Watch out for Toll Text Scams and Other Imposter Tricks

Scammers are pretending to be toll agencies to steal your money and personal info. We’re here to give you tips and tricks you need.

$3.5B Lost to imposter scams in 2025 (FTC)

9 yrs Imposter scams ranked #1 by FTC in a row

What is an imposter scam

An imposter scam happens when someone pretends to be a person or group you trust — like the government, a company, or even a friend — to trick you out of your money or personal information. These scams can arrive by phone call, email, or text message.

According to the Federal Trade Commission (FTC), imposter scams have been the #1 reported scam for nine years in a row. In 2025 alone, the FTC received more than 1 million reports about these scams, with total losses jumping nearly 20% to $3.5 billion. That's a staggering amount of money stolen from real people just like you.

The toll text scam: a closer look

One of the fastest-growing imposter scams right now is the fake toll text message. You get a text saying you owe money for an unpaid toll. The message looks official. It might even use the name of a real toll program in your state — like E-ZPass, SunPass, FasTrak, or TxTag.

The text usually says you owe a small amount — maybe just a few dollars — and warns that you'll face big fees or even have your car registration suspended if you don't pay right away. There's a link included to "pay now."

Imagine you receive a text with this message: “Please pay your toll by January 21. To avoid excessive late fees and potential legal action, pay promptly." Typically, this message is followed by a suspicious website link. But actually, that link leads to a fake website built to steal your credit card number, your address, and maybe even your driver's license number.  

How the scam tricks you

These messages are designed to fool you. Most of them follow this same basic pattern:

• They create urgency. Phrases like "final notice," "pay within 12 hours," or "avoid legal action" are meant to make you panic and act fast without thinking.
• They use real names. Scammers look up the toll agency in your area and use its real name so the text looks local and legitimate.
• They use your personal info. Many scammers already have some of your details from past data breaches, which makes their messages feel more convincing.
• They build fake websites. The link in the text goes to a copycat site that looks just like the real toll agency's page.

Real toll agencies will never ask you to pay through a text message link. If you're not sure whether you owe a toll, go directly to your state's official toll agency website by typing the address yourself — never click a link from a text.

What to do if you get one of these texts

• Do not click any links in the message.
• Look up the real toll agency's contact info on your own and call them directly.
• Forward the scam text to 7726 (SPAM) — it's free and works on most phones – and 7726 spells SPAM to make it easier to remember.
• Report it to the FTC and to the FCC.
• If you already clicked the link and entered your info, act fast: contact your bank and consider placing a fraud alert on your credit.

Other common imposter scams to know about

Toll scams are big right now, but they're far from the only imposter trick out there. You want to watch out for romance scams, where a stranger can befriend you online and earn your trust and love before asking for money.

Other common imposter scams include fake IRS or Social Security calls, phony package delivery texts, and fake tech support messages. In almost every case, the scammer creates a sense of fear or urgency to keep you from stopping to think.

The best defense is a simple pause. Slow down. Verify the source. Never send money or personal info based on an unexpected message alone.

How IDShield® can help protect you

Scammers are getting smarter, but so is your protection. IDShield Members have powerful tools to stay ahead of identity theft, as well as expert help to fight back if something goes wrong.

Credit and financial monitoring

IDShield watches your credit and financial accounts around the clock. If something suspicious pops up, like a new account opened in your name, get a real-time alert so you can act fast.

Dark web monitoring

Your personal information, like your email, Social Security number, or bank details, can end up for sale on the dark web after a scam. IDShield scans the dark web and notifies you if your info is found, so you know when you may be at risk.

Social media monitoring

Scammers sometimes use stolen personal information to create fake social media profiles in your name. IDShield can help keep an eye on your online presence, so you're not caught off guard.

ScamCheck from Trend Micro

ScamCheck from Trend Micro can look at suspicious messages, links, and screenshots to detect scams before you click on them. The AI has been trained to spot the warning signs of fraud that humans might miss. It also blocks suspicious phone numbers and text messages automatically.

Privacy and data removal

Remember how scammers get your phone number and address to make texts seem local? IDShield works to remove your personal data from data broker websites so there's less for scammers to find in the first place.

Identity theft restoration — we handle it for you

If you do become a victim of identity theft, IDShield doesn't just give you a checklist and wish you luck. Licensed private investigators can work on your behalf to help restore your identity: contacting creditors, disputing fraudulent accounts, and guiding you through every step of the recovery process. You don't have to face it alone.

‍

IDShield® is a registered trademark of Pre-Paid Legal Services, Inc. (“LegalShield”). LegalShield provides access to identity theft services through membership-based participation. IDShield is a product of LegalShield. Some of the services provided under the plan by third party providers are subject to change without notice. All Licensed Private Investigators are licensed in the state of Oklahoma. The information made available in this blog is meant to provide general information and is not intended to provide professional advice, render an opinion, or provide commendation as to a specific matter. The blog post is not a substitute for competent and professional advice. Information contained in the blog may be provided by authors who could be third-party paid contributors. All information by authors is accepted in good faith; however, LegalShield makes no representation or warranty of any kind, express or implied, regarding the accuracy, adequacy, validity, reliability, availability, or completeness of such information. The Identity Theft Insurance is underwritten and administered by American Bankers Insurance Company of Florida, an Assurant company. LegalShield is not an insurance carrier. Please refer to the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions.