EZDriveMA Smishing Scam

Two TINA.org staffers recently received text messages like the one above that appear to come from EZDriveMA (Massachusetts’ electronic tolling program) requesting payment to avoid “excessive late fees.”

One of the TINA.org staffers also received a similar text claiming there’s been “a violation of the toll payment regulations,” and threatening “fines and suspension of access to toll roads,” along with reporting the incident to the DMV if the fine isn’t paid within 12 hours.

Drivers burned by late toll fees might be tempted to take immediate action, especially when the amount appears to be nominal.

However, when getting a text from a number you don’t recognize (in the first example above, the country code 63 is for the Philippines – a far cry from the Bay State) or an email address that isn’t familiar, you should always double check to make sure the sender is legitimate before clicking on any link or responding. This is especially important when the message requests any payment or personal information.

One step is to reach out to the company independently through verified contact information rather than clicking on a link in a text. Googling keywords in the message you receive (for example, “EZDriveMA unpaid tolls text”) is another way to see if others have received similar messages.

The EZDriveMA’s website alerts consumers to a potential texting scam that is “fraudulently claiming to represent tolling agencies.” The notice then directs consumers to EZDriveMA’s official alert, which clarifies that the organization “will never request payment by text” and urges consumers not to click on the links associated with these messages.

This practice is known as smishing (a portmanteau of SMS text messaging and phishing), which is when scammers pose as a legitimate entity through text messages in an attempt to steal personal information. The specific tactic of impersonating tolling agencies has occurred across the country, with states including New York, Pennsylvania, Minnesota and Texas all reporting similar issues.

Smishing scams have the potential to be especially harmful as consumers are more likely to click on links from text messages than email and, according to the FTC, this may be enough for the scammer to steal personal information and even your identity.

Some other common examples to watch out for are messages claiming to come from USPS, the IRS, a bank, or companies offering rewards points.

In all these cases, a common red flag is a message that attempts to elicit fear or tries to get you to act urgently. For example, in the first example above, the scammer threatens extra fees if the consumer doesn’t “settle it promptly,” and in the second example, the scammer threatens fines, a suspension and reporting to the DMV.

Another red flag to look for with these kinds of text messages is the URL provided in the text. For this kind of tolling scam, EZDriveMA advises that all links associated with the organization “will include www.EZDriveMA.com.”

Lastly, for all types of phishing scams, the FTC advises that consumers use multi-factor authentication for their accounts, update their devices so they have the protection of the latest security tools, and back up all their data.

EZDriveMA did not respond to TINA.org’s request for comment.

Find more of our coverage about phishing scams.