close
close

New text message scam in Florida exacts unpaid tolls, FBI warns

play

It is not unusual for me to receive text messages with payment requests on my phone. Medical visits and prepayments, utility bill reminders, that kind of thing.

But I was immediately wary of a text message I received this week about my Sun Pass toll road payments.

“We noticed an outstanding toll charge of $12.51 on your file,” the text said. “To avoid a $50.00 late fee, go to https://sunpastollsservices.com to settle your balance.”

There are two problems with that. First, my Sun Pass account is automatically paid. Second, the SunPass site is sunpass.com.

This scam is called “smishing,” and this version of the texting scam is a new version that the FBI warned everyone about earlier this month. Tapping the link in the text will take you to a site similar to your toll service, including working links and the correct logo, but the payment part will be different.

What is smishing?

According to the FBI, smishing is a “social engineering attack that uses fake text messages to trick people into downloading malware, sharing sensitive information, or sending money to cybercriminals.”

‘Smishing’ is a combination of ‘SMS’ (‘short messaging service’, or what everyone now just calls SMS) and ‘phishing’. ‘Phishing’ is a more general term for sending fake messages to try to get you to reveal personal information such as credit card numbers or passwords.

Florida a ripe target for scammers: Online crime will cost Florida residents $844.9 million in 2022, FBI says, second highest in US

What is the Toll Road Smishing Scam?

The FBI has received more than 2,000 complaints from at least three states reporting text messages masquerading as toll collection services.

“ICI complaint information indicates the scam may be moving from state to state,” the release said. ICI is the FBI’s Internet Crime Complaint Center.

The text is always nearly identical, even down to the $12.51 amount, but the website address changes to a local toll service and the phone number has a state-appropriate area code. But if you tap the URL, you might lose money, personal identification information, or get malware on your phone (or all three).

What should I do if I receive a suspicious text message?

If you receive a text message asking for payment, always go to the service’s legitimate website instead of tapping the text message and check your account independently. In this case, go to your toll service’s website (not the one mentioned in the text) or call their customer service number and find out for yourself.

The FBI also suggests:

  • File a complaint with the IC3, www.ic3.gov, and be sure to include the following:
    • The telephone number where the text comes from.
    • The website mentioned in the text
  • Delete all received smishing text messages.
  • If you have clicked on a link or provided your information, please do your best to protect your personal information and financial accounts. Dispute unknown allegations.