Overview

• The phishing scam, escalating nationwide, uses fake texts claiming unpaid tolls to target FasTrak and E-ZPass users, particularly in the San Francisco Bay Area.
• Victims are coerced through urgent and threatening language, such as warnings of fines or license suspensions, to click malicious links mimicking official toll portals.
• The scam leverages phishing-as-a-service platforms like Lucid and Darcula to execute large-scale, technically sophisticated campaigns.
• Scammers exploit mobile-specific messaging features, including iMessage and RCS, to bypass spam filters and increase victim engagement.
• Authorities advise consumers to verify toll balances directly via official websites or apps and to report phishing attempts to the FBI or FTC.