You’re sitting at dinner, your phone buzzes, and there it is: a text claiming you owe $12.51 in unpaid tolls. The message says if you don't pay by tonight, you're looking at a $50 late fee. Maybe even "legal action."
It feels real because, let’s be honest, we all blow through a toll booth occasionally without thinking. But before you tap that link, stop. You are likely looking at the sunpass toll services scam, a massive "smishing" (SMS phishing) operation that has been hammering Florida drivers—and even people who don't own cars—for the last two years.
Why Everyone Is Getting These Texts
This isn't just a random glitch. It’s a coordinated attack. Since early 2024, the FBI’s Internet Crime Complaint Center (IC3) has tracked tens of thousands of these reports. In fact, by early 2025, the number of complaints ballooned past 60,000.
Scammers aren't specifically targeting you because they saw your car on the turnpike. They are using "autodialers" to blast millions of texts to every area code in Florida. They play a numbers game. If they text 500,000 people and just 1% panic and pay the "small" $12 fee, they’ve made sixty grand in a single afternoon.
💡 You might also like: Converting 50 Degrees Fahrenheit to Celsius: Why This Number Matters More Than You Think
The Anatomy of the SunPass Toll Services Scam
The texts are clever. They don't ask for $500; they ask for a believable, small amount like $3.95 or $11.60. It’s a low enough number that most people think, "I'll just pay this and get it over with."
Here is what the fake message usually looks like:
"(SunPass Toll Services): Our records indicate an outstanding toll balance of $12.51. To avoid a $50.00 late fee, please settle your account at [Fake URL]."
📖 Related: Clothes hampers with lids: Why your laundry room setup is probably failing you
Sometimes they get even more aggressive. They might tell you your "account is suspended" or that you need to reply "Y" to see the details. Do not reply. If you reply, you’re just telling the scammer’s computer that your phone number is active and monitored. That makes you a "high-value target" for future scams involving your bank or Amazon account.
The Fake Websites
If you click the link (which you shouldn't), you’ll end up on a site that looks identical to the real SunPass.com. They use the same teal colors, the same logos, and even a fake "Live Chat" button.
The goal isn't just the $12. Once you "log in," they have your SunPass password. Then they ask for your credit card to "pay the balance." Now they have your card. Then, for "verification," they might ask for your Driver's License number or even the last four digits of your Social Security number.
👉 See also: Christmas Treat Bag Ideas That Actually Look Good (And Won't Break Your Budget)
Danny Jenkins, CEO of the cybersecurity firm ThreatLocker, has warned that this data doesn't just stay with the person who sent the text. It gets bundled and sold on the dark web. Your identity could be sold to someone halfway across the world three months after you thought you were just paying a tiny toll fee.
How to Tell It's a Fake (The Real Rules)
Florida’s Turnpike Enterprise and SunPass spokesperson Yasir Mercado have been very clear about how they actually communicate. If you want to know if a message is real, look at these specific markers:
- The Number: Official SunPass texts only come from the short code 786727. If the text is from a standard 10-digit phone number or an international number, it’s 100% a scam.
- The Email: Real emails only come from customerservice@sunpass.com or noreply@sunpass.com.
- The Link: SunPass will never send you to a weird URL like "https://www.google.com/search?q=sunpass-tolls-service.com" or "floridatollpay.net." The only legitimate site is SunPass.com.
- The Tone: Real government agencies don't use high-pressure "scare tactics" via text. They don't threaten "legal action" in an SMS.
Honestly, even if the text looks "sorta" real, the safest move is to just close the message and open your SunPass app or go to the website manually. If you actually owe money, it will show up there.
What to Do If You Already Clicked
Look, it happens. These guys are professionals at making you feel rushed. If you entered your info into one of these fake sites, you need to move fast.
- Call Your Bank: Tell them you were targeted by a phishing scam. They need to cancel your card and issue a new one immediately.
- Change Your Passwords: If you used your SunPass login, change it. If you use that same password for your email or bank, change those too.
- Freeze Your Credit: This is the big one. If you gave away your DL number or any part of your SSN, go to Equifax, Experian, and TransUnion and put a freeze on your credit. It takes five minutes and stops scammers from opening new loans in your name.
- Report It: The Florida Attorney General’s Office and the FDLE have already shut down hundreds of these sites, but new ones pop up daily. Reporting the URL you received to IC3.gov helps the feds track where the servers are hosted.
Actionable Next Steps to Stay Safe
Instead of worrying every time your phone pings, take these three steps right now to protect your data:
- Enable Silence Unknown Senders: On your iPhone or Android, go to your message settings and filter unknown senders. This shunts these scam texts into a separate folder so you don't even see the notification.
- Use the Official App: Download the SunPass app from the official App Store or Google Play. Make it your habit to only check balances through the app, never through a link in a text.
- Check Your "Invoice by Plate": If you don't have a SunPass but still drive on Florida's toll roads, you’ll get a paper invoice in the mail. Florida does not send "pay-by-plate" notices via text message. If it's not a physical piece of mail in your mailbox, ignore it.