In this guide 10 sections
At a glance
The short version.
Watch for
- An unexpected text about an unpaid toll, road charge or parking fine with a link to pay
- A small amount owed, paired with a much larger late fee or penalty if you do not pay quickly
- Threats to suspend your vehicle registration or licence, ban you from driving or take you to court
Already acted?
Contact your card issuer or bank immediately if you entered payment details, and dispute any charge you do not recognise.
See every recovery stepWhat is changing now
The current pattern.
Warnings from US and UK authorities and from an Australian toll operator describe the same pattern: a text claiming an unpaid toll or parking penalty, a link to pay, and a threat of late fees, a suspended registration, a driving ban or court action. Some messages borrow the names of real toll programmes. In May 2026 the FTC said reports of government impersonation scams were up 40%, partly because of messages about overdue tolls.
How it works
How the scam unfolds.
The texts are sent in bulk, so the sender does not need to know whether you have driven anywhere. Warnings describe almost identical wording across many recipients: a small outstanding amount, a much larger late fee if it is not paid quickly, and a link whose address borrows the name of a toll service. The numbers sending them change from one area to the next.
The mechanics match a fake delivery text, but the lever is different. Instead of a parcel being returned, the threat comes with borrowed authority: an escalating fine, a suspended vehicle registration, a driving ban or a court case. Follow-up texts may say payment is now due ‘today’ or that a prosecution is being prepared, which makes the first message seem more credible.
The link opens a copy of a toll or government payment page. It may ask for your number plate first, then card or bank details, and sometimes identity information such as a driving licence number — useful for identity theft as well as unauthorised payments. Branding and login pages are easy to copy. What a scammer cannot copy is the record held by the real operator or authority, so the useful question is whether the charge appears there when you look it up yourself.
Warning signs
Reasons to stop and verify.
- An unexpected text about an unpaid toll, road charge or parking fine with a link to pay
- A small amount owed, paired with a much larger late fee or penalty if you do not pay quickly
- Threats to suspend your vehicle registration or licence, ban you from driving or take you to court
- A deadline measured in hours, or follow-up texts saying payment is now due ‘today’
- A web address that is not the operator’s official site, even if it contains a toll service’s name
- A payment page that wants your number plate, card details and identity information such as a licence number
Spot the signs
What it can look like.
Highlighted phrases are warning signs; the numbered notes explain each one.
+1 (202) 555-01471 (warning sign 1)
Kestrelway Tolls: You have an outstanding toll balance of $6.85.2 (warning sign 2) A $45.00 late fee will be applied if unpaid by 11:59 pm today.3 (warning sign 3)
Failure to pay may result in suspension of your vehicle registration and referral for prosecution.4 (warning sign 4)
Settle your balance now: kestrelway-tollpay.example/settle5 (warning sign 5)
- An ordinary phone number
Nothing about the sender connects it to a toll operator. A familiar sender ID would not prove much either: names shown on texts can be faked.
- A small amount with nothing to check
A few dollars is easy to believe after any drive. There is no account number, journey date, location or number plate you could match to a real record.
- A large late fee and a same-day deadline
The fee is many times the toll and the deadline is tonight. The pressure is there to stop you checking your account first.
- Borrowed legal consequences
A threat to your registration and talk of prosecution make the text feel official. A threat is not evidence that the charge exists.
- A look-alike payment address
The operator’s name sits inside a different web address. Anyone can register a name like this; the official site is the one you find yourself.
Look the charge up yourself: open the toll operator’s official app or website and search by account or number plate. If nothing is owed there, report the text and delete it.
Composite example: names, numbers and “.example” addresses are fictional.
Worked example
A realistic pattern, separated into evidence.
This composite example is educational. It does not describe a real person or reproduce a live malicious message.
A late-fee warning arrives after a weekend drive
- 01The opening
A driver used several toll roads over a long weekend. A few days later a text says a toll of $6.85 is unpaid and that a $45.00 late fee will be added unless it is settled today.
- 02The escalation
The link opens a page in the colours of the state toll service. It asks for the number plate, then a card number, a driving licence number and a date of birth ‘to confirm the vehicle owner’. An hour later a second text warns that the vehicle’s registration will be suspended.
- 03The decision point
The recent journeys explain why the message feels plausible; they do not show that the sender holds any record of them. A link supplied by the message, the jump from a small toll to identity details and a threat to the registration together form the scam pattern.
Independent verification
Test the request without using its evidence.
These checks deliberately move the decision away from the person, link, number or account that introduced the request.
- 01
Work out who would really bill you
Identify the toll operator, charging scheme or council responsible for the road or area in question. Open its official website or app from a bookmark, an existing account or a past statement — not from the text or a search advert.
- 02
Look up the vehicle, not the message
Sign in to your toll account, or use the operator’s own lookup for your number plate or notice reference. A genuine unpaid charge or penalty should be recorded there.
- 03
Check any paperwork at the source
If you have a letter or ticket, take the reference from it and check it on the issuing organisation’s website, which you find separately. If you want to phone, use a number from that official site rather than one supplied in a text.
- 04
Separate the charge from the threat
A warning about suspension, a driving ban or court action does not prove that anything is owed. Confirm the charge first; if it is real, the issuing organisation can explain the next steps and the payment options.
Prevention
Make the next attempt harder.
- 01
Bookmark the services you use
Save the official websites, or install the official apps, for the toll accounts and road-charging schemes you use. Then a trusted route is ready before a message tries to rush you.
- 02
Keep your toll account up to date
If you have a toll account, keep the number plate, payment card and contact details current. That makes a genuine unpaid toll less likely and lets you see the real balance at a glance.
- 03
Report and delete junk texts
Use your phone’s report-junk option or, where the service is supported, forward the text to 7726. Then delete it rather than replying.
- 04
Agree a rule with other drivers
New drivers and anyone who borrows the car may get these texts too. Agree that nobody pays a toll or fine from a text link — every bill is checked in the official account first.
If you already acted
Protect access and contact the real provider.
- Contact your card issuer or bank immediately if you entered payment details, and dispute any charge you do not recognise.
- Treat a driving licence number, date of birth or address entered on the page as exposed, and follow your country’s official identity-theft guidance.
- Check the real toll account or penalty through the official site so you know whether anything is genuinely owed.
- Change any password you entered on the fake page through the real service, and anywhere else you reuse it.
- Treat follow-up texts or calls about the same toll, fine or vehicle as unverified, however much they appear to know.
- Screenshot the message, note the sending number and web address, then report it and delete it.
Common questions
Short answers to real doubts.
What if I already clicked the link?
Close the page and do not enter anything further. If you entered card or bank details, contact your card issuer or bank using the number on your card or the official app, and dispute any charge you do not recognise. If you typed in a driving licence number, date of birth or address, treat them as exposed and watch for identity misuse. Then check the real toll account so you know whether anything is genuinely owed.
Recovery steps after clicking a linkDo toll companies ever send texts?
Some do. Practices vary by country and operator, and some send reminders by text or email. That is why the useful test is not whether a text arrived, but whether the charge appears when you look it up yourself. Australian toll operator Linkt, for example, says its genuine reminders ask you to log in to your account and that it does not ask for payment details through links in texts or emails.
Can I lose my licence or be taken to court for ignoring the text?
Ignoring a scam text has no legal effect. A genuine unpaid charge is different and can lead to penalties, which is why it is worth checking rather than simply ignoring the subject. Look up your account or number plate on the official site; if a real charge shows there, deal with it through that site and you lose nothing by having refused the link.
How do I report a fake toll or fine text?
Use your phone’s report-junk option or forward the text to 7726 where supported, and tell the organisation being impersonated through its official website. In the US you can also report it to the FBI’s IC3, including the sending number and web address, and to the FTC at ReportFraud.ftc.gov. In the UK the NCSC runs a scam-text reporting service, and in Australia Scamwatch accepts reports.
Sources
Official guidance used for this article.
Stop & Verify summarises these sources for general education. Reporting routes and legal protections vary by location.