Scam library · Texts
E-ZPass unpaid toll text scam
A text says you have an unpaid toll, usually a few dollars, and warns of a late fee or a suspended license if you don't pay today. The link leads to a convincing copy of a toll payment page.
The toll is not the point. The scammers want your card number, and often your name, address and a one-time code so they can add your card to their own phone wallet.
What the message looks like
From: +44 7700 900123 (an unknown number)
E-ZPass: We've noticed an outstanding toll of $6.89 on your record. To avoid a $50.00 late fee and DMV suspension, pay by today:
ezpass-tollservice[.]top/pay
Reply Y, then reopen this message to activate the link.
How this scam works
These texts are sent in huge waves from rotating numbers and email addresses, so blocking one sender does little. The FBI's complaint center reported more than 2,000 complaints in the first weeks of the wave in 2024, and noted the scam moving from state to state with almost identical wording. In March 2025, FBI Atlanta said complaints about fake Peach Pass texts jumped to 1,573 in a single month.
The fake site usually asks for your card, then a verification code. That code is often the bank's code for adding your card to Apple Pay or Google Pay on the scammer's phone. Once it's added, they can spend with it in stores.
People who don't drive toll roads get these too, and so do people in states without toll roads. That alone tells you the sender is guessing.
Red flags
- A small balance plus a big late fee or a license threat, due today.
- A link that isn't your toll agency's real website, often ending in .top, .xin, .info or similar.
- The sender is a random phone number, an email address, or a number from another country.
- It asks you to reply Y or copy the link into your browser. That's a trick to get around your phone's link protection.
- The payment page asks for a code that was just texted to you.
How to tell it’s fake
- Don't use the link. Type your toll agency's address yourself, or open its app, and check your account.
- Toll agencies mail invoices for real unpaid tolls (pay-by-plate). If nothing shows on your account, there's nothing to pay.
- If you don't have an E-ZPass or haven't driven a toll road, the text is fake.
What to do if you clicked, paid or shared info
Don’t panic, and don’t blame yourself. These scams are built by professionals. Act quickly, one step at a time.
If you clicked a link or called back
- Close the page. Don't enter anything else.
- Forward the text to 7726 (SPAM), then delete it. Report it to ic3.gov with the sender number and the web address.
If you paid
- Call your card issuer using the number on the back of your card. Say the card was used on a scam site and ask for a new card number.
- Ask the issuer to remove any wallet devices added in the last few days, and dispute the charge.
If you shared personal info, a password or a code
- If you typed in a one-time code, tell your bank right away: that code may have added your card to someone else's phone.
- If you entered your driver's license number or date of birth, consider a free credit freeze at Equifax, Experian and TransUnion.
Where to report and get help (U.S.)
If a message seems legit and you’re still not sure, get a second opinion before you act. Reporting helps stop scammers, even if money can’t be recovered. If you are in danger, call 911.
- Your bank or card issuer
Call the number on the back of your card or on your statement, not one from the message. Ask them to stop or reverse the payment and to watch the account. - Federal Trade Commission (FTC) · ReportFraud.ftc.gov
Report the scam and get a step-by-step recovery plan. - FBI Internet Crime Complaint Center (IC3) · ic3.gov
Report scams that happened online, especially if money was lost. Include phone numbers, websites and payment details. - AARP Fraud Watch Network Helpline · aarp.org helpline
Free, for anyone of any age: trained volunteers help you sort out next steps. 877-908-3360, Monday to Friday, 8 a.m. to 8 p.m. Eastern. - IdentityTheft.gov · IdentityTheft.gov
If you shared your Social Security number or someone opened accounts in your name.
How Gmork Scam Guard would warn you
When you open a lookalike toll payment page in Chrome or Edge on your computer, Scam Guard checks the address against what real toll agencies use and warns before you type your card. If a message you have open in Gmail or WhatsApp Web pushes an unpaid toll with a link, it flags the red flags and tells you how to check your account safely. If a message seems legit but you're not sure, that's exactly when to ask.
Scam Guard can miss things, so the checks above still matter. See what it warns about and what it keeps private.
Questions people ask
- Does E-ZPass text you about unpaid tolls?
- Some toll agencies send texts to customers who signed up, but they won't threaten a same-day late fee or ask you to reply Y to open a link. The safe move is always to ignore the link and check your account on the official website or app.
- I don't even have E-ZPass. Why did I get this?
- Scammers send millions of these to random numbers. Getting one doesn't mean you owe anything or that your data was stolen.
- I paid $6. Is that really a problem?
- Yes, because the scammers now have your full card details. Call your card issuer, get a new card number and ask them to remove any digital wallet devices you don't recognize.