FAIRFAX COUNTY, Va. — Don't click the link! That's the message from the Virginia Department of Transportation. Last week they published a release, letting people know about a scam reported in other states.
"In communication with my other tolling cohorts in other states it became apparent there may be a smishing scam," said David Caudill, the Division Administrator for tolling operations for VDOT.
"We wanted to get in front of that before it hit citizens in Virginia," said Caudill.
But within 12 hours, they had received their first call from a recipient of one of the tolling scam texts. Within 48 hours, they'd received more than 500 notifications. As of Wednesday night, a spokesperson for VDOT told WUSA9 they had received approximately 650 reports of these scam texts.
Since March, the FBI says they've received more than 2,000 complaints, reporting these smishing texts, from at least three states.
The FBI says the scammers have been sending texts targeting drivers and requesting payments for outstanding toll charges. They say it does not specifically target E-ZPass customers.
The link in the text message is created to impersonate a toll facility’s or collection service’s name, and phone numbers appear to change between states. By clicking the link, people could risk giving away sensitive data, including credit card information.
"You know I looked at it because I had been out and I thought wait, wait, did I go through one of those things where it does the EZ Pass thing automatically," said Konovia Mikeal.
She lives in Lorton and says she received one of the texts last week.
"It said that it was from the Virginia toll department and there was a toll due of $11 and change or $16 and change and that if it wasn't paid there would be an additional fine of $50," said Mikeal.
Luckily, she didn't fall for the text. She spotted some of the red flags immediately.
"The one thing that jumps out is that there's a link embedded in the text message. That's a clue right there when someone embeds a link and they have this urgency associated with the message. Hit this link to avoid a late payment," said Caudill.
"It's a pretty aggressive campaign, but for our Virginia folks the key is don't hit the link," he said.
Mikeal says she worries about her older relatives and friends these days because it seems like scammers are attacking from every angle.
"Via email, text messages, phone calls, it's just coming at me from all directions at this point," said Mikeal.
She says her advice to everyone, is to just slow down.
"It's just really important for people to slow down and train themselves when you see something especially when it's communicated in a way that's not usually communicated. Just stop take a look at it, stop, think about it, and think does it seem right or not? It's better to be safe than sorry," said Mikeal.
Officials say if anyone does receive an unsolicited text message suggesting it is from E-ZPass Virginia or a specific toll facility in Virginia, they should not click on the link. Instead, they should reach out directly to the appropriate facility to verify authenticity.
E-ZPass account holders and toll customers can check their accounts and pay tolls by going to the Toll Roads in Virginia website and the E-ZPass website. People may also contact customer service representatives for the appropriate facility to validate their toll balance along with upcoming or past-due payments.
Those who believe they received a smishing text about tolls due can file a complaint with the FBI’s Internet Crime Complaint Center at www.ic3.gov and include the phone number of the text message as well as the web link listed within the text.