Unpaid toll scams began circulating heavily over SMS in early 2025. In fact, they have been so widespread that these scams have garnered significant media coverage and even warranted a warning from the US Federal Communications Commission. The SMS scams were quite threatening in nature and likely lead to significant financial theft for the perpetrators.

Recently our team observed these scammers bleeding over into the email landscape. Reportedly, a contractors account was hacked and used to distribute this campaign in mass. “Officials said the state’s contract with the company that sent the messages ended on Dec. 31, 2024, but the company reportedly did not remove the state’s account.” An especially important thing to note is that the State does not send unpaid toll notifications via text or email messages.

The “

The link above leads to the following page with required contact information fields.

After inputting contact info, the attackers finally reach their goal and attempt to harvest credit card details.

So far, the email-based version of the unpaid toll scams has been minimal in comparison to the SMS efforts. However, this is something to be aware of and keep a watchful eye on. Legitimate toll collections typically come via physical mail and will not make threats to the consumer so that should always be an immediate red flag. We will update this article if we see any further iterations of these scams taking root.