the dangers:
"Don’t click on any links in, or respond to, unexpected texts. Scammers want you to react quickly, but it’s best to stop and check it out," the FTC warned.
Reports of fraudulent text messages have emerged nationwide, reaching states like Massachusetts, North and South Carolina, Florida, Illinois, and even places without toll roads, such as Montana. For example, the city of Great Falls—home to over 60,000 residents—issued its warning, declaring:
"A few local people have recently received a text referring to their vehicle having an 'outstanding toll bill.' This is a SCAM and is not coming from the City of Great Falls. Please do not click the link in the message."
This elusive scam has prompted multiple local administrations and federal agencies to step up their alerts to avoid residents falling prey. For example, Massachusetts' Department of Transportation reassured its citizens: "EZDriveMA, the state’s toll collection system, will never request payment by text."
The Oklahoma Turnpike Authority (OTA) also issued grave warnings last week, with communications manager Lisa Shearer-Salim closely advising:
"Usually, you get some signs just by reading the message. If it doesn’t have the correct names or the correct URL, that's a dead giveaway…"
Social media has seen postings from many recipients sharing screenshots of these quirky, sometimes amusing, texts, demonstrating the sheer absurdity of receiving unpaid toll notifications when their states lack toll roads entirely. According to the rental car company Hertz, states including Arizona, Idaho, and Tennessee have no toll roads, yet their residents often receive these texts.
Jenkins warns these messages often lead victims to complete personal information like credit card details, driver’s license numbers, or even Social Security numbers. With the information obtained, cybercriminals can exploit victims even more dangerously on the dark web.
Cybersecurity expert Chris Krebs posits the involvement of Chinese cybercriminals behind this alarming rise of smishing attempts. Documented by researchers, phishing kits reportedly have become significant tools used by these perpetrators. Krebs noted:
"These phishing kits aim to collect sufficient information from victims to enable the addition of their payment cards to mobile wallets, allowing hackers to conduct transactions" on stolen identities.
Such fraudulent messages often strive to exploit rapid reactions from users, hence why the FBI advises verification through legitimate channels. The authorities urge the public to check their toll service accounts via official websites, rather than clicking any links included within text messages.
Individuals are highly recommended to report suspicious messages as junk or spam and delete them immediately. Preventative measures are key, as officials continue to warn about the pervasive nature of these scams.
With federal and local agencies joining forces to alert civilians, the need for awareness grows daily. Unfortunately, as the scam matures and diversifies, maintaining vigilance remains the best strategy for many against this devious threat.
This rising trend of fraudulent text messages impersonates toll authorities, shedding light on the dark underbelly of digital technology. By comprehending the nature of these scams and adhering to preventive measures, individuals can reasonably safeguard their sensitive information.