Scammers have found a new road to their victim’s wallets, both figuratively and literally. A 900% proliferation in fraudulent unpaid toll phishing messages in the past three months(1) has prompted warnings from both state agencies and the FTC.
In March alone, the FBI’s Internet Crime Complaint Center (IC3) has received over 2,000 reports of perpetrators impersonating toll payment collectors(2).
These scams hold the capability to impact the victim far past losing the money they supposedly owe. Clicking the links in these messages can open the recipient to malware and data exposure that could threaten device security and culminate in identity theft.
Texts are being sent in droves with varying levels of believability. Information from data breaches can help scammers specify their schemes and increase their appeared plausibility. Understanding the signs look and what to do if you fall victim is paramount, so continue reading to learn more about these fake toll scams.
Understanding the Fake Toll Scam
It’s important to understand the origin of these fake toll scams in order to properly protect and combat against them. When speaking with NBC, cybersecurity researcher Ford Merrill said that discussion of the scam has been traced all the way back to 2023.
Merrill claims that Telegram has been used to communicate and distribute phishing kits that originate from China. These same phishing kits were used previously in text scams warning targets that their fake USPS packages had gone missing(3).
So, if the scammers aren’t using some brand-new tactics, how has this scheme become so popular and effective recently? To understand the uptick in fake toll scams, you need to understand how they are carried out.
How the Scam Works
Scammers will make contact with their target, commonly through a text message, and explain that they have an unpaid toll. The supposed amount due usually isn’t extreme, but the curated consequences of not paying are.
The text typically contains some variation of a message that tells the recipient that they need to pay the toll to avoid additional penalties including fines, license suspension, and reporting the case to the DMV.
The recipient is then prompted to click a link which takes them to a phishing website where they believe they can pay their toll. These links can contain malware or have the target enter private credentials including passwords, bank information, and social security numbers.
Red Flags to Watch For
Due to the similar structure across these scams, there are some signals that commonly arise that could tip you off before you become a victim. Be cautious of messages you receive that:
- Are unsolicited forms of contact that are not utilized by the official toll agency
- Are prompting you to take immediate action by creating a sense of urgency
- Contain grammatical errors and suspicious sender information
- Contain links that do not match the legitimate website of the toll agency
The Potential Consequences
These scam texts typically don’t ask for large sums of money with the alleged toll and late fees usually combining for less than $25. However, the real payout for the perpetrator comes with the private data they can steal when the victim attempts to pay.
In addition to losing their payment, victims of fake toll scams are at risk of:
- Malware infections from links and attachments that can compromise device security
- Identity theft from credentials entered on the phishing website or stolen using malware
- Private data being sold or breached, resulting in predisposition to future scams
Knowing how these scams work and the damage they can do is only part of the awareness battle. You also need to know what measures you can take to prevent a fake toll scam.
Protecting Yourself from Fake Toll Scams
It’s better to take preventative measures to avoid these scams and be prepared to respond than it is to wait for them to present themselves. The following practices could make the difference in getting scammed and safely using the internet.
- Verify the Source: You should be able to find the ways that a legitimate toll organization would make contact with you on their website. Go to the confirmed, official site of the agency and use a verified contact method to inquire about incidents and prevent potential phishing attacks.
- Be Cautious of Links and Attachments: Don’t open attachments in unsolicited messages from unknown users. You can hover over links without clicking them to see the entire URL and compare it to that of the official website. Using a reputable antivirus program can also protect you from malicious links that threaten your device’s security.
- Secure Your Personal Information: Don’t share private credentials in response to the requests of random messages. Furthermore, you should always use strong, unique passwords and utilize two-factor authentication on any platforms that offer it.
- Educate Yourself and Others: The internet is constantly evolving and so are the strategies of scammers. Keep yourself and your connections informed on the latest trends in cybercrime. The FTC provides educational resources on text scams on their website.
- File a Report: You should report any potential scams you come across to relevant authorities to protect yourself and others. If communication happens on an online platform, report the account to the system administrator. File a report with your local law enforcement and with the FBI through their IC3 portal.
Remediating the Damage: Digital Forensics Corp.’s Role
If you’ve already fallen victim to a fake toll scam, all hope is not lost. It can be difficult trying to assess the situation and develop a plan for recovery. That’s where the help of a professional digital forensics organization can help. We’ve handled cases like these, and we know what needs to be done to secure your online presence and strengthen your cybersecurity.
Malware Scanning and Removal
Our team is capable of detecting and removing malicious programs that are installed on your device through fake toll scam links. Through advanced malware analysis, we can determine the origin of malware, the scope of its damage, and an effective method for removal.
Maintaining a clean system is important for both the performance and security of your device and the data stored on it. Unremoved malware can allow scammers to access your data to utilize it in their scheme or sell it to other bad actors online.
Data Recovery and Analysis
After we’ve removed the malicious program, we can work to undo the damage it caused. We can employ data recovery techniques such as disk imaging and data carving to recover files that were lost or damaged from the infection.
This is beneficial for a number of reasons. The obvious upside is salvaging your data from the infected device. Additionally, uncovering which files were impacting can enable digital forensics experts to determine the extent of the attack and secure any devices impacted.
Incident Response and Investigation
The biggest factor in successfully recovering from any cybercrime is time. You need to have a rapid response to mitigate damage and increase your chances of recovering any lost data or funds. This can be a difficult task for an individual who isn’t well-versed in cybersecurity.
Luckily, the team of professionals at DFC has handled thousands of cases like these. As such, we know how to properly investigate and document scams in a timely manner. Additionally, we can help you develop your security system and response plan for the future.
Device Security Hardening
It is important to continue assessing and improving your cybersecurity system, even after the threat of the attack has subsided. The next cybercriminal is lurking around the corner, waiting to find a vulnerability in your virtual vanguard.
DFC can help you bolster your protection. Our team of certified specialists can perform penetrative testing to regularly scan for security lapses that could be exploited by cybercriminals and advise you on safeguards you should implement.
Financial Recovery and Identity Protection
Your best shot at restoring your lost funds and defeated defense system is taking quick action. The following actions give you the best chance at recovering from a fake toll scam:
- Reporting Fraudulent Transactions: Begin by reporting the transaction to your bank or credit card company as soon as possible. Furthermore, you should file a fraud report with the FTC.
- Monitoring Credit Reports: If your credit information has been potentially compromised, check your credit reports for any unusual activity. You may want to consider placing a fraud alert or security freeze on your account.
- Identity Theft Protection Services: You may want to consider seeking the services of professional protection organizations. These experts can monitor your account activity, alert you of any suspicious happenings, and even assist in recovering lost funds.
Digital Forensics Corp.: Your Partner in Digital Recovery
If you’ve fallen victim to a fake toll scam, DFC is here to help you make an optimal recovery. This may be your first time trying to navigate a situation like this, but it’s far from ours. We understand how these cybercriminals move, and we know what needs to be done to thwart their attempts.
Expertise in Cybercrime Remediation
Our experience in the field has allowed us to develop cutting-edge techniques to help you mitigate the damage of a cyberattack and position yourself for the best possible recovery. Through malware analysis and removal, data recovery, and other proven incident response measures, we can help you handle the situation and prevent similar ones in the future.
Some of the services we provide that can help you find a solution to the scam include:
Commitment to Protecting Your Digital Life
Here at DFC, we are completely committed to helping victims of cybercrime recover from scams, increase their online security, and become more aware of the threats that may target them.
If you’ve fallen victim to a fake toll scam, there is no better time to take action than now. Reach out today for a free consultation and let us help you start taking control back.
Sources:
DISCLAIMER: THIS POST IS FOR INFORMATIONAL PURPOSES ONLY AND IS NOT TO BE CONSIDERED LEGAL ADVICE ON ANY SUBJECT MATTER. DIGITAL FORENSICS CORP. IS NOT A LAWFIRM AND DOES NOT PROVIDE LEGAL ADVICE OR SERVICES. By viewing posts, the reader understands there is no attorney-client relationship, the post should not be used as a substitute for legal advice from a licensed professional attorney, and readers are urged to consult their own legal counsel on any specific legal questions concerning a specific situation.
