FasTrak and Toll Road Text Scams: How to Protect Your Elderly Parents
Your mother gets a text message: "FasTrak: You have an unpaid toll of $4.15. To avoid a $50.00 late fee, pay within 24 hours at [link]." She doesn't remember whether she used a toll road last week. The amount is small. The deadline feels urgent. She taps the link.
That single tap can expose her credit card number, home address, and personal information to criminals operating from the other side of the world.
Toll road text scams — impersonating FasTrak in California, TxTag in Texas, E-ZPass across the East Coast, and SunPass in Florida — have become one of the fastest-growing fraud schemes in the United States. The FBI issued multiple public warnings throughout 2025 and into 2026, and the scam shows no signs of slowing down. If your parent drives or has ever had a toll account, they are a potential target.
Why toll road scams are so effective against seniors
Most scam texts have a tell: they claim something dramatic, like an account being hacked or a grandchild being arrested. Toll road scams work differently. They are effective precisely because they are boring.
The amounts are tiny. A text claiming an unpaid toll of $3.75 or $4.15 doesn't trigger the same alarm bells as a message about a $500 charge. To a senior, paying a small toll they might have forgotten about feels routine — not risky.
Toll systems are confusing. FasTrak, TxTag, E-ZPass, SunPass — the patchwork of regional toll authorities is genuinely disorienting, even for people who drive through tolled roads regularly. Many seniors aren't sure which system they use, whether their account is current, or whether they might have accidentally driven through a toll without paying. This uncertainty makes the scam text feel plausible.
Seniors often don't verify texts. A younger person might open a browser and navigate directly to the toll authority's website. Many older adults will simply tap the link in the text because it seems like the easiest way to resolve the issue.
The threat of late fees creates pressure. The text typically warns that a penalty — often $50 or more — will be applied if payment isn't made within 12 to 24 hours. For seniors on a fixed income, the idea of a $50 penalty for a $4 toll is distressing enough to override caution.
How the scam works step by step
Understanding the mechanics helps you explain the danger to your parent in concrete terms, rather than vague warnings about "being careful."
Step 1: The initial text. The victim receives an SMS that appears to come from a toll authority. The message uses the real name of the toll system (FasTrak, TxTag, E-ZPass) and references a specific unpaid amount. Some versions include a fake toll transaction number for added credibility.
Step 2: The phishing link. The text includes a shortened URL or a domain that looks close to the real thing — something like "fastrak-payment.com" or "txtag-notice.net" instead of the legitimate bayareafastrak.org or txtag.org. On a phone screen, these differences are easy to miss.
Step 3: The fake payment portal. Tapping the link opens a professional-looking website that mimics the toll authority's actual payment page. It asks for name, address, license plate number, and credit card information. The design is often convincing enough that even a cautious person might not realize anything is wrong.
Step 4: Data harvesting. Once the victim enters their information and hits "submit," the data goes directly to the scammers. Within hours, fraudulent charges may appear on the credit card. The personal information — name, address, license plate — may also be sold to other criminal networks or used for identity theft.
Step 5: Follow-up scams. Victims who respond to the first text often receive additional messages. Some escalate the urgency ("Final notice before collections"). Others shift to a different scam entirely, now that the scammers know they have an engaged target.
How to tell a real toll notice from a scam
No legitimate toll authority in the United States will ever text you a payment link. This is the single most important fact your parent needs to know.
Here are additional ways to distinguish real notices from fake ones:
Real toll notices come by mail. If there is a genuinely unpaid toll, the toll authority will send a paper notice to the address associated with the vehicle registration. They may also email the account holder if there is an email on file. They do not send payment demands via text message to random phone numbers.
Real toll amounts match actual trips. If your parent hasn't driven on a tolled road recently, an unpaid toll notice is immediately suspicious. But even if they have used toll roads, the notice should be verified through official channels — not through a link in a text.
Scam URLs don't match official domains. The legitimate websites are bayareafastrak.org, txtag.org, e-zpassny.com (varies by state), and sunpass.com. Any URL that doesn't exactly match the official domain is fraudulent, no matter how close it looks.
Scam texts create artificial deadlines. Phrases like "pay within 24 hours" or "avoid late fees by midnight" are designed to prevent the recipient from taking time to verify. Real toll authorities provide weeks or months to resolve unpaid tolls, not hours.
Free Download
Get the Elder Scam Shield Quick Start Checklist
Everything in this article as a printable checklist — plus action plans and reference guides you can start using today.
What to do if your parent receives a toll road scam text
Walk them through these steps calmly. Seniors often feel embarrassed or anxious when they realize they may have been targeted, so framing this as "a common scam that millions of people receive" helps reduce the emotional weight.
If they haven't clicked the link:
- Do not tap or click anything in the message
- Delete the text message
- Block the sender's number
- If they want reassurance, help them log in to their actual toll account directly by typing the official website address into their browser (not by searching, which can surface scam ads)
If they clicked the link but didn't enter information:
- Close the browser tab immediately
- Clear the browser history and cache
- Run a security scan on the phone if they have antivirus software installed
- Monitor the phone for any unusual behavior over the next few days
If they entered personal or payment information:
- Call the credit card company immediately to report the card as compromised and request a new card number
- Place a fraud alert or credit freeze through the three major credit bureaus (Equifax, Experian, TransUnion)
- Change passwords for any accounts that use the same email address
- Report the scam to the FTC at ReportFraud.ftc.gov
- Forward the scam text to 7726 (SPAM), which reports it to the wireless carrier
- File a report with the FBI's Internet Crime Complaint Center at ic3.gov
How to protect your parent going forward
The best defense is setting up a simple system that removes your parent from the decision loop when these texts arrive.
Set up the real toll account together. If your parent uses toll roads, log in to their FasTrak, TxTag, or E-ZPass account together. Make sure the account has a valid payment method, automatic replenishment is turned on, and your email address is added as a secondary contact. When the account is in good standing, your parent can confidently ignore any text claiming otherwise.
Enable spam text filtering. Both iPhone and Android have built-in tools to filter messages from unknown senders. On iPhone, go to Settings, then Messages, and enable "Filter Unknown Senders." On Android, Google Messages automatically flags suspected spam. These filters catch many — though not all — scam texts.
Create a "never tap links in texts" rule. This single rule eliminates not just toll scams but most smishing attacks. Help your parent understand that no legitimate company — not their bank, not a government agency, not a toll authority — will ask them to tap a link in a text message to make a payment. If something needs attention, they should call the company directly using the phone number on their paper statement or official website.
Check in regularly. Many seniors don't mention scam texts because they either handled it themselves (sometimes by paying) or because they're embarrassed. Make it a habit to ask: "Have you gotten any weird texts lately?" A casual, non-judgmental question opens the door.
The bigger picture: why these scams keep evolving
Toll road text scams are part of a broader trend in fraud targeting older adults. Scammers have learned that small-dollar, low-drama scams are more profitable than dramatic ones. A $4 toll payment doesn't seem worth worrying about, which is exactly why millions of people fall for it.
The criminal networks behind these scams operate at massive scale. They send millions of texts per day, and even a tiny response rate generates significant revenue — both from the initial credit card theft and from selling the harvested personal data.
For caregivers, this means scam education isn't a one-time conversation. New scam variants emerge constantly, and the most effective protection is an ongoing relationship where your parent feels comfortable asking you about anything suspicious.
Take the next step
If you want a comprehensive, printable resource that covers toll scams, text scams, phone scams, and online fraud — organized specifically for seniors and their caregivers — the Elder Scam Shield includes step-by-step action plans, a scam identification checklist, and family conversation guides that make these conversations easier. It is designed to sit next to the phone or computer where your parent can reference it whenever something feels off.
Get Your Free Elder Scam Shield Quick Start Checklist
Download the Elder Scam Shield Quick Start Checklist — a printable guide with checklists, scripts, and action plans you can start using today.