If you recently received a text message about unpaid turnpike charges, it’s probably a scam.
Americans across the country have reported getting the fake message, which claims that the receiver has an outstanding balance and threatens legal action. While some messages claim to be from E-ZPass, or another state’s toll collection agency, Oklahomans have also reported receiving texts that mention the Oklahoma Turnpike Authority, PlatePay or PIKEPASS.
Law enforcement authorities call this type of scam “smishing.”
While E-ZPass is a legitimate service used in 20 states, it’s not used here. In Oklahoma, the cashless turnpike toll system is called PlatePay. Drivers who frequently use turnpikes can also sign up for the cheaper PIKEPASS service.
“Smishing” is a social engineering attack that uses fake text messages to trick people into downloading malware, sharing sensitive information or sending money to hackers, according to IBM. 
The term is a combination of “SMS” or “short message service” and “phishing,” an umbrella term for social engineering attacks.
“The targeted phone numbers seem to be chosen at random and are not uniquely associated with an account or usage of toll roads. The agency is encouraging customers to remain vigilant about any messages they receive via text,” PIKEPASS said in an alert posted to its website.
As of noon April 23, Oklahoma Turnpike Authority security personnel working in conjunction with other tolling authorities nationally had identified 264 scam websites and 146 websites had been deactivated in the past week, Executive Director Joe Echelle said.
“The problem is that we’re seeing multiple fake websites go up at a time including 100 new websites in the past 24 hours alone to continue this egregious targeting of consumers,” he said. “We want to reassure turnpike customers that their personal information remains secure with OTA as these false text messages are not related to actual turnpike travel.”
Some of the smishing texts claim consequences that are not possible. The OTA cannot impound vehicles or garnish wages, as examples.
Federal Trade Commission reports say that scammers are pretending to be toll agencies from coast to coast and sending text messages demanding money, often with a link to pay the said toll.
By clicking the link, however, you may lose money and accidentally give scammers personal information.
If you haven’t taken an Oklahoma toll road lately or haven’t been to one of the 20 states where E-ZPass is used, just delete the message without clicking any of the links. You can also report the message as “junk” to help improve spam filters. On its website, E-ZPass warns that if you’ve never had an account with them, any message purporting to be from E-ZPass is probably a scam.
The scammers generally try to impersonate the toll service in your state, but Oklahomans have been hit with the fake E-ZPass messages. The texts will include links to a dupe website with a URL and a webpage designed to look like the real thing. NBC News reported that it’s “the end result of an elaborate online syndicate of Chinese-speaking scammers selling ready-made cybercrime kits” meant to steal credit card information and other personal details.
Last April, the FBI reported receiving more than 2,000 complaints reporting similar scams representing toll road collection services. The FTC warned that the scam had spread from “coast to coast.”
If you did click the link or provide any information, the FBI recommends making efforts to secure your personal information and financial accounts. This includes tracking and disputing any unfamiliar charges. Victims should also file a complaint with the FBI’s Internet Crime Complaint Center including the phone number where the text originated and the website listed in the text.
If you think you might owe toll charges, it’s best to independently check that entity’s website.
There are two ways that Oklahoma collects tolls. Regular turnpike users can sign up for PIKEPASS, which gives a discount on charges and can be used in Colorado, Kansas, Texas and Florida. Any charges are deducted from the customer’s prepaid balance.
For one-off trips that take you down one of Oklahoma’s turnpikes, an invoice will be mailed to the registered vehicle owner from PlatePay, the state’s relatively new cashless tolling system. It’s more expensive, but doesn’t require a prepaid service.
To check whether you owe a toll charge in Oklahoma, visit the PlatePay website and enter your car’s license plate number or the account number listed on the mailed invoice.
Josh Kelly contributed to this report.

source