Skip to content

Companies

Toll road scams: how the fake messages work

State toll collection scams involving programs like SunPass, FasTrak, and TxTag are widespread phishing attacks where fraudsters send unsolicited text messages claiming recipients owe unpaid toll balances. These fraudulent messages typically include phishing links and threaten immediate late fees to trick victims into surrendering credit card details and personal information.

Last reviewed: August 9, 2026  ·  Drafted with AI assistance. Every figure on this page was checked against the source cited for it. Not yet reviewed by a human editor.

ScamPreventionGuide is an independent consumer-protection resource. We are not affiliated with, endorsed by, or sponsored by SunPass, FasTrak or TxTag. Company names and trademarks are the property of their respective owners and are used here only to identify the companies that scammers impersonate.

01

Is the Toll road message real?

SunPass Customer Service: 1-888-865-1725 / SunPass Contact Us · https://www.sunpass.com/en/support/contactus.shtml (Accessed: 2026-08-07)

How the brand actually contacts customers:

FTC Consumer Alert / Category Data: In January 2025, the Federal Trade Commission issued a prominent consumer alert warning of a nationwide surge in government imposter scams involving fake toll collection texts spoofing programs like E-ZPass, SunPass, FasTrak, and TxTag ( Source: Got a text about unpaid tolls? It’s probably a scam.

02

Which versions are in circulation?

The versions in circulation, and what each one is after:

VersionHow it reaches youWhat it wants
SunPass Unpaid Toll SmishingSMSStolen credit card details, PII, and fraudulent monetary charges
FasTrak Final Toll Notice SmishingSMSTheft of banking/credit credentials and identity data
TxTag Past Due Toll CollectionSMSFinancial account takeover and card harvesting
Multi-State Toll Authority Smishing WaveSMSHarvesting credit card data and subscription trap sign-ups
03

How can you tell a real message from a fake one?

The differences you can check yourself:

  • The text message contains a direct, shortened, or non-governmental URL link (such as .com domains that do not end in .gov or official brand domains like sunpass.com, bayareafastrak.org, or txtag.org).
  • The message creates artificial urgency by threatening immediate late fees, court summons, or vehicle registration suspension if payment is not made within 24 to 48 hours.
  • The sender phone number is a standard 10-digit mobile number or shortcode rather than an official verified agency notification channel.
  • Genuine state tolling programs (SunPass, FasTrak, TxTag) never send unsolicited text messages with direct billing links or demand payment via SMS.
  • The requested payment amount is oddly specific and low (e.g., under $20), designed to prompt hasty impulse payment without verification.
04

What should you do in the first hour?

It depends on how far it got. Find your situation:

  • If you contacted them but gave nothing: Stop all communication immediately, do not click any links, block the sending phone number, forward the text to 7726 (SPAM), and delete the message.
  • If you gave personal information (Driver's License, PII): Place a fraud alert on your credit reports with major bureaus (Equifax, Experian, TransUnion), monitor your accounts closely, and report the incident to IdentityTheft.gov.
  • If you paid or transferred money: Contact your bank or credit card issuer immediately to dispute the unauthorized charges, freeze or cancel compromised cards, and file a formal report with the FTC at ReportFraud.ftc.gov and the FBI IC3 at IC3.gov.
  • If you gave remote access to your computer or device: Disconnect the device from the internet immediately, run a reputable anti-malware scan, change all online banking and email passwords from a secure device, and contact your financial institutions.
05

Where do you report it?

Official reporting channel (URL, email, or phone):

Whatever the brand, two official channels take the report. File with the US Federal Trade Commission at reportfraud.ftc.gov, and — if money was lost or a computer was accessed — with the FBI's Internet Crime Complaint Center at ic3.gov. Reporting rarely recovers money on its own; it is what makes the next person's warning possible.

06

Sources