Technology Advisor Blog

If you frequently travel for work around the Massachusetts area (or even beyond), you may have noticed an alarming rise in text scams known as smishing pretending to be from E-ZPass. These fraudulent messages claim that you owe unpaid tolls from recent travel, and they often pressure you to make an immediate payment on unpaid toll bills. E-ZPass recently has issued a mass email warning of its customers. These scams are not just isolated to New England, they have spread as far as California, where their toll system is known as FastTrak.

These fraudulent texts are part of a growing wave of scams that impersonate local toll services. Some colleagues have personally received scam texts from numbers starting with +63. Following in the unsolicited text messages includes a suspicious link to a fake website designed to look like a legitimate E-ZPass page. Unfortunately, this scam is becoming more sophisticated, with links that appear authentic and messages that seem credible at first glance. However, there are certain red flags that can help you avoid falling victim to this scam.

How the E-ZPass Scam Works

Typically, the text message will appear and say your account has an unpaid toll ranging from $3.95 to sometimes $12.55 for example. The amount has given the impression that the message is legitimate, causing those to let their guard down and potentially be tricked.

However, don’t be fooled: these scammers aren’t after your ‘unpaid’ toll payment. What they really want is your personal and financial information. Clicking on the malicious link directs you to a fake website that looks like the official E-ZPass site, where scammers can steal your login credentials, bank details, and other sensitive data.

Red Flags to Look Out For

Here are a few things to watch for to help you spot a scam:

• Unfamiliar Number: The text may come from an unusual number, such as a +63 number, which is not associated with legitimate toll services. They can come from any unsolicited number and are not uniquely associated with an account or usage of toll roads. E-ZPass will never send invoices or payment requests by text
• Suspicious Links: Be cautious of links that don’t match the official toll agency website or seem slightly off. Always double-check the URL.
• Misspellings or Poor Grammar: Scam texts often contain mistakes, so if you spot any errors or awkward phrasing, it’s likely a scam.
• Claims of Untraveled Locations: If you receive a message claiming that you owe tolls for traveling in a state where you’ve never been, it’s a clear indication that the message is fraudulent.

How to Protect Yourself

• Don’t Click on Links: If you receive a text that claims to be from EZ-Pass, don’t click on any links. For EZ-Pass, the link will include www.EZDriveMA.com for example.
• Verify Directly: If you’re concerned that you might owe money to EZ-Pass, visit the official website directly or use their app to check your account status.
• Report Suspicious Messages: If you receive a suspicious text or email, report it to the Internet Crime Complaint Center (IC3) at ic3.gov. Include the phone number from which the message originated and the website link in the message. This series of smishing scams is made known by the FBI.
• Contact The Toll Service’s Customer Service Phone Number.
• Delete All Smishing Texts Received.

What to Do If You’ve Fallen for the Scam

If you’ve already fallen victim to the scam, don’t panic. Here’s what you need to do immediately:

1. Call Your Bank and Credit Card Companies: Freeze your accounts and monitor for any unauthorized charges. You may need to dispute any fraudulent transactions that may have occurred.
2. Change Your Passwords: Immediately change your EZ-Pass login, as well as passwords for any affected accounts (such as online banking or credit cards).
3. Monitor Your Accounts: Keep an eye on your bank and credit card statements for any unusual charges and be prepared to dispute any transactions that you didn’t authorize.

How Ekaru Can Help Protect You

In the face of growing cyber threats like these EZ-Pass scams, partnering with an MSP such as Ekaru can help protect your personal and business data. Here’s how Ekaru can be of assistance:

1. Advanced Threat Protection: Ekaru provides robust email and SMS filtering systems that can help block phishing messages and scams before they reach your phone or inbox.
2. Multi-Factor Authentication (MFA): We can implement multi-factor authentication (MFA) on your accounts, adding an extra layer of security in case your login information is compromised.
3. Endpoint Protection: With enhanced endpoint protection, Ekaru ensures that any malicious website you visit is immediately blocked, protecting your personal and financial data from being stolen.
4. Assist in Incident Response Services: If you accidentally click on a scam link or fall victim to a phishing attempt, Ekaru will assist with a full incident response team to quickly guide you through the necessary steps, such as securing your accounts and reporting the fraud to the authorities.

At Ekaru, we will ensure you feel confident that your digital security is proactively managed. Acting as a shield against growing threats, providing you with peace of mind as you continue your work or business without fear of falling victim to smishing scams like the EZ-Pass.

Final Thoughts

EZ-Pass smishing scams are becoming more sophisticated and quite bothersome, but by staying vigilant and informed, you can protect yourself from becoming a victim. Always be cautious when receiving unexpected text messages asking for payment requests, especially if they involve the user taking urgent action. Remember, EZ-Pass will never ask you for payment via text message. If in doubt, verify through official channels before proceeding.

Stay safe out there and always think before you click!