Scammers are impersonating road toll agencies nationwide in “SMiShing” text message scams to dupe individuals into handing over personal and financial information, a New Jersey agency reports.
The New Jersey Cybersecurity and Communications Integration Cell, which in April reported an uptick in unpaid road toll SMiShing, now says similar scams are targeting residents in other states, including Massachusetts, Connecticut, California, Maryland, Virginia and Washington, D.C.
The scammers tell their targets to pay a fictitious unpaid toll bill of $6.99 or face late fees. Other messages threaten revocation of the target’s driver’s license or legal action if the target does not pay immediately, NJCCIC says in a news release.
In a typical SMiShing scam cited in the release, the text message is made to appear it is from the real agency EZDriveMA through inclusion of a link referencing EZDriveMA.
“The link is already active,” the release states. “Therefore, users are advised not to reply ‘Y’ for yes or follow the further instructions to activate the link.”
Other scam messages impersonate the EZPass and FasTrak agencies through inclusion of a link referencing the real agencies. If the recipient clicks on the fraudulent link they may be directed to enter their personal and financial information, which goes to the scammers.
Scammers sometimes send multiple text messages to targets. The messages seem to be sent randomly since some recipients do not drive or own a car or have not traveled in the region where the fictional toll supposedly was incurred. The real toll agencies do not use text messages to send toll bills or requests for payment.
New Jersey officials offered these tips:
Don’t click links, respond to, or act on unsolicited text messages.
Confirm requests from senders by using contact information from verified, official sources.
Check your toll agency’s account by typing the official website URL into the browser or calling the agency’s customer service number.
Report SMiShing to the FTC, FBI’s IC3, and NJCCIC, and forward the message to 7726 (SPAM).
