Who is sending those scammy text messages about unpaid tolls? | CyberScoop<\/title> <meta name=\"description\" content=\"The latest smishing scam follows a familiar process as ones the industry has seen over the past decade.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/toll-road-text-message-scam-swells-nationwide-how-to-stop\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Who is sending those scammy text messages about unpaid tolls?\"> <meta property=\"og:description\" content=\"The latest smishing scam follows a familiar process as ones the industry has seen over the past decade.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/toll-road-text-message-scam-swells-nationwide-how-to-stop\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cyberscoop\/\"> <meta property=\"article:published_time\" content=\"2025-03-17T20:14:39+00:00\"> <meta property=\"article:modified_time\" content=\"2025-03-17T20:14:42+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg\"> <meta property=\"og:image:width\" content=\"5650\"> <meta property=\"og:image:height\" content=\"3964\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"Matt Kapko\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@CyberScoopNews\"> <meta name=\"twitter:site\" content=\"@CyberScoopNews\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1739294329g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1741103352g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1740691656g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=a815169637cf454b7376\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/83878\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/cyberscoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.7.2\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=83878\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Ftoll-road-text-message-scam-swells-nationwide-how-to-stop%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Ftoll-road-text-message-scam-swells-nationwide-how-to-stop%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-83878 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/toll-road-text-message-scam-swells-nationwide-how-to-stop\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--event js-stickybar\">\n<div class=\"stickybar__details\" readability=\"5.12\">\n<div class=\"stickybar__info js-sticky-bar-content\" readability=\"32\">\n<p>Nominations can be submitted for the 2025 CyberScoop 50 awards!<\/p>\n<\/div>\n<p> <a class=\"stickybar__link button button-tertiary\" href=\"https:\/\/cyberscoop.com\/cyberscoop50\/\">Click here!<\/a> <\/div>\n<p> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"25.409465020576\">\n<div class=\"single-article__header-content\" readability=\"33.994428969359\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/cyberscoop.com\/toll-road-text-message-scam-swells-nationwide-how-to-stop\/\"> <span>Cybercrime<\/span> <\/a> <\/li>\n<\/ul>\n<p> The latest smishing scam follows a familiar process as ones the industry has seen over the past decade. <\/p>\n<p>  <br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/cyberscoop\/83878\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p>  <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p>  <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p>  <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"449\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls.jpg?resize=640%2C449&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg 5650w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg?resize=300,210 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg?resize=768,539 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg?resize=1024,718 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg?resize=1536,1078 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg?resize=2048,1437 2048w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg?resize=600,421 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg?resize=239,168 239w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg?resize=480,337 480w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg?resize=962,675 962w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-2.jpg?resize=1202,843 1202w\" sizes=\"(max-width: 962px) 100vw, 962px\"><figcaption> A picture of a toll booth in New Jersey. Scammers have been sending text messages about unpaid toll violations. (Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"77.322175732218\"><body readability=\"157.5234521576\"><\/p>\n<p>It\u2019s not just you. <\/p>\n<p>Seemingly everyone is getting those text messages that serve as a notification of an unpaid toll road violation. The past due is usually less than $25, but is often paired with threats of excessive penalties, suspended vehicle registrations and threats to report the fare to state motor vehicle agencies.<\/p>\n<p>None of it is legitimate. What is actually occurring is a wide-ranging scam, circulating nationwide on mobile phones, that attempts to trick people into paying the phantom violations. Federal authorities, including the FBI, the <a href=\"https:\/\/consumer.ftc.gov\/consumer-alerts\/2025\/01\/got-text-about-unpaid-tolls-its-probably-scam\">Federal Trade Commission<\/a> and the Federal Communications Commission, are tracking and investigating the scam, noting the social engineering attacks are increasing in frequency and geographic reach.<\/p>\n<p>The framework for the scam isn\u2019t particularly novel: The FBI\u2019s Internet Crime Complaint Center has fielded complaints about <a href=\"https:\/\/www.ic3.gov\/PSA\/2024\/PSA240412\">fake road toll collection text messages<\/a> since March 2024. But the inclusion of toll road violations is a new thematic spin to a wave of attacks known as smishing \u2014 phishing over SMS or text messages \u2014 similar to scam campaigns <a href=\"https:\/\/cyberscoop.com\/fedex-ups-dridex-email-scam-votiro\/#\">related to missed package deliveries<\/a>, threat researchers told CyberScoop. <\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Scammers know text messages are among the most personal and time-sensitive forms of communication. Combined with the small amounts of money requested in these messages, the scam hits a sweet spot where cybercriminals get the information they are truly after. <\/p>\n<p>\u201cThey don\u2019t care about the seven bucks. They want your credit card number,\u201d said Aidan Holland, security researcher at Censys. \u201cIt\u2019s just a low-dollar amount that most people will either pay without thinking or not give it a double take.\u201d<\/p>\n<p>Threat researchers attribute the unpaid toll scam to familiar cybercriminals, with the infrastructure and phishing kits originating from China. <\/p>\n<p>\u201cIt\u2019s the same folks who are doing all sorts of text-based scams,\u201d said Ren\u00e9e Burton, VP of threat intelligence at Infoblox. <\/p>\n<figure class=\"wp-block-image size-full\"><img data-recalc-dims=\"1\" decoding=\"async\" width=\"500\" height=\"960\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls.png?resize=500%2C960&ssl=1\" alt class=\"wp-image-83890\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls.png 500w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls.png?resize=156,300 156w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls.png?resize=313,600 313w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls.png?resize=88,168 88w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls.png?resize=176,337 176w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls.png?resize=352,675 352w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls.png?resize=439,843 439w\" sizes=\"(max-width: 500px) 100vw, 500px\"><figcaption class=\"wp-element-caption\">An example of a toll road scam text message. (Scoop News Group)<\/figcaption><\/figure>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>The scams keep spreading in part because the malicious actors are using tens of thousands of URLs and consistently registering new domains.<\/p>\n<p>The malicious sites linked to these attacks often include some variant of a legitimate toll road collection subdomain, but end with uncommon top-level domains that are more commonly associated with cybercrime. <\/p>\n<p>Palo Alto Networks\u2019 Unit 42 said the top subdomains embedded in these URLs include: \u201cezdrive,\u201d \u201ce-zpass,\u201d \u201cfastrak,\u201d \u201cthetollroad,\u201d \u201ctxtag,\u201d \u201cpaturnpike,\u201d \u201cohioturnpike,\u201d \u201csunpass,\u201d \u201cbayareafastrak,\u201d among others. <\/p>\n<p>Legitimate toll road collection domains are inconsistent, a key factor contributing to the success of this campaign, according to Holland. <\/p>\n<p>\u201cThere\u2019s just so many different variants,\u201d he said. \u201cIt leaves room for confusion, and that room for confusion is being taken advantage of.\u201d<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Holland discovered up to 57,000 malicious URLs earlier this month that were directly associated with the scam.<\/p>\n<p>Unit 42 last week said it found more than 10,000 registered domains for various smishing services posing as toll services for U.S. states and package delivery services. More than two-thirds of these domains use the same two-name servers and resolve to IP addresses from popular hosting providers, according to Unit 42.<\/p>\n<p>While the phishing sites mostly resolve to servers in the United States, Singapore and Japan, almost all of them were hosted on networks owned by China-based firms Tencent and Alibaba, Holland said. <\/p>\n<p>Researchers\u2019 efforts to take these domains offline are ongoing, yet gaining the upper hand against this cybercrime group is unwieldy. <\/p>\n<p>\u201cIf we get a thousand domains taken down, they can register 40,000 tomorrow,\u201d Burton said. \u201cThat amount of domains they have tells you that they are making money off it.\u201d<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Most of the malicious texts Holland observed were delivered via iMessage from email accounts registered to burner phones running SIM cards with numbers based in the United Kingdom and the Philippines. He suspects cybercriminals are deploying this tactic because emails are cheaper than phone numbers, even those originating from countries with inexpensive disposable SIM cards.<\/p>\n<p>The campaign is not exclusive to Apple devices, however. Holland also observed toll road text scams on Android-based phones. <\/p>\n<p>Cybercriminals are also deploying tactics to try to circumvent wireless network-based spam controls. While wireless carriers can view regular text messages that pass through their network infrastructure filters, messages sent via platforms like iMessage and the industry-standard rich communication services (RCS) protocol are transmitted over the internet and outside their direct purview. <\/p>\n<p>\u201cAs bad actors evolve their tactics from targeting traditional text platforms to focusing more on over-the-top internet-based platforms like iMessage and RCS, wireless providers, others in the messaging ecosystem and law enforcement need to partner to combat these tactics,\u201d said a spokesperson for CTIA, the U.S.-based wireless industry association.<\/p>\n<p>Federal authorities previously said this toll road text scam is moving from state to state. Earlier this month, researchers said they observed malicious activity in at least a dozen states and one Canadian province. <\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>The FBI, FCC and FTC advise users who receive these text messages to exercise caution, not click links in unexpected texts, file complaints and delete the messages. Users are also encouraged to report unwanted texts as spam, block the number and forward the message to 7726 or \u201cSPAM\u201d to report them to their wireless provider.<\/p>\n<p>Whether it\u2019s toll roads, package notifications, or other rudimentary notes tied to everyday life, these scams continue to pop up because social engineering attacks work. Yet, the way to avoid them, no matter the subject, is to practice vigilance and treat messages from unknown or unconfirmed senders with skepticism.<\/p>\n<p>\u201cThese scams are somewhat easy to spot as fraud if you\u2019re paying attention,\u201d said Chester Wisniewski, director and global field chief technology officer at Sophos. \u201cRemain vigilant for non-U.S. country codes and look for unusual top-level domains \u2014 which are often a tell for suspicious activity.\u201d<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"3.3792134831461\">\n<div class=\"author-card\" readability=\"14\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2025\/03\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls-1.jpg?w=640&ssl=1\" alt=\"Matt Kapko\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Matt Kapko<\/h4>\n<p> Matt Kapko is a reporter at CyberScoop. His beat includes cybercrime, ransomware, software defects and vulnerability (mis)management. The lifelong Californian started his journalism career in 2001 with previous stops at Cybersecurity Dive, CIO, SDxCentral and RCR Wireless News. Matt has a degree in journalism and history from Humboldt State University. <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/toll-road-text-message-scam-swells-nationwide-how-to-stop\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Who is sending those scammy text messages about unpaid tolls?<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[999,282,78,441,669,575,1584,715,842,2533,49,288,183],"tags":[1002,286,86,445,671,577,1588,720,847,2536,57,294,207],"class_list":["post-7450","post","type-post","status-publish","format-standard","hentry","category-censys","category-cybercrime","category-cybersecurity","category-fcc","category-federal-bureau-of-investigation-fbi","category-ftc","category-imessage","category-palo-alto-networks","category-scam","category-social-engineering","category-threat-intelligence","category-threats","category-unit-42","tag-censys","tag-cybercrime","tag-cybersecurity","tag-fcc","tag-federal-bureau-of-investigation-fbi","tag-ftc","tag-imessage","tag-palo-alto-networks","tag-scam","tag-social-engineering","tag-threat-intelligence","tag-threats","tag-unit-42"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/censys\/\" rel=\"category tag\">Censys<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybercrime\/\" rel=\"category tag\">cybercrime<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity\/\" rel=\"category tag\">Cybersecurity<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/fcc\/\" rel=\"category tag\">FCC<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/federal-bureau-of-investigation-fbi\/\" rel=\"category tag\">Federal Bureau of Investigation (FBI)<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/ftc\/\" rel=\"category tag\">FTC<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/imessage\/\" rel=\"category tag\">iMessage<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/palo-alto-networks\/\" rel=\"category tag\">Palo Alto Networks<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/scam\/\" rel=\"category tag\">scam<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/social-engineering\/\" rel=\"category tag\">Social engineering<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/threat-intelligence\/\" rel=\"category tag\">Threat Intelligence<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/threats\/\" rel=\"category tag\">Threats<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/unit-42\/\" rel=\"category tag\">Unit 42<\/a>","tag_info":"Unit 42","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7450","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=7450"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/7450\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=7450"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=7450"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=7450"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":7450,"date":"2025-03-17T15:14:39","date_gmt":"2025-03-17T20:14:39","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=83878"},"modified":"2025-03-17T15:14:39","modified_gmt":"2025-03-17T20:14:39","slug":"who-is-sending-those-scammy-text-messages-about-unpaid-tolls","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2025\/03\/17\/who-is-sending-those-scammy-text-messages-about-unpaid-tolls\/","title":{"rendered":"Who is sending those scammy text messages about unpaid tolls?"},"content":{"rendered":"