Fake Toll Texts: A Smishing Scam Targeting Californians
California drivers are being targeted by a text message scam that falsely claims they owe money for unpaid tolls. The texts often appear to come from FasTrak, the electronic toll collection system, and attempt to trick recipients into entering their banking or credit card information on a fraudulent website.
This type of scam is known as “smishing,” a term combining “SMS” (short message service) and “phishing.” Smishing attacks use fake text messages to deceive people into various malicious actions, including downloading malware, sharing sensitive information, or sending money to cybercriminals, according to the FBI.
The scam texts may appear to be from FasTrak and could be misspelled as FastTrak, to deceive drivers.
In January, California Attorney General Rob Bonta warned drivers of the increasing activity. The Federal Trade Commission (FTC) also issued a consumer alert, stating that scammers are pretending to be tolling agencies “coast to coast.”
What is Smishing?
Smishing is a form of phishing that takes place via text message. It involves criminals sending fake texts that appear to be from legitimate sources to trick people into taking actions that benefit the criminals. According to the FBI and the National Institute of Standards and Technology, phishing generally refers to attacks on the internet, email or websites that gets people to disclose sensitive or personal information.
According to online protection company McAfee, smishing messages often use urgent language to pressure people into immediate action to their detriment. This could lead to identity theft, credit card fraud, and stolen bank information, according to California Polytechnic State University, San Luis Obispo.
The FasTrak Scam
The fraudulent texts claim that consumers owe money for tolls and provide a link to a website for online payment. The goal is to deceive drivers into providing their banking and credit card details. Attorney General Bonta warned consumers that scammers have become skilled at mimicking legitimate companies and that text-based toll charge scams are prevalent.
FasTrak is the electronic toll collection system used on tolled bridges, lanes, and roads in California. It allows drivers to pay tolls electronically without needing to stop at toll booths.
Important: FasTrak does not request payment via text message with a link to a website.
The Transportation Corridor Agencies, operator of The Toll Roads in Orange County, recommends that accountholders verify valid text notifications by logging into their account at thetollroads.com or through The Toll Roads app. Toll Roads and other state tolling agencies do not send text messages to non-account holders.
What To Do If You Receive a Scam Text
If you receive a suspicious text message:
- Do not click on any links.
- File a complaint with the FBI, the Federal Trade Commission, or your state attorney general’s office, including the phone number and website mentioned in the text.
- Delete the scam text.
- Check your account using the toll service’s legitimate website.
- Secure your personal and financial accounts if you clicked a fraudulent link or shared your information and dispute any unauthorized charges.
Other Examples of Smishing Texts
Receiving a fake message about unpaid tolls isn’t the only type of smishing scam. Here are additional examples, according to McAfee:
- “We have detected unusual activity on your account. Please call this number to speak to a customer service representative.”
- “You have won a free gift card! Click here to claim your prize.”
- “Hi! We noticed that you’re a recent customer of ours. To finish setting up your account, please click this link and enter your personal information.”
- “Urgent! Your bank account has been compromised. Please click this link to reset your password and prevent any further fraud.”
- “Hey, it’s [person you know]! I’m in a bit of a bind and could really use your help. I sent you a link to my PayPal, could you send me some money?”
