FBI Warns of Nationwide Smishing Scam Targeting Smartphone Users

WASHINGTON, D.C. — The Federal Bureau of Investigation (FBI) is alerting smartphone users across the United States about a dangerous new wave of fraudulent text messages, known as smishing, which are designed to steal personal and financial information.

Cybercriminals have exploited over 10,000 newly registered domains to launch these attacks, which typically impersonate toll road services and delivery companies. The FBI’s Internet Crime Complaint Center (IC3) reported receiving over 2,000 complaints about these fraudulent toll payment messages since early March 2024.

The smishing texts often claim that the recipient owes money for unpaid tolls, urging immediate payment to avoid late fees. “The texts claim the recipient owes money for unpaid tolls and contain almost identical language,” the FBI stated. “However, the link provided within the text is created to impersonate the state’s toll service name, and phone numbers appear to change between states.”

One example of a common message reads, “(State Toll Service Name): We’ve noticed an outstanding toll amount of $12.51 on your record. To avoid a late fee of $50.00, visit [fraudulent website link] to settle your balance.”

Authorities emphasize that legitimate toll agencies do not send payment requests via text. For instance, Michigan’s Department of Transportation (MDOT) clarified that staff do not contact customers through text messages regarding toll payment notifications.

The Federal Trade Commission (FTC) warns that clicking on these links not only risks financial theft but also exposes victims to identity fraud. The FBI advises users to avoid responding to or clicking any links in suspicious text messages. “Even replying to the message can confirm to scammers that your number is active, increasing the risk of further attacks,” the agency noted.

Cybersecurity experts believe that these scams may operate using a franchise model, leveraging toolkits from international cybercriminal groups. Notably, many malicious domains related to these scams utilize China’s .XIN top-level domain.

Authorities have identified Dallas, Atlanta, Los Angeles, Chicago, and Orlando as the top five cities targeted by these text scams. Reports indicate a fourfold increase in these fraud attempts since January, prompting officials in Virginia, Maryland, Indiana, North Carolina, Georgia, and Ohio to issue public warnings.

Louisiana Attorney General Liz Murrill shared her own experience with receiving one of these texts, urging residents to remain vigilant. “I received this text as well. It is a scam. If you ever receive a text that looks suspicious, be sure to never click on it. You don’t want your private information stolen by scammers,” she stated.

Victims of smishing scams are advised to take immediate action by checking their financial accounts, deleting any suspicious messages, and reporting the scams to the appropriate authorities. The FBI recommends filing a complaint with the IC3 and reporting any fraudulent messages to their mobile carrier.

The FBI’s warning serves as a critical reminder for individuals to exercise caution with unsolicited text messages. “If you receive one of these texts, the following is suggested: file a complaint with the IC3, check your account using the toll service’s legitimate website, contact the toll service’s customer service phone number, and delete any smishing texts received,” the agency advised. For more information on protecting oneself from cyber threats, individuals can visit the FBI’s IC3 website at www.ic3.gov.