Four state motor vehicle agencies issued nearly identical fraud alerts within a matter of weeks this year, each describing the same text message: a claim that you owe an unpaid toll, a threat of late fees or suspended registration, and a link asking for your card number. California’s DMV, Virginia’s DMV, the Iowa DOT and Delaware’s DMV all told drivers the same thing without coordinating a joint statement — because they were independently watching the identical scam land in their residents’ phones. New Jersey’s state cybersecurity office and Washington’s Department of Licensing have logged versions of it too. None of these agencies send payment demands by text. All of them are now spending real staff time telling people that.

The pattern matters more than any single alert. When toll authorities, DMVs, and state IT security offices across the map describe the same script, the same urgency language, and the same fake-payment-page mechanic, it stops looking like isolated spam and starts looking like an organized smishing operation cycling through every state with toll roads or vehicle registration fees — which is nearly all of them.

What The Text Actually Says

The wording varies slightly by state, but the structure is identical everywhere it has been reported. The message claims an outstanding toll or traffic violation, warns of a real-world consequence — a late fee, a suspended license, a blocked registration renewal — and supplies a link. According to California’s DMV, the texts “falsely claim recipients have unpaid toll fees and threaten immediate charges or penalties if not paid” through the embedded link. Virginia’s DMV describes the same setup: fraudsters impersonating toll agencies, urgent demands to avoid late fees, a link built to harvest personal data rather than actually process payment.

The Iowa DOT’s March 2026 alert adds a detail worth remembering: the fake site the link leads to is frequently designed to resemble the state agency’s own website, “many times” close enough that a distracted driver would not think twice before entering a card number. Iowa’s alert also makes a point that undercuts the entire scam at its foundation — the agency does not collect tolls on any Iowa road or bridge in the first place, so a toll-related text supposedly from Iowa DOT is fabricated by definition.

 

 

Four States, One Script

Delaware’s version, detailed in a January 2026 state alert, swaps tolls for a generic “traffic violation” but keeps the same skeleton: an urgent deadline, a threat to suspend registration, and a link. DMV Director Amy Anthony’s advice was blunt: “Please, no matter who the message is from, don’t click on a link to initiate a payment” unless you are certain it is legitimate, adding that “if it looks suspicious, it probably is.” Delaware’s release also states plainly that the DMV and E-ZPass Delaware will never contact customers by email or text demanding payment for violations — a policy nearly every other state agency issuing these warnings has echoed word for word.

New Jersey’s state threat-intelligence unit has separately tracked what it calls large-scale toll-violation smishing campaigns hitting residents statewide, and Washington’s Department of Licensing maintains an active scam-alert page for the same text. Multiply that across the states that have gone public, and the geographic spread of a single scam script becomes hard to dismiss as coincidence.

Why It Works On Drivers Specifically

The scam is built around a psychological shortcut that targets people who drive. Most drivers who use toll roads have, at some point, genuinely forgotten to pay a cashless toll or gotten a real notice in the mail weeks later. That sliver of plausibility is the entire con — the text does not need to be convincing, it just needs to land on someone who has a flicker of doubt about whether they might actually owe something. Combine that with a hard deadline and a threat to your ability to drive, and the click happens before the skepticism does.

Virginia DMV Commissioner Gerald Lackey put the fix in the simplest terms available: “The DMV will never send you text messages about toll bills. We urge our customers to be vigilant and avoid sending your personal information via text.” That single fact — no state DMV or toll authority initiates payment collection by text message — is the one piece of information that defeats the entire scheme regardless of how convincing any individual message looks.

The Actual Tell-The-Difference Checklist

• Do not tap the link. Ever. Not to “check,” not to see if it looks real.
• Go directly to your state DMV or toll authority’s website by typing the address yourself, or call the number printed on your toll transponder statement or registration card — never a number in the text.
• Report the message using your phone’s built-in “report junk” feature, or forward it to 7726 (SPAM), a step both Virginia and Iowa recommend specifically.
• If you already clicked and entered information, contact your bank or card issuer immediately to dispute charges, and file a report at reportfraud.ftc.gov or ic3.gov.
• Check your actual toll account or DMV record directly through the agency’s verified app or site — not through anything a text message told you to visit.

What makes this wave different from ordinary spam is the coordination visible only in hindsight: separate state agencies, months apart, independently describing the same script because it is the same script. The scam does not need to fool everyone. It needs a fraction of a percent of everyone who drives to click once, and with toll roads and vehicle fees touching nearly every American household, that fraction adds up to real money moving out of real bank accounts before a single official warning ever reaches them.