News
E-ZPass Phishing Scams Surge as Scammers Target Drivers Through iMessage and SMS
<p class="" data-start="334" data-end="514">A flood of scam texts mimicking toll agencies like E-ZPass and FasTrak is hitting phones across the U.S., as fraudsters ramp up efforts to steal personal and financial information.</p>
<p class="" data-start="516" data-end="880">The wave of phishing messages has reached a new level of persistence. Victims report receiving several messages a day, often filled with fake urgency about overdue tolls or threatened license suspensions. And these aren’t your typical spam — they&#8217;re cleverly designed, bypassing anti-spam filters and using official-sounding language to reel in unsuspecting users.</p>
<h2 class="" data-start="882" data-end="934">Scammers Are Getting Smarter, and More Aggressive</h2>
<p class="" data-start="936" data-end="1236">What’s scary isn’t just the content — it’s how slick the whole thing is. Messages look like they’re from E-ZPass or even the DMV. They hit your phone with statements like, “Your toll payment must be settled by April 4, 2025,” and throw in threats of suspended driving privileges to push you to click.</p>
<p class="" data-start="1238" data-end="1338">And they don’t stop at one. Some users report getting up to seven of these messages in a single day.</p>
<p class="" data-start="1340" data-end="1557">These aren’t just regular SMS blasts either. Most of them are sent using encrypted messaging like iMessage or RCS, which not only masks the sender but helps evade standard filters that would normally catch this stuff.</p>
<p data-start="1340" data-end="1557"><a href="https://www.theibulletin.com/wp-content/uploads/2025/04/ezpass-phishing-scam-text-example.jpg"><img class="aligncenter size-full wp-image-57174" src="https://www.theibulletin.com/wp-content/uploads/2025/04/ezpass-phishing-scam-text-example.jpg" alt="ezpass phishing scam text example" width="828" height="590" /></a></p>
<h2 class="" data-start="1559" data-end="1601">Why This Scam Works — and Keeps Growing</h2>
<p class="" data-start="1603" data-end="1764">Let’s be real: most of us have used toll roads, and most of us don’t keep tabs on every single bill. That’s what makes this scam hit so hard. It feels plausible.</p>
<p class="" data-start="1766" data-end="1870">Scammers are exploiting that uncertainty — and they’ve made some technical tweaks too. The messages now:</p>
<ul data-start="1872" data-end="2112">
<li class="" data-start="1872" data-end="1936">
<p class="" data-start="1874" data-end="1936">Come from random email addresses, making them harder to trace.</p>
</li>
<li class="" data-start="1937" data-end="2002">
<p class="" data-start="1939" data-end="2002">Prompt users to reply so that iMessage enables clickable links.</p>
</li>
<li class="" data-start="2003" data-end="2109">
<p class="" data-start="2005" data-end="2109">Direct you to fake websites that look nearly identical to the real thing — only the URL gives them away.</p>
</li>
</ul>
<p class="" data-start="2113" data-end="2285">This phishing page doesn’t even load on a desktop. It’s mobile-only. Which, honestly, is a smart move on the scammers&#8217; part — most people open texts on their phones anyway.</p>
<h2 class="" data-start="2287" data-end="2340">The Toll of a Growing Phishing-as-a-Service Market</h2>
<p class="" data-start="2342" data-end="2489">There’s another layer to all this — a darker one. These scams aren&#8217;t just one-off efforts by solo cybercriminals. They&#8217;re part of something bigger.</p>
<p class="" data-start="2491" data-end="2758">Security researchers have tied some of these messages to platforms like Lucid and Darcula — services that specialize in phishing-as-a-service (PhaaS). Think of them like the Shopify for scammers: offering templates, tools, and messaging systems to bad actors.</p>
<p class="" data-start="2760" data-end="2789">These platforms are built to:</p>
<ul data-start="2791" data-end="2924">
<li class="" data-start="2791" data-end="2825">
<p class="" data-start="2793" data-end="2825">Automate massive message blasts.</p>
</li>
<li class="" data-start="2826" data-end="2876">
<p class="" data-start="2828" data-end="2876">Send encrypted messages that avoid carrier fees.</p>
</li>
<li class="" data-start="2877" data-end="2924">
<p class="" data-start="2879" data-end="2924">Help scammers track engagement and responses.</p>
</li>
</ul>
<p class="" data-start="2926" data-end="3083">A recent report linked Lucid to similar campaigns, though no direct confirmation ties them to this E-ZPass wave. Still, the mechanics are strikingly similar.</p>
<h2 class="" data-start="3085" data-end="3145">FBI Raised the Alarm Last Year, But It’s Not Slowing Down</h2>
<p class="" data-start="3147" data-end="3345">This scam isn&#8217;t exactly new. The FBI flagged it in April 2024, issuing guidance for people who might receive suspicious toll messages. But here’s the thing — despite the warning, it’s worse now.</p>
<p class="" data-start="3347" data-end="3542">Part of the issue? These messages keep changing. The urgency, the phrasing, even the toll agency being impersonated — all of it shifts constantly. It’s hard to pin down, and even harder to block.</p>
<p class="" data-start="3544" data-end="3630">Here’s what a few real examples look like, according to reports from BleepingComputer:</p>
<ul data-start="3632" data-end="3794">
<li class="" data-start="3632" data-end="3730">
<p class="" data-start="3634" data-end="3730">“You have an unpaid toll balance. Failure to pay by 04/04/25 will result in license suspension.”</p>
</li>
<li class="" data-start="3731" data-end="3794">
<p class="" data-start="3733" data-end="3794">“E-ZPass: Pay now to avoid late fees. Click the secure link.”</p>
</li>
</ul>
<p class="" data-start="3796" data-end="3929">Even the URLs are crafted to mimic toll authority sites, swapping in slight changes that are easy to miss if you&#8217;re scanning quickly.</p>
<h2 class="" data-start="3931" data-end="3983">How to Protect Yourself — and What to Avoid Doing</h2>
<p class="" data-start="3985" data-end="4211">If you get one of these messages, don’t panic — but don’t interact with it either. The FBI recommends filing a complaint at IC3.gov, but there are also some quick practical steps you can take right away.</p>
<p class="" data-start="4213" data-end="4318">First things first, don’t reply. Responding, even to say “Stop,” just confirms your number is active.</p>
<p class="" data-start="4320" data-end="4374">Here’s what cybersecurity experts say you <em data-start="4362" data-end="4370">should</em> do:</p>
<ul data-start="4376" data-end="4599">
<li class="" data-start="4376" data-end="4416">
<p class="" data-start="4378" data-end="4416">Block the number or email address.</p>
</li>
<li class="" data-start="4417" data-end="4466">
<p class="" data-start="4419" data-end="4466">Report it to Apple if it came via iMessage.</p>
</li>
<li class="" data-start="4467" data-end="4518">
<p class="" data-start="4469" data-end="4518">Delete the message without clicking anything.</p>
</li>
<li class="" data-start="4519" data-end="4599">
<p class="" data-start="4521" data-end="4599">Check your actual toll account by logging into the official site directly.</p>
</li>
</ul>
<p class="" data-start="4601" data-end="4686">Just for context, here’s a quick comparison of scam signs vs legit toll agency texts:</p>
<div class="overflow-x-auto contain-inline-size">
<table data-start="4688" data-end="5362">
<thead data-start="4688" data-end="4800">
<tr data-start="4688" data-end="4800">
<th data-start="4688" data-end="4712">Feature</th>
<th data-start="4712" data-end="4757">Scam Texts</th>
<th data-start="4757" data-end="4800">Real Toll Agency Messages</th>
</tr>
</thead>
<tbody data-start="4913" data-end="5362">
<tr data-start="4913" data-end="5025">
<td>Sender</td>
<td>Random email or unknown contact</td>
<td>Official toll agency or short code</td>
</tr>
<tr data-start="5026" data-end="5138">
<td>Link URL</td>
<td>Suspicious domain (e.g., ezpass-pay.net)</td>
<td>Verified domain (e.g., ezpassny.com)</td>
</tr>
<tr data-start="5139" data-end="5250">
<td>Language</td>
<td>Threatening, urgent</td>
<td>Informative, clear</td>
</tr>
<tr data-start="5251" data-end="5362">
<td>Response Prompt</td>
<td>Asks for replies to activate links</td>
<td>No replies needed</td>
</tr>
</tbody>
</table>
</div>
<h2 class="" data-start="5364" data-end="5401">So Why Hasn’t It Been Stopped Yet?</h2>
<p class="" data-start="5403" data-end="5512">The short answer? It’s complicated. The scammers are exploiting the way modern messaging platforms are built.</p>
<p class="" data-start="5514" data-end="5718">iMessage, for instance, disables links from unknown senders — but if you respond, the app assumes you trust them. That’s how the link suddenly becomes clickable. It’s a loophole, and the bad guys know it.</p>
<p class="" data-start="5720" data-end="5923">There’s also the fact that encrypted messaging means these campaigns are tougher to trace. Unlike old-school SMS scams, there’s no easy digital breadcrumb trail for telecoms or law enforcement to follow.</p>
<p class="" data-start="5925" data-end="6076">One cybersecurity analyst BleepingComputer spoke to summed it up: “They’re organized, they’re evolving, and the barrier to entry has never been lower.”</p>

Sony Hints at Potential PS Plus Price Tweaks to Boost Profit Margins
Google Blames API Mishap for Global Cloud Outage That Disrupted Billions of Requests
Selena Gomez Shares Tearful Birthday Tribute to Sister Gracie, Reveals Her Adorable Taylor Swift Obsession
Dogecoin Drops 9% After SEC Delays Bitwise DOGE ETF Decision
OpenAI Slashes ChatGPT o3 API Prices by 80% Without Hurting Performance
Apple and LEGO Show How Focus Beats Diversification
Atari’s Rollercoaster: From Pong Glory to Desert Burial
Kim Soo Hyun and Kim Sae Ron Controversy Sparks Over 10 Police Investigations Amid Legal Showdown
Joe Biden Diagnosed With Aggressive Prostate Cancer That Has Spread to Bones
Budget Friendly Ways to Stop Hair Loss Naturally
-
News4 months agoTaiwanese Companies Targeted in Phishing Campaign Using Winos 4.0 Malware
-
News2 months agoJustin Baldoni Hits Back at Ryan Reynolds, Calling Him a “Co-Conspirator” in Blake Lively Legal Battle
-
News4 months agoApple Shuts Down ADP for UK iCloud Users Amid Government Backdoor Demands
