IT Security Warns of Surge in Toll Charge Text Message Scams

A significant surge in "smishing" (SMS phishing) scams is impacting drivers across the country, including New Jersey residents. Cybercriminals are sending fraudulent text messages that appear to come from legitimate toll agencies, claiming recipients have unpaid toll balances and must act immediately to avoid late fees, fines or license suspension. 

Over the last week alone, hundreds of domains have been created to impersonate toll agencies in at least 20 states. Some target New Jersey residents using URLs that resemble official government sites, such as “nj.gov**[.]help/mvc.” These pages often copy New Jersey Motor Vehicle Commission branding, but unusual domains like “.help” instead of “.gov” are key warning signs. The scams are designed to create urgency and trick individuals into clicking malicious links.

How the Scam Works 

  Recipients receive a text message claiming they owe a small amount for an unpaid toll and the message may threaten penalties or suspension of driving privileges if payment is not made immediately. The text includes a link that sends the user to a convincing but fraudulent website.

Once on the site, victims are asked to provide credit card information and sometimes personal details such as date of birth, address or driver’s license number. While the payment requested may be small, the goal is to steal financial and personal information for larger fraudulent activity.   These scams carry significant risks and can result in:

• Stolen credit card information 

• Identity theft 

• Unauthorized bank transactions 

• Compromised personal data 

• Long-term financial and credit damage 

Smishing campaigns often are sent in bulk, meaning thousands of individuals may receive the same message. Digital natives, including college students, are frequently targeted because of their reliance on mobile devices and online transactions.

Important Reminder About Toll Agencies 

Legitimate toll agencies generally send invoices through official mail or through secure, verified account portals. They do not demand immediate payment through unsolicited text messages with suspicious links. 

If you are unsure whether you owe a toll, always visit the official toll agency website by manually typing the correct URL into your browser, never by clicking a link in a text message.

How to Protect Yourself 

• Do not click links in unsolicited or unexpected text messages. 

• Check your toll account by manually entering the official website address into your browser 

• Report suspicious messages by forwarding them to 7726 (SPAM) 

• Be cautious of web addresses that look similar to official sites but use unusual domains (such as ".help" instead of ".gov") 

• Report scams to the Federal Trade Commission at reportfraud.ftc.gov and to the FBI’s Internet Crime Complaint Center at ic3.gov. 

Report to Seton Hall IT 

If you receive a suspicious toll-related text message on your University-issued device or believe your Seton Hall account information may have been compromised, report it immediately to the Department of Information Technology. Prompt reporting helps protect both you and the broader University community. For more guidance on spotting phishing scams, review the Seton Hall University's phishing awareness tips. 

Categories: Science and Technology