Phishing Text Scam: Notice of Toll Evasion

Phishing Text Breakdown 

This text message is a phishing attempt designed to scare the recipient into making a payment by creating a false sense of urgency about a supposed toll evasion violation. It provides a fake payment site to trick the recipient into submitting personal and financial information. Always verify any claims through official channels before clicking links or making payments. 

Visual Example of the Phishing Text 

Full Text from the Phishing Attempt 

The toll Roads Notice of Toll Evasion 

Our records indicate that your vehicle has been involved in a toll evasion incident. This is a violation of the toll payment regulations and may result in additional penalties, including fines and suspension of access to toll roads. 

To avoid further action, please settle the toll payment within 12 hours. Failure to pay within the specified time will result in increased fines and may be reported to the RMV (Registry of Motor Vehicles). 

We urge you to make the necessary payment promptly to avoid any complications. 

{fake payment site} 

(Please reply “Y”, then exit this message and open it again to activate the link, or copy the link to your Safari browser to proceed with payment.) 

Thank you for your prompt attention to this matter. 

How to Protect Yourself? 

1. Watch Out for Emotional Triggers: Phishing emails often use fear, sympathy, or urgency (e.g., “Your account will be closed immediately!”) to push users into acting without thinking. Pause, reevaluate the request, and confirm its legitimacy before responding.  
2. Verify the Sender: Always verify the identity of individuals claiming to be someone important, especially if the message seems out of the ordinary and asks for personal information. 
3. Avoid Clicking on Suspicious Links: Hover over or copy the link to view the complete domain name. Scammers often create URLs that resemble authentic ones by inserting subtle misspellings or extra characters. If the link looks suspicious, it’s safer to visit the official website directly or use a reputable search engine to find the correct webpage. 

Important Notes: 

1. Report Suspicious Messages: Reporting phishing attempts helps prevent others from falling victim to these attacks. Send suspicious messages to is-spam@mcmaster.ca for review and investigation. 
2. Educate Yourself: Learn about common phishing tactics. Consider participating in the Information Security Training Program to protect against cyber threats and secure your digital world.