Keep getting texts about an unpaid toll with a link. Is this a scam or do I actually owe something?

#1tomd52(Joined Jun 2025 · 15 posts)May 18, 2026, 8:14 am

Ok so I have now had THREE of these in a week and I am second guessing myself, which is annoying because I usually spot this stuff.

The text says I have an outstanding toll balance of a small amount, like under two of whatever currency, and that if I don't pay by a date "this week" there will be a late fee and it goes to a collections notice. There is a link. The sender is some long number I don't recognise, and one of them came from what looked like an email address turned into a text, which was weird.

Here is the part that got me. I DID actually drive on a toll road a couple of weeks ago, visiting my daughter, and I honestly can't remember if I paid the thing properly or if it was one of those cameras that bills you later. So my gut says scam but there is this little voice going "but what if it's real and I get a fee." I did not click yet. I just sat there staring at it.

Is anyone else getting these? Is it always fake or can it sometimes be a real toll they are chasing?

#2Grace H(Joined Mar 2025 · 31 posts)May 18, 2026, 11:37 am

You are not alone, I get one of these about every ten days, plus the "your package could not be delivered, update your address" version which is the exact same trick wearing a different coat.

The tell for me is always the link. Real toll accounts don't chase you by text with a link to type your card into. But I get why the toll one lands differently, because everyone has driven on a road at some point, so it feels like it could be yours.

#3quilterjean(Joined Sep 2025 · 22 posts)May 19, 2026, 7:52 am

I have to admit something. Last year I clicked one of these before I knew better, the package one, not the toll. I didn't type anything in, I just tapped the link and saw a page asking for card details and then I panicked and closed it.

I spent a whole day convinced I had infected my phone just by opening the page. Turns out the clicking wasn't the disaster I imagined, it was the typing that would have been. But I would still love to hear from someone who actually knows, because "I closed it fast" is not really a security plan, is it.

#4Dana WhitakerFraud examiner(Joined Feb 2025 · 89 posts)May 20, 2026, 9:26 am

tomd52 said:

my gut says scam but there is this little voice going but what if it's real and I get a fee

Short answer first, tomd52: treat every one of these as a scam and do not use the link, even if you genuinely have an electronic toll account. This pattern has a name, smishing, which is just phishing delivered by SMS, and toll and parcel notices are two of the highest volume scripts running right now. The number of these reported jumped enormously over the last two years, into the tens of thousands of complaints in some national tallies, and the real figure is far higher because most people just delete them.

Here is why it works and what actually distinguishes the fake from anything real. The messages are sent in huge blind batches to number lists, not to people the sender knows owe a toll. That is the whole game, and it is why quilterjean's version was a parcel and yours is a toll: same operation, different label on the day. The sender is spoofed or comes from a throwaway number or an email-to-text gateway, which is the "email turned into a text" thing you noticed. The link almost always points to a lookalike domain, a name close to a real toll brand but with an odd ending, and it leads to a page built only to harvest your card number, address, and sometimes a one-time code. If you want the fuller anatomy it is written up in smishing and QR code scams, and the reason your number is on a list in the first place is the unglamorous one covered in how scammers find and target you, which is data, not you specifically.

On the fear that pushes people to tap, which is the invented deadline. A genuine toll authority does not typically give you 48 hours before "collections" over a sum smaller than a coffee. That urgency, plus a link, plus a threat of a fee, is the skeleton. Real balances are dull and slow.

What quilterjean asked is the question I get most, so plainly: on a normal, updated phone, opening the page is far less dangerous than entering data into it. The card details and codes are the prize, and a page can't take those unless you type them. If you only tapped and closed, the sensible steps are to keep the phone updated and watch the linked accounts, not to assume infection. If you ever did enter card or login details, that is the point where you stop reading forums and contact your bank and change that password immediately, and there is an order of operations for that in the aftermath threads.

What I would do with the message in front of you: do not reply, not even STOP, because a reply just confirms a live number and can move you up the list. Do not click. If you want to know whether you actually owe that toll from your daughter's trip, open a browser yourself and type in the toll operator's address by hand, or use the number on a real statement, never the link or number in the text. Then forward the scam text to your carrier's spam reporting shortcode, which is 7726 (it spells SPAM) in a lot of countries, and delete it.

One honest limit: I can tell you the pattern, I cannot tell you the state of your specific toll account, and neither can anyone who messages you out of the blue claiming to. Check that through the operator directly.

#5Priya V(Joined Apr 2026 · 4 posts)May 24, 2026, 6:05 pm

The "don't even reply STOP" part is the bit nobody tells you. I had been dutifully replying STOP to all of them for months, feeling organised about it, and they only ever increased. That makes horrible sense now.

Quick question while a knowledgeable person is here: is forwarding to 7726 actually worth the two minutes, or does it vanish into a void? I do it but I always wonder if anything happens on the other end.

#6tomd52(Joined Jun 2025 · 15 posts)June 2, 2026, 1:40 pm

Update, and thank you all. I did the boring correct thing. Went to the toll operator's real site myself, typed it in, logged in, and my balance was a clean zero. The trip was already paid by the plate camera weeks ago, so the "you owe a toll" was pure fiction that just happened to land in a week I had actually driven one. Good timing on their part, that is all it was.

Forwarded the last two to 7726 and deleted the rest. Still get one now and then but they slide right off now that I can see the shape of it. Appreciate everyone, this thread genuinely stopped me tapping a link at a weak moment.