FBI Smishing Scam: 5 iPhone & Android Texts to Delete NOW

Cities Most Affected

Targeted Cities

Morningpicker has identified several cities that have been heavily targeted by the scam. These cities include Annapolis, Boston, Greenwich, Denver, Detroit, Houston, Milwaukee, Salt Lake City, Charlotte, San Diego, and San Francisco. According to McAfee, the top five cities targeted by scammers are Dallas, Atlanta, Los Angeles, Chicago, and Orlando. These cities have seen a significant increase in fake toll road scams, with the number of scams nearly quadrupling at the end of February compared to previous months.

For example, in New York, a text message was received with a tell-tale sign that it was a scam: the dollar sign was displayed after the amount, rather than before, as is customary in the U.S. This further indicates that the phishing scam was created by people outside of the U.S. Similarly, in Greenwich, the city issued a warning to residents about the scam, advising them to be cautious when receiving text messages about unpaid tolls.

Scam Trends

The scam is spreading and evolving, with new domains being registered to fuel the attacks. According to Unit 42, the new campaign entices users to reveal personal and/or financial information, including credit or debit card and account information. The scam is franchised out to local operators, but it all seems to leverage a toolkit built by Chinese cybercrime groups.

The use of Chinese TLDs such as .XIN is a common tactic used by the scammers. For example, domains such as dhl.com-new[.]xin, driveks.com-jds[.]xin, and ezdrive.com-2h98[.]xin have been used to trick users into paying fake tolls. The scammers are also using state-specific payment links to make the scam appear more legitimate.

Practical Tips for Safe Travel

When traveling, it’s essential to be aware of the scam and take steps to avoid falling victim. One way to do this is to verify toll road charges before paying. You can do this by checking your account using the toll service’s legitimate website or contacting the toll service’s customer service phone number.

Additionally, be cautious when receiving text messages about unpaid tolls. If you receive a text message with a link to pay a toll, do not click on the link. Instead, check your account using the toll service’s legitimate website or contact the toll service’s customer service phone number. You can also report the scam to the Federal Trade Commission (FTC) or your local authorities.

What You Can Do

Verify Toll Road Charges

To verify toll road charges, you can check your account using the toll service’s legitimate website. For example, if you have an account with E-ZPass, you can log in to your account and check your balance and transaction history. You can also contact the toll service’s customer service phone number to ask about any unpaid tolls.

It’s also essential to be aware of the legitimate payment methods accepted by the toll service. For example, E-ZPass accepts payment by credit card, debit card, or check. If you receive a text message with a link to pay a toll, and the link asks you to pay using a different method, such as a wire transfer or gift card, it’s likely a scam.

Avoid Falling Victim

To avoid falling victim to the scam, it’s crucial to be cautious when receiving text messages about unpaid tolls. Do not click on links from suspicious texts, as they may lead to phishing websites or malware. Instead, check your account using the toll service’s legitimate website or contact the toll service’s customer service phone number.

Additionally, be aware of the tactics used by scammers. They may use urgent language to create a sense of urgency, such as “pay now to avoid late fees and potential legal action.” They may also use familiar company names to make the scam appear more legitimate. However, if you receive a text message with a link to pay a toll, and the link is not from the toll service’s legitimate website, it’s likely a scam.

Stay Informed

To stay informed about the latest scam warnings and advice, you can visit the Federal Trade Commission (FTC) website or follow them on social media. You can also sign up for scam alerts from your local authorities or toll service providers.

Additionally, you can report the scam to the Federal Trade Commission (FTC) or your local authorities. You can also contact the Internet Crime Complaint Center (IC3) to report the scam. By reporting the scam, you can help prevent others from falling victim and assist law enforcement in tracking down the scammers.

Expert Analysis and Insights

According to cybersecurity experts, the scam is a classic example of a smishing scam, which uses SMS or text messages to trick users into revealing personal and/or financial information. The scam is highly sophisticated, with scammers using state-specific payment links and familiar company names to make the scam appear more legitimate.

The use of Chinese TLDs such as .XIN is also a common tactic used by scammers. According to Unit 42, the new campaign entices users to reveal personal and/or financial information, including credit or debit card and account information. The scam is franchised out to local operators, but it all seems to leverage a toolkit built by Chinese cybercrime groups.

To protect yourself from the scam, it’s essential to be vigilant when receiving text messages about unpaid tolls. Do not click on links from suspicious texts, and instead, check your account using the toll service’s legitimate website or contact the toll service’s customer service phone number. You can also report the scam to the Federal Trade Commission (FTC) or your local authorities.

• Be cautious when receiving text messages about unpaid tolls
• Do not click on links from suspicious texts
• Check your account using the toll service’s legitimate website
• Contact the toll service’s customer service phone number
• Report the scam to the Federal Trade Commission (FTC) or your local authorities