Fake toll or traffic fine text: what to do and how to check if it's real

Fake toll or traffic fine text: what to do and how to check if it's real

"eFlow: you have an unpaid M50 toll. Pay €3.20 today to avoid a penalty." Or: "You have an outstanding traffic fine. Pay now to avoid penalty points." Plus a link. In Ireland the most common version of this scam is the fake toll text, but the same script appears dressed up as a speeding fine, a parking charge or a clamping release fee. It's smishing: the aim isn't the small amount, it's to get your card details on a fake payment page. Here's how to recognise it and how to check whether you really owe anything.

How does the fake fine scam work?

1. The text. It uses the name of a toll operator, the Gardaí, a local council or a parking company. The sender may be a random mobile number or a name made to look official.
2. The pressure. "Final notice", "pay within 24 hours", "the amount will double", "penalty points will be applied". The fear of a bigger penalty pushes you to pay quickly.
3. The link. It leads to a page that copies the look of the real service (eFlow, a council, a "fines payment" portal) and asks for your vehicle registration, name and card details.
4. The real damage. With your card details, and sometimes the code your bank sends you, they make much larger payments. Some pages also collect your address and phone number for future scams.

How do I recognise the fake text?

• Toll and fine notices are mostly sent by post. A Garda fixed charge notice for speeding or other road offences arrives as a paper notice with its own reference number and payment instructions. A text with a link out of the blue is not how it starts.
• The link isn't an official address. Watch for domains like "eflow-payment-ie", "m50-toll-pay" or "garda-fines-online" with odd endings. On a small screen they slip past; look at them calmly.
• No registration number, or a vague one. A genuine notice relates to a specific vehicle, date and place.
• The amount is suspiciously small, or a "discount" if you pay right now.
• Pressure and threats to do it immediately.
• Clumsy writing, odd capital letters or strange translations.

How do I check whether I really owe anything?

The method is always the same: close the text and go to the official source yourself.

• M50 tolls: if you have an eFlow account, log in through the official website you type yourself (eflow.ie) or its app. If you don't have an account, you can check and pay a toll by entering your registration on the official site. If there's nothing outstanding, the text was fake.
• Garda fixed charge notices (speeding, mobile phone, seatbelt and similar): these arrive by post with a notice number. Pay only using the details printed on the notice itself. If you're unsure whether a notice is genuine, ring your local Garda station using the number you look up yourself.
• Parking fines and clamping: these come from your local council or a private parking operator, on a ticket or a letter. Contact the council or operator through its official website or the number on the ticket.

What do I do if I already entered my card?

1. Ring your bank now on the number on the back of your card or in its app, and ask them to block the card and issue a new one.
2. If you also entered a code you received by text, or approved a payment in your banking app, tell the bank: there may already be an authorised payment.
3. Watch your account over the following weeks and turn on payment notifications.
4. Be alert to follow-up calls: scammers who have your details sometimes ring pretending to be your bank's fraud team. Your bank will never ask you to move money to a "safe account" or to read out a code.
5. Report it to the Gardaí at your local Garda station, with screenshots of the text and the link.

If your bank won't refund unauthorised payments and you disagree, make a formal complaint to the bank; after that, you can go to the Financial Services and Pensions Ombudsman (FSPO).

Where do I report it?

• Your bank, if you've entered card details.
• An Garda Síochána, at your local station.
• Your mobile operator, through the route it provides for scam texts.
• NoCall, in the spam numbers directory.

The CCPC's guide to phishing and smishing explains the same pattern used with other brands.

Frequently asked questions

I did drive on the M50 recently. Could the text be real? The coincidence proves nothing: lots of people use the M50 every day, so the scammers are bound to hit some of them. Check on the official eFlow site with your registration. If something really is due, you'll see it there.

I don't have a car. Why did I get it? Because these texts are sent in bulk to random numbers. That alone tells you it's a scam.

Do the Gardaí send fines by text? Fixed charge notices are sent by post. Never pay a Garda fine through a link in a text message.

What if I ignore it and it was real? A genuine toll or fine has an official record you can check on the official channels. Ignoring the text doesn't mean ignoring a real debt: check it the right way, without the link.

In short

Toll and fine texts with a payment link are a classic smishing bait. Don't tap; check on the official eFlow site, on your paper notice or with your council. If you've already entered your card, ring your bank immediately and report it to the Gardaí. And report the number in the NoCall spam numbers directory so others are warned.