- SMS scam in the United States claims that unpaid toll costs are due
- Messages include a malicious link to steal payment information
- The FBI warns users to delete and report messages from unknown shipments
The FBI warned against a new phishing scam that sweeps smartphones in the United States. The con targets drivers with convincing false texts that claim to come from the ministry of motor vehicles (DMV). This is part of a growing trend in SMS toll scams designed to encourage recipients to click on malware and put their credit card information.
As reported by the local television station of Memphis Wreg and taken up by the male newspaper, the FBI issued a warning to anyone who receives a suspicious SMS. The office urged smartphones users not to click on the links from unknown sources and delete these text messages immediately.
Addressing Wreg, the Special FBI supervision agent David Palmer, described the scam as a “copier” of widespread toll scams that surfaced earlier this year. These attacks also used false unpaid toll reviews to attract victims to give sensitive personal details.
What makes these toll scams so dangerous is the ease with which they can be distributed, as well as what they can bring together. “It costs almost nothing for them … Sending these messages and calls,” Palmer told Wreg. “In return, they can … Enter and steal information from your device, or collect your payment information.”
How the scam works – and how to spot it
How to locate a false text
Although some scam text messages are surprisingly polite, there are several common signs to monitor:
• Generic greetings Without personal details
• Urgent or threatening language as “your account will be suspended”
• unusual e-mail addresses or addressesoften ending with strange areas or unrelated names
• Obvious errors including typing mistakes or formatting errors
• Unknown shipperslike random numbers or clearly false messaging handles
Most toll scam texts follow a similar format. The message generally claims that you have suspended toll costs and urges you to follow a link to adjust the balance. The link generally leads to a false payment site designed to steal your information. It will be a convincing replica of a real government’s website, using similar fonts, colors and logos, which all seem official.
Most messages include the threat of late costs or legal actions if you don’t act quickly. This is intended to create a feeling of emergency and panic, triggering an emotional response which can lead the recipient to neglect the inconsistencies and to act without checking if the message is legitimate.
Palmer would have received one of the false texts himself – and quickly spotted several red flags. “A few things that I noticed immediately … The SMS I received said it was the department of motor vehicles in the north of Tennessee,” he said. “Obviously, there is no North or South Tennessee.”
Inconsistencies like these are a clear characteristic of a message that tries to last you. The same goes for the details of the sender who do not add up. Agent Palmer gave an example: “The message I received was from the e-mail address @ catlover.com, this is obviously not a government address.”
The other signs to be monitored include spelling and grammatical errors, as well as generic greetings that do not refer to your name or your license plate. If you are uncertain, do not engage with the message. Instead, contact the relevant agency directly for clarification. Or as Palmer said, “If you don’t know who he comes from, don’t click on the link.”
Suspicious messages should be deleted immediately. You can also report them to the FTC and at the FBI Internet Crime Complaints.
