The Unpaid Toll Text Scam: What It Is and What to Do

If you got a text saying you owe a small toll fee and need to pay right now to avoid penalties, it is almost certainly a scam. Real toll agencies do not collect past-due tolls by sending a text with a pay-now link to a random web address. Do not tap the link, do not enter your card, and delete the message.

At Getshure, we hear about this one constantly. It is cheap for scammers to send, it looks official, and the dollar amount is small enough that busy people pay without thinking. Below is the plain-English version of what is going on and what to do about it.

What the unpaid toll text scam looks like

The message usually arrives from a number or email address you do not recognize. It claims to be from a toll agency — E-ZPass, SunPass, FasTrak, The Toll Roads, TxTag, I-Pass, Peach Pass, or something similar depending on where you live or have driven recently. The wording is almost always the same:

• "You have an outstanding toll balance of $6.99."
• "Final notice: pay by [tomorrow's date] to avoid a $50 late fee and license suspension."
• "Please settle your toll immediately to avoid legal action."

Then there is a link. It almost never leads to a real state toll website. Instead, it goes somewhere like tollpay-notice.top, ezpass-billing.xyz, or sunpass-gov.help — domains that look a little like the real thing but are not.

Why it works

Three reasons this scam is winning right now:

1. The amount is tiny. $4.20, $6.99, $12.51. Small enough that you think, "Fine, I'll just pay it and move on."
2. The urgency is believable. Everyone knows late fees snowball. The threat of a suspended license pushes you to act before you think.
3. You probably drove through a toll recently. Even if you did not, most Americans have, and the brain fills in the gap.

The scammers are not trying to collect $6.99. They are trying to harvest your credit card number, your billing address, and sometimes your driver's license number. That is worth hundreds of dollars on the black market per victim.

How to tell a real toll notice from a fake

Real US toll agencies have a few things in common. Scam texts almost always break at least one of these rules.

Red flags that mean it's a scam

• You received it as a text, from a number you don't know. Most real toll agencies send bills by mail first, and their apps or online accounts show the balance.
• The link does not go to the agency's real .com, .gov or .org domain. Watch for strange endings like .top, .xyz, .help, .vip, .cc, .info, .shop.
• The sender email ends in something odd like "@mailservice.ru" or a long jumble of letters.
• The message threatens license suspension, legal action, or a court date for a toll that is a few dollars.
• Grammar is slightly off. Awkward capitalization, missing articles ("please pay toll immediately"), or odd punctuation.
• It asks for your full card, your SSN, or your driver's license number. Real agencies already have your account on file if you have a transponder.

Green flags that it might be real

• You have an active transponder account with that specific agency.
• You can log in to that agency's app or website (which you typed yourself, not tapped from the text) and see the same balance.
• The agency also has a phone number on the back of your transponder sticker or on prior mailed statements — and the balance matches when you call.

If in doubt, do not use any phone number or link from the text. Open a browser, type the toll agency's name in a search engine, and go to the official site yourself. Better yet, flip over your transponder or pull out an old mailed bill and use the phone number printed there.

What to do if you got the text but didn't click

Good. Keep it that way. Here is the clean process:

1. Do not reply — not even "STOP." Replying confirms your number is active and gets you more scam texts.
2. Report it. On iPhone, tap "Report Junk" below the message. On Android, long-press the message and choose "Report spam."
3. Forward the text to 7726 (SPAM). This is the free US carrier reporting line for AT&T, Verizon, T-Mobile and most others.
4. Report it to the FBI at ic3.gov. The FBI has specifically asked Americans to report toll smishing scams there.
5. Report it to the FTC at reportfraud.ftc.gov.
6. Delete the message.

What to do if you already clicked the link or paid

Do not panic, and do not waste time feeling foolish. These texts are designed to fool careful people. Move fast on these steps:

If you only tapped the link

1. Close the browser tab immediately. Do not enter anything.
2. Do not install any "toll app" or "security certificate" the page offers.
3. If you were on a work phone, tell your IT person.
4. Run your phone's built-in software update to make sure you are current.

If you entered your card number

1. Call your bank or card issuer right now using the number on the back of your card. Tell them you were phished and ask to cancel the card and get a new one.
2. Ask them to watch for pending charges and reverse anything that was not you.
3. Check your account for small "test" charges — scammers often run a $1 charge before a bigger one.
4. Turn on transaction alerts in your bank's app so every future charge pings your phone.

If you entered your driver's license number, address, or SSN

1. Go to identitytheft.gov and follow the step-by-step recovery plan. It is a free government site.
2. Place a free fraud alert or credit freeze with all three credit bureaus: Equifax, Experian, and TransUnion. Freezing is stronger than an alert and is free.
3. Pull your free credit reports at annualcreditreport.com and look for accounts you did not open.
4. If your driver's license number was shared, contact your state DMV about reissuing the number.

For a longer walkthrough, see our guide Just Got Scammed? What to Do in the First 10 Minutes and Identity Theft: What to Do, Step by Step With IdentityTheft.gov.

How to cut down on these texts going forward

You cannot stop scam texts entirely — the numbers are spoofed and new ones appear every day. But you can take the volume way down.

• Turn on your carrier's free spam filter. AT&T ActiveArmor, Verizon Call Filter, and T-Mobile Scam Shield all block a large chunk of junk texts automatically.
• On iPhone: Settings → Messages → turn on "Filter Unknown Senders." Suspicious texts go into their own folder.
• On Android: In Messages, tap your profile → Messages settings → Spam protection → turn it on.
• Do not post your phone number on social profiles, public resumes, or Facebook Marketplace listings.
• Get your number off people-search sites. Data brokers are where scammers buy lists of US phone numbers in the first place.

How the Getshure app helps with scam texts and calls

Handling every scam text one by one is exhausting. That is exactly why we built our protection plans around the Getshure app, which is included with every plan at no extra cost.

Here is what it does that directly helps with the toll text scam and the ones that come next:

• Scam Shield identifies likely scam and spam callers, helps you block robocalls, and lets you look up an unknown number before you call back.
• Data broker removal sends opt-out and removal requests to people-search and data broker sites that sell your phone number and address to scammers. Each site decides if and when it removes you, but fewer listings means fewer scam texts.
• Breach check tells you if your email or passwords have shown up in known data breaches — which is often how your number ended up on a scam list in the first place.
• Tracker blocking and safer browsing on public Wi‑Fi so sketchy links are less likely to load tracking junk even if you accidentally tap one.
• Phone security score that walks you through simple steps to lock your phone down more tightly.

No app blocks every scam — we will never tell you otherwise. But between Scam Shield and data broker removal, our plans do the tedious ongoing work for you so a fresh toll scam text is less likely to hit your phone next month.

On Android, you can get the app on Google Play. On iPhone, the download link is in your Getshure order confirmation email. See how to activate the Getshure app for step-by-step sign-in help.

The book: Don't Get Screwed by AI

Toll text scams are one chapter in a much bigger story. Scammers are now using AI to write more convincing messages, clone voices for follow-up phone calls, and build fake websites that look perfect. If you want the plain-English rundown of what is happening and how to stay ahead of it — without wading through tech jargon — our hardcover Don't Get Screwed by AI is written exactly for you.

It is $29, ships free on orders of $40 or more, and lands in 3–5 business days after shipping across the continental US. If it is not useful, our 30-day money-back guarantee has you covered. It is the kind of book you can hand to a parent, a spouse, or a neighbor who keeps getting hit by this stuff.

A quick checklist to keep on your phone

• Got a toll text? Assume it is a scam.
• Do not tap the link. Do not reply.
• Check your real toll account by typing the agency's name into a search engine yourself.
• Report the text: forward to 7726, then report at ic3.gov and reportfraud.ftc.gov.
• Delete it.
• If you already paid: call your bank, freeze your credit, and visit identitytheft.gov.

Why trust Getshure to help

You should not take any company's word for this stuff, including ours. So here is what you can verify today before you buy anything:

• Getshure is operated by MetaWise Enterprises, LLC, a Delaware company (file number 10336625). You can look it up on the Delaware state record.
• Our US address is 11772 W Sample Rd, Ste 103, Ofc 240, Coral Springs, FL 33065.
• Our phone is (754) 812-1679, Monday–Friday, 9:00 AM – 6:00 PM Eastern. A real person picks up.
• Email: contact@getshure.com.
• Every plan charge, renewal and add-on is covered by a 30-day money-back guarantee, no reason needed.
• You can cancel in one step — enter your order email, click one link, done. No phone call required.

If you want more background before buying, read Is GETSHURE Legit? Who We Are and How to Check Us.

Your next step

If toll texts are the first scam that has made it to your phone, it will not be the last. The easiest way to stay ahead is to let the Getshure app handle the ongoing work — scam call lookup, data broker removal, breach monitoring — while you get on with your life.

Pick a protection plan at getshure.com, grab the hardcover Don't Get Screwed by AI, or call us at (754) 812-1679 if you want to talk it through first. We would rather you ask questions than guess.