Fake traffic fine and toll texts: how to spot the scam

"Final notice: you have an unpaid traffic fine. Avoid a surcharge by paying here." And a link. This text, with small variations, has been circulating in waves across half the world. In the US it's the fake toll-pass text (unpaid tolls supposedly owed to E-ZPass and similar systems); in the UK, fake DVSA and penalty-charge messages; elsewhere, an "urgent fine" from the national traffic authority. It's a recurring smishing campaign: it disappears for a few weeks and comes back with new wording and a new lookalike domain, always with the same goal — getting you to type your card details into a fake website dressed up as the traffic or toll authority.

The good news is that this scam collapses under a single rule, and it's one of the easy ones to remember.

The key rule: traffic authorities don't notify fines by text with a payment link

Hold on to this: no traffic or toll authority will send you a text with a link to pay a fine. Penalty notifications arrive through the official channels they've always used:

• Postal mail, to your registered address, usually with proof of delivery.
• Official electronic notification systems, if you've voluntarily signed up for your government's digital notifications.
• The official self-service channels: the authority's own app or website, where you can check at any time whether you have open cases, fines or unpaid tolls against your name or number plate.

The mechanic of "outstanding fine + link + pay right now from the text" is not how an official notification works: it's the fingerprint of fraud. If the message asks you to pay through a link embedded in the text itself, you don't need to think any further.

What the fake text looks like — and why it works

The message is engineered to trigger a fast reaction, not reflection. Its ingredients rarely change:

• Urgency. "Final notice", "avoid enforcement action", "your case will be passed to collections". They push you to deal with it on the spot.
• The early-payment discount. The most effective hook, because it leans on something real: in many countries genuine traffic fines do carry a reduction for prompt payment, and unpaid tolls do accrue late fees. The scammer uses that true detail to make the whole thing feel legitimate and to make "pay now and forget it" feel worth it.
• A small amount. Usually an affordable figure (tens, not hundreds). The real goal isn't to collect that "fine": it's to capture your full card details on the fake payment page — and sometimes the confirmation code texted by your bank too, to run much bigger charges afterwards.
• A lookalike domain. Links like "dvsa-penalty", "ezpass-toll", "gov-fines" — official-sounding words joined by hyphens, on domains that aren't the real one. On a small phone screen, in a hurry, they pass. The destination site copies the official logos and styling quite convincingly.
• A variable sender. Sometimes a random mobile number, sometimes an alphanumeric sender ID imitating the authority. Since text sender IDs can be spoofed, the sender proves nothing — in either direction.

None of these elements requires the scammer to know anything about you. They blast the same text at thousands of numbers, and it's enough that some percentage happen to drive on toll roads or half-expect a fine. You can see which campaigns of this kind are active each week on our trends page.

How do I check whether I really have a fine?

This is the only part you need when the "but what if it's real?" doubt creeps in. Verification is always something you do, through official channels — never through the link in the message:

1. Open the official app of your traffic authority or toll operator (the real one, installed from your phone's app store). There you can check your vehicles, your licence, and any fines or outstanding balances.
2. Or go to the official website, typing the address into your browser yourself, letter by letter. Don't get there via the link in the text or through dodgy search results: type the official domain and look for the fines or account section.
3. If you're not comfortable online, call the authority's official information line (from a bill, your account paperwork, or the back of your toll-pass statement) or visit an office in person.

If nothing shows up through those channels, there is no fine. The text was fake — block it, delete it, done. And if a real penalty does appear, pay it inside the official app or website, never through a link in a message.

This sequence — close the message, go to the official channel yourself — is exactly the same one we recommend for verifying a call or text from your bank. It works for any organisation or company, and it's the single habit that kills the most frauds at the root.

What if I already tapped the link or entered my card?

It depends how far you got:

• You only tapped the link and closed the page: most likely nothing happened. You downloaded nothing and gave no data; block the sender and move on.
• You entered your card details: call your bank now, on the number on the back of your card, explain what happened and ask them to block the card and issue a new one. That's the measure that cuts the problem off in one stroke.
• You also entered a confirmation code that arrived by text: tell the bank that too, because a transaction may already have been authorised that needs disputing immediately.
• Watch your statements over the following days and weeks. Fraudulent charges don't always land straight away; sometimes they wait. Turn on transaction notifications in your banking app.
• Report it to your local police or your country's cybercrime reporting service, with screenshots of the text, the link and any charges.
• Report the number that sent the text in the spam number directory, so it stays flagged.

The same pattern in other costumes

Once you learn to see the skeleton of this scam (known organisation + pending debt or matter + urgency + payment link), you'll recognise it in all its variants, because scammers rotate the costume with the season:

In every case the defence is identical: don't tap, go to the official channel yourself, and check.

Quick questions

Do traffic authorities ever send texts at all? They may send informational messages tied to processes you initiated yourself, but they don't notify fines with payment links by text. When in doubt, treat any text as unverified and check in the official app or website.

The sender says the authority's name — isn't that a guarantee? No. The sender name on a text can be spoofed. Neither the name nor the number on your screen proves who actually sent the message.

What if I really do have a fine and I miss the discount deadline? Real fines take seconds to check in the official app or website. If one exists, you'll see the amount, the deadline and the official way to pay right there. You don't need any text to keep your discount.

Is reporting the number worth anything? Yes. These campaigns reuse numbers for days at a time. Every report means the number shows up flagged when the next person searches it before falling for it.

If one of these texts has reached you, take a minute to report it in the NoCall number directory: it's the most direct way for the next person who receives the "fine" to find out in time that they owe nothing.