A sophisticated wave of phishing scams targeting Illinois Tollway users has emerged across the country, with concentrated efforts in the Chicago metropolitan area. These fraudulent texts claim to be from I-PASS or the Illinois Tollway, threatening drivers with fines, license suspension, and other penalties for supposed “unpaid tolls.” The Illinois Tollway Authority has confirmed these messages are not legitimate communications, yet they continue to flood the phones of unsuspecting drivers.
Overview of I-PASS Unpaid Toll Reminder Scams
Since early 2024, drivers across Illinois and beyond have reported receiving increasingly convincing text messages about unpaid tolls. What began as occasional, poorly-worded messages has evolved into a sophisticated phishing campaign targeting millions of drivers.
According to cybersecurity experts at McAfee, tollway scams currently rank among the most prevalent digital threats nationwide. Steve Grobman, Chief Technology Officer at McAfee, notes that these scams are “very, very active across the United States, but in your local community [Chicago area], especially.”
The scammers cast a wide net, sending messages to residents regardless of whether they use toll roads or even own vehicles. This shotgun approach relies on volume—sending millions of messages in hopes that even a small percentage of recipients will click the malicious links.
How the IPASS Toll Payment Text Scam Works
The scam follows a well-established pattern designed to create urgency and fear:
- Initial Contact: Victims receive a text message claiming to be from I-PASS, the Illinois Tollway, or similarly named entities.
- False Claims: The message states that the recipient has an outstanding toll balance that requires immediate payment.
- Pressure Tactics: The text often includes a specific (usually small) dollar amount and a tight deadline, threatening additional fees or penalties—sometimes even license suspension—if not paid promptly.
- Malicious Link: The message includes a link to a fraudulent website designed to look like the official I-PASS or Illinois Tollway site.
- Data Theft: Once on the fake site, victims who enter personal or payment information have their data stolen. This can lead to identity theft, fraudulent charges, or malware installation on their devices.
What makes these scams particularly effective is their timing—they often coincide with when people have recently traveled on toll roads, making the message seem more plausible to recipients who may have legitimately used the tollway.
Text Patterns and Common Variations
These scam messages contain distinctive patterns and language choices that have evolved over time:
Common Message Formats:
- “I-PASS: Unpaid Toll Reminder. You have an outstanding toll payment. The payment is due by [DATE]. If not paid by the due date, additional late fees may apply, and it may result in the revocation of your driver’s license.”
- “Illinois Tollway — Your vehicle has an unpaid toll invoice from [MONTH YEAR]. To avoid excessive fines after the bill is overdue, please pay on time before [DATE].”
- “Illinois Toll Road: Your vehicle has an unpaid toll bill for [YEAR]. [EMOJI] [EMOJI] [EMOJI] Click here to pay your past due bill.”
- “I-PASS PAY BY PLATE: Your recent journey on the Illinois Tollway has resulted in a charge of [$X.XX]. Settle your balance promptly to prevent any additional late fees.”
Evolving Sender Information:
The sender information varies but usually falls into one of these categories:
- Random email addresses: Often using Outlook, Hotmail, or other common email providers (e.g., “[email protected]”)
- International phone numbers: Frequently from the UK (+44), Philippines (+63), or Canada (+1 647)
- Texas area codes: Many recent messages use area codes from Texas (e.g., 903)
- Spoofed names: Some messages appear with names like “Illinois Tollway Services” or “I-PASS Invoice”
Suspicious URLs:
The links in these messages use various tactics to appear legitimate:
- Embedding “getipass” or “illinoistollway” into the URL (e.g., “getipass.com-rlcx.xin/us”)
- Using URL shorteners like bit.ly to hide the actual destination
- Using unusual top-level domains like .xin (Chinese domain) instead of .gov or .com
- Including an official-looking subdomain structure
Official Response from Illinois Tollway
The Illinois Tollway Authority has taken several steps to address this growing threat:
- Public Warnings: The authority has posted prominent warnings on its official website (www.illinoistollway.com) alerting drivers about these fraudulent messages.
- Clarification of Official Communications: The Tollway has emphasized that legitimate communications about unpaid tolls typically come through postal mail, not text messages or emails (unless specifically requested by the customer).
- Reporting Mechanisms: The authority encourages victims to report these scams to:
- The Federal Trade Commission (https://reportfraud.ftc.gov/#/?orgcode=ILTWAY)
- The FBI’s Internet Crime Complaint Center (www.ic3.gov)
- Customer Service Support: The Tollway has instructed concerned drivers to verify any supposed unpaid tolls by:
- Visiting the official website directly (not through links in messages)
- Calling customer service at 1-800-UC-IPASS (1-800-824-7277)
Illinois Tollway officials have confirmed that these scam messages are “not legitimate” and are working with law enforcement to track and stop the fraudsters.
Red Flags: How to Identify IPASS Fake Texts
Being able to identify the warning signs of a scam text can protect you from becoming a victim. Here are the most common red flags to watch for:
1. Sender Information
- Messages from personal email addresses (Gmail, Outlook, etc.)
- International phone numbers or numbers from distant area codes
- Group texts with multiple recipients you don’t know
2. Message Content
- Emojis in official communications (government agencies don’t use them)
- Urgency language (“immediate payment required,” “avoid penalties,” etc.)
- Threats about license suspension or legal action
- Unusually polite closing phrases (“Have a pleasant journey,” “Thank you for your cooperation”)
- Grammatical errors or awkward phrasing
3. Link Characteristics
- URLs that don’t end in .gov for government services
- Links with unusual characters or numbers
- Shortened URLs (bit.ly, tinyurl, etc.)
- Domains ending in .xin or other unusual extensions
- The phrase “com-” followed by random letters in the URL
4. Unusual Instructions
- Directions to reply with “Y” or another letter to “activate” the link
- Instructions to exit and reopen the message
- Requests to copy/paste the link rather than clicking it directly
5. Implausible Claims
- Tolls from states you’ve never visited
- Charges for periods when you weren’t traveling
- Messages to people who don’t own vehicles or use toll roads
How to Protect Yourself from Unpaid Toll Payment Scams
Follow these best practices to stay safe from Illinois Tollway and other phishing scams:
1. Never Interact with Suspicious Messages
- Don’t click links in unexpected texts or emails about tolls
- Don’t reply to the message, even to say “STOP” (this confirms your number is active)
- Don’t call phone numbers provided in the message
2. Verify Independently
- Access your I-PASS account directly through the official website (www.illinoistollway.com)
- Call the official customer service number: 1-800-UC-IPASS (1-800-824-7277)
- Check for unpaid tolls by searching your license plate on the official website
3. Report Scam Attempts
- Forward suspicious emails claiming to be from I-PASS to [email protected]
- Report to the Federal Trade Commission at reportfraud.ftc.gov
- File a complaint with the FBI’s Internet Crime Complaint Center (IC3) at www.ic3.gov
4. Strengthen Your Digital Security
- Enable two-factor authentication on financial accounts
- Use different passwords for different accounts
- Keep your phone’s operating system and apps updated
- Consider using a password manager and security software
5. If You’ve Already Clicked
- Change passwords for any accounts you may have entered credentials for
- Contact your bank or credit card company if you shared payment information
- Monitor your credit reports and financial statements for unauthorized activity
- Consider placing a fraud alert on your credit reports
Frequently Asked Questions
1. Is any “IPASS Unpaid Toll Reminder” text message legitimate?
No. The Illinois Tollway does not initiate contact about unpaid tolls via text message. Legitimate communications about unpaid tolls typically come through postal mail with official letterhead and include specific information about your vehicle and the toll location.
2. What should I do if I already clicked a link in a scam text?
If you’ve clicked a link but didn’t enter any information, you should be relatively safe. However, run a security scan on your device. If you entered personal or payment information, change your passwords immediately, contact your financial institutions, and monitor your accounts closely for fraudulent activity.
3. How do scammers get my phone number for these texts?
Scammers obtain phone numbers through various means, including data breaches, public records, purchased lists, and random number generation. Receiving these texts doesn’t necessarily mean your I-PASS account has been compromised—scammers send messages to millions of numbers regardless of whether recipients use toll roads.
4. How do I check if I actually have unpaid tolls?
Visit the official Illinois Tollway website (www.illinoistollway.com) directly by typing the URL into your browser. You can look up unpaid tolls by license plate number. Alternatively, call the customer service center at 1-800-UC-IPASS (1-800-824-7277).
5. Can I block these scam messages from coming to my phone?
Most smartphones allow you to block specific numbers, but scammers frequently change the numbers they use. You can report the messages as spam, which helps your carrier identify and block similar messages in the future. Some carriers and third-party apps also offer enhanced spam protection services.
Conclusion: Staying Vigilant in the Digital Age
The I-PASS toll scam represents a sophisticated evolution in phishing attacks, targeting an everyday activity that millions of Americans engage in—driving on toll roads. The effectiveness of these scams relies on a combination of widespread distribution, creating urgency, and exploiting people’s fear of legal consequences or financial penalties.
As these scams continue to evolve, the best defense remains awareness and caution. By understanding how legitimate organizations communicate, recognizing the red flags of fraudulent messages, and verifying information through official channels, drivers can protect themselves from becoming victims.
Remember that government agencies like the Illinois Tollway will never:
- Ask you to pay tolls via text message links
- Threaten immediate license suspension over text
- Use emojis or overly casual language in official communications
- Send communications from personal email addresses or international phone numbers
By staying informed and practicing digital vigilance, you can navigate both the physical highways and the information superhighway safely.
