Skip to content

Companies

E-ZPass scams: how the fake messages work

An E-ZPass scam is a fraudulent smishing campaign where cybercriminals send unsolicited text messages claiming recipients have unpaid road tolls or late fees. These messages typically urge victims to click a malicious link and enter personal and financial information into a fake payment portal. E-ZPass and state toll agencies never request payment or sensitive data via text message.

Last reviewed: August 9, 2026  ·  Drafted with AI assistance. Every figure on this page was checked against the source cited for it. Not yet reviewed by a human editor.

ScamPreventionGuide is an independent consumer-protection resource. We are not affiliated with, endorsed by, or sponsored by E-ZPass. Company names and trademarks are the property of their respective owners and are used here only to identify the companies that scammers impersonate.

01

Is the E-ZPass message real?

Official communications regarding valid account issues or replenishment are conducted via postal mail notices or secure authenticated online account portals. Regional E-ZPass agencies never send SMS text messages or emails demanding immediate payment of unpaid tolls, nor do they request sensitive personal information (such as full credit card numbers, Social Security numbers, or banking PINs) via text links.

In April 2024, the Federal Bureau of Investigation (FBI) reported receiving more than 2,000 complaints reporting scams representing road toll collection services across at least three states. By the close of 2024, the FBI's IC3 recorded 59,271 total complaints related to toll and shipping smishing scams nationwide.

02

Which versions are in circulation?

The versions in circulation, and what each one is after:

VersionHow it reaches youWhat it wants
Toll Violation Smishing (Unpaid Balance)SMSCredit card details, billing address, and bank credentials entered into a phishing portal
State Toll Agency / DMV Enforcement ThreatSMSPersonal Personally Identifiable Information (PII) and credit card harvesting
Court Summons Toll Arrest ThreatSMS / MMSImmediate wire transfer, gift card payment, or fraudulent payment authorization
Reply 'Y' Security Bypass ScamSMSUser interaction bypassing mobile carrier automated SMS phishing filters
03

How can you tell a real message from a fake one?

The differences you can check yourself:

  • Genuine E-ZPass and state toll agencies never send text messages or emails requesting payment for overdue tolls or traffic violations.
  • Scam texts originate from international numbers, random email addresses, or standard 10-digit mobile numbers rather than official verified shortcodes.
  • Messages use aggressive pressure tactics (e.g., immediate late fees, court warrants, or license suspension) to force rushed compliance.
  • The embedded links use non-standard TLDs (.top, .live, .xyz, .info) or typosquatted domains rather than official state extensions (.gov, .com for official portals like ezpassny.com).
  • Scam texts use impersonal greetings like "Dear Customer" or "E-ZPass user" instead of addressing the account holder by their registered name.
04

What should you do in the first hour?

It depends on how far it got. Find your situation:

  • Do not reply to the text, do not click any links, and do not reply "Y". Block the sender's phone number immediately on your mobile device.
  • Immediately change your official E-ZPass account password and security questions. Log into your genuine account portal to verify that no unauthorized banking or vehicle information has been altered.
  • Contact your bank or credit card issuer immediately to report unauthorized fraudulent charges, request a chargeback, and cancel compromised payment cards.
  • Disconnect the device from the internet immediately. Run a comprehensive anti-malware/antivirus scan to detect and remove any installed spyware or remote-access trojans.
  • File an official cybercrime report with the FBI's Internet Crime Complaint Center at www.ic3.gov, report the phishing text to the FCC at consumercomplaints.fcc.gov, and forward the SMS to 7726 (SPAM).
05

Where do you report it?

Whatever the brand, two official channels take the report. File with the US Federal Trade Commission at reportfraud.ftc.gov, and — if money was lost or a computer was accessed — with the FBI's Internet Crime Complaint Center at ic3.gov. Reporting rarely recovers money on its own; it is what makes the next person's warning possible.

06

Sources