Guides / Text message

"Unpaid toll" text from E-ZPass, FasTrak or SunPass - real or scam?

The toll-fee text that hit millions of phones, the two things that make it obviously fake, and what to do if you actually have a toll to pay.

Updated 17 September 2026·2 min read

E-ZPass: You have an unpaid toll invoice of $6.49. To avoid a late fee of $50.00 pay now at https://ezpass-tollservices.com/pay

Small fee, big late penalty, short link.

Short answer: it's a scam. Toll agencies send bills by post to the registered owner of the vehicle. They do not text a link, they don't know your mobile number, and E-ZPass, FasTrak, SunPass, TxTag, Peach Pass, the Dartford Crossing and the M6 Toll all have public warnings about exactly this text. It's sent to millions of numbers at once - including people who don't own a car.

The tells

  • The domain. ezpass-tollservices.com, e-zpass.com-toll.xyz, sunpass-pay.top. Each agency has one real site (e-zpasspa.com, thetollroads.com, sunpass.com...). Anything else is fake. Scamed can tell you how old the domain is - these are usually days old.
  • You didn't drive there. Many people receiving "Florida toll" texts have never been to Florida.
  • Tiny fee, huge penalty. $4 now or $50 later is engineered urgency.
  • iMessage tricks. Many versions say "reply Y then reopen the message to activate the link" - that's to get around Apple's link blocking. Real agencies don't need you to do that.

The page looks like the agency's site and asks for your name, address, card number and CVV, then sometimes a one-time code from your bank. The $6.49 is never charged; your card details are sold or used within hours.

What to do

  1. Don't tap. Don't reply, even "Y".
  2. If you think you might owe a toll, go to the agency's real website (type it yourself) or the app, and check your account.
  3. Forward the text to 7726, then delete it. In the US you can also report at reportfraud.ftc.gov.
  4. If you entered card details: call your card issuer, cancel the card, and watch for a follow-up call pretending to be the bank.

Not sure? Paste it

Paste the text into Scamed - it checks the link's domain age and highlights the fee-and-deadline pattern.

More guides