Intel Name: Unraveling the u.s. toll road smishing scams
Date of Scan: April 15, 2025
Impact: High
Summary: Since mid-October 2024, ongoing smishing campaigns have impersonated U.S. toll road payment services like E-ZPass in an effort to commit financial fraud. Attackers have targeted individuals across at least eight U.S. states—including Washington, Florida, Pennsylvania, Virginia, Texas, Ohio, Illinois, and Kansas—using spoofed domains with state abbreviations embedded in the URLs. Victims receive SMS messages claiming they owe a small toll balance (under $5) and are urged to pay promptly to avoid late fees. These messages redirect users to phishing sites designed to steal payment information.
