If you got a text message urging you to pay tolls through a linked website, watch out — it’s almost certainly a scam.
“The Massachusetts Department of Transportation (MassDOT) was alerted that a text message-based scam, also known as smishing, is fraudulently claiming to represent tolling agencies from across the country,” the agency wrote in an emailed warning. “The scammers are claiming to represent the tolling agency and requesting payment for unpaid tolls.”
The department’s advice is simple: “Customers who receive an unsolicited text, email, or similar message suggesting it is from EZDriveMA or another toll agency should not click on the link.”
The FBI says a typical scam text would look like this: “(State Toll Service Name): We’ve noticed an outstanding toll amount of $12.51 on your record. To avoid a late fee of $50.00, visit https://myturnpiketollservices.com to settle your balance.”
MassDOT says that targeted phone numbers appear to be chosen at random and are not necessarily subscribers to Massachusetts’ EZDrive toll system or any other state’s equivalent program.
“MassDOT urges customers to be cautious about email, text, and phone scams demanding payment of outstanding toll balances,” the warning states. “Some attempts have been made to trick customers into sharing credit card numbers and other sensitive information by directing them to a website to pay their outstanding balances.”
MassDOT says that EZDriveMA will never send invoices or request payment through text message and if the program does ever send a text, the web address will include EZDriveMA.com and no other domain.
This type of scam is known as “smishing,” which is a portmanteau of “phishing” — which is the umbrella term for any cons attempting to get targets to download malware, share sensitive information or pay money — and SMS, or “short message service,” which is a common texting protocol, according to the FBI.
The FBI Internet Crime Complaint Center, or IC3, states that it has received thousands of reports of smishing scams since March of last year. Those who have been targeted by a scam can report it at IC3.gov.