SunPass scam crackdown: 10 fake websites shut down in Florida texting scam
Florida residents harassed by fake text messages targeting E-ZPass users and demanding unpaid toll fees may see some relief. Florida is cracking down hard on the fast-spreading "smashing" scam and shutting down fake websites, State Attorney General Ashley Moody said Thursday.
"Cybercriminals are sending text messages to thousands of unsuspecting drivers in the hopes that some of them will be tricked into paying a toll fee for a violation that never occurred," Moody said during a press conference at a toll plaza in Orlando.
"While this smishing scam is happening across the nation, our Cyber Fraud Enforcement Unit worked closely with FDLE to shut down 10 fraudulent sites designed to mimic the official SunPass website and steal payments from drivers who received their fake text messages,” she said.
"Florida is particularly susceptible to this emerging threat as it is home to the most toll roads of any state in the nation," Moody said. "More than 700 miles."
What is the Sun Pass scam?
In the scam, Florida residents received text messages notifying them about an outstanding charge on their SunPass toll road payments.
"We've noticed an outstanding toll amount of $12.51 in your record," the text said. "To avoid a late fee of $50.00, visit https://sunpasstollsservices.com to settle your balance."
Tapping the link in the message brought people to legitimate-looking SunPass websites where they would be charged the amount. The sites were fraudulent, Moody said.
This scam is called "smishing," and this version of the SMS scam is a new one that the FBI issued a warning about in April.
Which fake smashing sites did Florida shut down?
The real SunPass website is sunpass.com, but the smashing messages sent people to fake websites. According to Moody, the state's Cyber Fraud Enforcement Unit recently shut down:
sunpass-service.com
sunpass-help.com
sunpass-online.com
sunpass-florida.com
sunpass-toll.com
sunpass-tolls.com
sunpass-express.com
service-sunpass.com
tolls-sunpass.com
web-sunpass.com
What is smishing?
According to the FBI, "smishing" is a "social engineering attack using fake text messages to trick people into downloading malware, sharing sensitive information, or sending money to cybercriminals."
"Smishing" is a combination of "SMS" ("short message service," or what everyone just calls texts now) and "phishing." "Phishing" is a more general term for sending fake messages to try and get you to reveal personal information like credit card numbers or passwords.
Florida a ripe target for scammers: Online crime cost Florida residents $844.9 million in 2022, FBI says, 2nd highest in U.S.
By April 12, the FBI had received over 2,000 complaints from at least three states reporting smishing texts pretending to be road toll services.
What do I do if I get a suspicious text?
Moody provided the following tips for anyone receiving a suspicious text.
Avoid clicking links: Refrain from clicking on any links provided in unsolicited messages, especially those claiming to be from SunPass, E-ZPass or FDOT
Verify the source: Independently confirm the information by contacting FDOT or SunPass using contact information found on an official organization’s website
Check account status: Regularly check an online toll account to add an extra layer of protection
Protect personal information: Do not provide personal or financial information in response to unsolicited messages, emails or phone calls
Register phone number with Do Not Call list: To help block robocalls and spam text messages, register phone numbers at DoNotCall.gov
To report suspicious activity related to SunPass or E-ZPass, Floridians can file complaints at FDLE's Report a Cybercrime webpage. You also can file a complaint with the FBI Internet Crime Complaint Center, www.ic3.gov
This article originally appeared on The Daytona Beach News-Journal: SunPass toll road texting scam crackdown sees fake websites shut down
