The scammers have a straightforward method of operation. A toll agency initially sends the recipient a harmless-looking text message informing them that they owe money for unpaid tolls that must be paid right away. The victim is directed to a page asking them to enter their credit card or bank account details after clicking on the aforementioned payment link.
Additionally, the Federal Trade Commission (FTC) has cautioned that "it is probably a scam" if a person receives a similar SMS on their phone.
"Not only is the scammer trying to steal your money, but if you click the link, they could get your personal info (like your driver's license number) - and even steal your identity," the Federal Trade Commission stated.
To avoid being tricked, FBI authorities advise people to check their account using the "legitimate website of the toll service [or] call the customer service phone number of the toll service." They should then remove any SMS they received since they include malicious links that could compromise their privacy.
Also Read:Everything you need to know about Apple's upcoming iPhone 17 Air
Who's behind?
According to the research, these "commercial phishing kits" are most likely being created and updated by Chinese cybercriminal organizations. Templates created especially to mimic toll operators throughout several states are included in these packages.These fraudsters have impersonated shipping businesses, tax authorities, and immigration services in addition to the toll authority scam. They frequently target those who are new to a country or in vulnerable situations. Their sole objective is to steal payment card information, store it in mobile wallets, use it to make fraudulent purchases, or use shell corporations to launder money.
Notably, Chinese hackers have already participated in the sophisticated fraud network. In order to spy on consumers, a group of malevolent actors known as "Salt Typhoon"—who are thought to be located in China—infiltrated major US telecom corporations in December, including AT&T, T-Mobile, and Verizon.
FBI authorities advised anyone looking to improve communication security to use accounts secured by phishing-resistant two-factor authentication, devices with responsibly managed encryption, and cell phones that undergo regular operating system updates.