What you need to know
The FBI received thousands of complaints about texts claiming an unpaid road toll with a small balance and a late fee, linking to look-alike toll sites. Fleet drivers and staff who expense tolls should check balances only through the toll agency’s real website or phone line.
Potentially affected
Employees who drive company or personal vehicles for work, fleet and accounts-payable staff who handle toll accounts, and anyone receiving text messages on a work phone.
DSE recommendation
DSE recommends a simple rule for drivers and finance staff: never pay a toll from a text link, and verify any balance through the toll agency’s official site or number.
The FBI received thousands of complaints about texts claiming an unpaid road toll with a small balance and a late fee, linking to look-alike toll sites. Fleet drivers and staff who expense tolls should check balances only through the toll agency’s real website or phone line.
Source facts
The FBI’s IC3 alert on toll smishing reported that, since early March 2024, it had received over 2,000 complaints about texts posing as road toll collection services from at least three states, and that the scam may be moving from state to state. The texts claim an outstanding toll balance, threaten a late fee, and use almost identical language.
The links are created to impersonate the state’s toll service name, and the phone numbers appear to change between states.
The FBI suggests filing an IC3 complaint with the sending phone number and the website from the text, checking the account through the toll service’s legitimate website or customer service number, and deleting the texts. Anyone who clicked a link or entered information should secure their personal information and financial accounts and dispute unfamiliar charges.
Applicability
Use this in phishing awareness material and fleet procedures. The alert describes a 2024 campaign; the same pattern can appear with different amounts, agencies or delivery services.
DSE recommendation
DSE recommends a simple rule for drivers and finance staff: never pay a toll from a text link, and verify any balance through the toll agency’s official site or number. Keep the official toll account details in the fleet record so staff know where real notices come from, route toll charges through one accounts-payable process, and give employees an easy way to report suspicious texts on work phones.
Verification
Add a toll-text example to the next phishing exercise and confirm the fleet procedure lists the official toll accounts. Review reported smishing messages each quarter and update training examples with current versions.
Official reference
FBI Internet Crime Complaint Center — Smishing Scam Regarding Debt for Unpaid Tolls (PSA240412). Reviewed October 18, 2026.
Review the official source
FBI Internet Crime Complaint Center — Smishing Scam Regarding Debt for Unpaid Tolls (PSA240412) · Verified October 18, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE