Don’t Get Tolled By Text!

FIT Information Technology Information Security

The FBI has recently warned of a prolific smishing campaign (think phishing, but through text messages) that uses road toll collection as a pretext to trick victims into handing over their personal information and money. This scam, which has been ongoing since March 2024 and has already been spotted in at least three states, uses text messages to impersonate legitimate toll services. Read the full FBI advisory here

Here’s how it works: The text message claims you have an outstanding toll amount, usually around $12.51, and threatens a late fee if you don’t settle it immediately. It then provides a fake link that looks like the official website of your state’s toll service (like “https://myturnpiketollservices.com“) to “settle your balance.”

Red flags galore! Here’s how to spot a fake toll text:

  • Generic language: The text mentions an outstanding toll amount but doesn’t specify the location or details of the supposed toll.
  • Suspicious urgency: It creates a sense of panic by pressuring you to pay immediately to avoid a late fee.
  • Phony link: The provided link looks similar to a real toll service website but leads to a fake site designed to steal your information.

So, what should you do if you receive a suspicious toll text?

  • Don’t click the link! It could download malware or redirect you to a malicious website.
  • Verify your account: Head to the official website of your toll service and check your account for any outstanding tolls.
  • Report the scam: Head over to the FBI’s Internet Crime Complaint Center (IC3) (https://www.ic3.gov/) and report the text message, including the phone number and website listed.

These scams are a reminder that staying safe on the road goes beyond fastening your safety belt. 

About Cybersafe

The Division of Information Technology is dedicated to protecting the FIT community from the latest cybersecurity threats by providing warnings and creating awareness through training and information-sharing. Visit fitnyc.edu/cybersafe for more information. And stay tuned for emails from [email protected] for the latest from the Cybersafe campaign at FIT.

Read past issues here.

Footer