The Unpaid Toll Text Scam Now Looks Like a Court Summons
Text messages demanding payment for unpaid tolls have been going out to drivers in every state with toll roads for more than a year, and state attorneys general in more than a dozen states are spending this spring telling drivers to ignore them.
The older version of the scam claims a small balance, threatens late fees or a suspended registration, and points to a payment link. A newer variant arrives styled as a court summons. It carries a case number, an official-looking seal, and a QR code the recipient is told to scan or face arrest. The court-summons version works because a case number, an official seal, and a threat of arrest carry more weight than a $7 unpaid balance.
Drivers who would have ignored the older version are more likely to scan a QR code that mentions a hearing. Tap the link or scan the code and a fake payment portal opens. The page captures credit card numbers and driver's license details. Some pages install spyware on your phone after the scan.
How to tell a real toll notice from a fake
No U.S. toll operator currently sends a text demanding payment for an unpaid toll. The Pennsylvania Turnpike's six-month pilot launching June 1, 2026 is the first program of its kind, with texts going only to existing Toll By Plate customers carrying a first-invoice balance and only through the collection contractor Transworld Systems Inc. (TSI).
Some operators do send opt-in account-management texts, like low-balance reminders from Washington's Good To Go! or statement alerts from E-ZPass states. These come from a published short code and address you by account. Any toll text asking you to tap to pay is a scam.
Press and hold any link to preview it before tapping. Real toll-operator URLs end in .gov or the operator's own domain (paturnpike.com, ezpassny.com, illinoistollway.com). A compressed link (bit.ly, tinyurl) or an unfamiliar address domain is a giveaway when it appears in a toll text.
Treat QR codes in toll-related texts as scams by default. No U.S. toll operator currently routes payments through scanned codes.
Court-summons styling, including case numbers, official-looking seals, and threats of arrest, pressures recipients to act quickly. Real toll-violation notices arrive by mail, never by text.
Generic greetings like "Dear Customer," odd small balances like $3.95 or $7.40, and deadlines of 24 hours or less are characteristic of the scam.
Verify any toll claim through the operator's official website. Find the URL through a search engine or a previous toll bill. Ignore the link in the text.
Look for follow-up texts from your DMV, your state court system, or your bank. Once a scam network has your number flagged as responsive, the same group often moves on to impersonating adjacent agencies.
What to do if you tapped the link or scanned the code
Call your bank and any card issuer if you entered payment details. Have them lock the card and dispute any charges that have already been posted.
Change the password on any account you logged into through the scam page. Email first, then anywhere you've reused that password. Turn on two-factor authentication everywhere it's offered.
Disconnect from Wi-Fi and run a full mobile antivirus scan. Remove any app you don't recognize.
Forward the text to 7726, the number U.S. mobile carriers use to block spam senders. File a complaint at the FBI's Internet Crime Complaint Center, ic3.gov, including the phone number the text came from and the URL or QR code destination. Submit a separate report at the FTC's ReportFraud.ftc.gov.
Report the impersonation to the toll operator named in the text and to your state attorney general's consumer protection office. Most state transportation departments and turnpike commissions host a dedicated fraud-reporting page.
Open an identity theft case at IdentityTheft.gov if you shared your driver's license number, address, or Social Security details. The site builds a formal record you can present as you recover your identity.
Lock your credit files at Experian, Equifax, and TransUnion. Each bureau takes about a minute to freeze online, and the freeze stays in place until you ask them to lift it.
Check your vehicle registration directly with your state DMV if the scam threatened suspension. Scam networks often follow up with secondary texts that impersonate the DMV, once they have your number.
How to tell a real toll notice from a fake
No U.S. toll operator currently sends a text demanding payment for an unpaid toll. The Pennsylvania Turnpike's six-month pilot launching June 1, 2026 is the first program of its kind, with texts going only to existing Toll By Plate customers carrying a first-invoice balance and only through the collection contractor Transworld Systems Inc. (TSI).
Some operators do send opt-in account-management texts, like low-balance reminders from Washington's Good To Go! or statement alerts from E-ZPass states. These come from a published short code and address you by account. Any toll text asking you to tap to pay is a scam.
Press and hold any link to preview it before tapping. Real toll-operator URLs end in .gov or the operator's own domain (paturnpike.com, ezpassny.com, illinoistollway.com). A compressed link (bit.ly, tinyurl) or an unfamiliar address domain is a giveaway when it appears in a toll text.
Treat QR codes in toll-related texts as scams by default. No U.S. toll operator currently routes payments through scanned codes.
Court-summons styling, including case numbers, official-looking seals, and threats of arrest, pressures recipients to act quickly. Real toll-violation notices arrive by mail, never by text.
Generic greetings like "Dear Customer," odd small balances like $3.95 or $7.40, and deadlines of 24 hours or less are characteristic of the scam.
Verify any toll claim through the operator's official website. Find the URL through a search engine or a previous toll bill. Ignore the link in the text.
Look for follow-up texts from your DMV, your state court system, or your bank. Once a scam network has your number flagged as responsive, the same group often moves on to impersonating adjacent agencies.
![Aura app on phone and tablet. Text: Hi Alex, 1 critical alert needs your attention. [CRITICAL] We found one of your passwords exposed on the dark web. Credit. Transactions. Vault. Online security.](https://cdn.prod.website-files.com/607724b2ae76e535db9552ff/66e7625e2414abaeaf5be6a7_Hero%20Devices_Devices%201.webp)
