A sophisticated phishing campaign targeting Oklahoma drivers has escalated in recent months, with scammers posing as the Oklahoma Turnpike Authority (OTA) to defraud unsuspecting victims. These fraudulent text messages claim recipients owe unpaid toll fees and direct them to deceptive websites designed to steal financial information. As the scam spreads nationwide, authorities are warning residents to remain vigilant.
The Anatomy of the PikePass Pay Online Text Scam
What began as scattered phishing attempts has evolved into a coordinated nationwide scam. Since April, drivers across Oklahoma have reported receiving text messages that falsely claim to be from PikePass or E-ZPass, demanding payment for allegedly outstanding toll balances.
“This has been a nationwide issue starting in April,” said Lisa Shearer-Salim, Oklahoma Turnpike Authority spokesperson. “This scam has hit multiple tolling authorities, including OTA.”
The scammers have grown increasingly sophisticated, creating convincing replicas of official websites and using urgent language to pressure recipients into immediate payment. The most concerning aspect of this scam is its precise targeting—many messages are being sent to actual toll road users, suggesting the scammers may have access to some form of location or travel data.
How the Scam Works
The operation follows a predictable pattern:
- Initial Contact: Victims receive a text message claiming to be from PikePass, E-ZPass, or another toll authority stating they have an outstanding balance
- Creating Urgency: The message threatens penalties, legal action, or additional fees if payment isn’t made immediately
- Deceptive Link: Recipients are directed to click on a link that leads to a fraudulent website mimicking official toll authority pages
- Data Theft: Once on the fake site, victims are prompted to enter personal and financial information
Unlike legitimate communications from the Oklahoma Turnpike Authority, which primarily come through email or postal mail, these scam texts create artificial time pressure to override the victim’s natural skepticism.
Text Message Patterns to Watch For
The fraudulent messages often share several common elements that can help you identify them as scams. Here are actual examples of scam texts reported by Oklahoma drivers:
E-ZPass Final Reminder: You have an outstanding toll. Your toll account balance is outstanding. If you fail to pay by April 17, 2025. You will be penalized or subject to legal action. Now Payment: https://ezpass.com-wqh.win/pay (Please reply Y, then exit the SMS and open it again to activate the link, or copy the link to your Safari browser and open it)
E-ZPass Payment Reminder: Dear user, your E-ZPass account balance is insufficient or there are unpaid toll fees. Please complete the payment before the deadline to avoid affecting normal use or incurring additional fees. https://e-zpass.org-ile.vip/indexshtml
Your vehicle has a toll invoice in Oklahoma. To avoid a late fee of $35, the balance of $4.15 needs to be settled promptly. Click here to pay: [Malicious Link]
Key red flags in these messages include:
- References to “E-ZPass” instead of “PikePass” (Oklahoma uses PikePass, not E-ZPass)
- Suspicious URLs with unusual extensions (.win, .vip, .xin)
- Domain names that attempt to mimic official sites but include hyphens and extra text
- Messages sent from international phone numbers (particularly with +44, +63, or +86 prefixes)
- Unusual instructions like “reply Y, then exit the SMS”
- Urgent deadlines and threats of excessive penalties
Official Warning from the Oklahoma Turnpike Authority
The Oklahoma Turnpike Authority has issued multiple warnings about these fraudulent messages. Officials emphasize that the OTA rarely communicates via text message and would never demand payment through text links.
“If you have even an inkling of uncertainty, don’t click the link,” advised Shearer-Salim. “Check your account. Call us. Email us. We want to make sure you are not being defrauded.”
The OTA is actively working to combat this fraud by identifying and removing fraudulent websites, but the scammers frequently change their tactics and create new fake sites. Even more concerning, the OTA warns that paying these scammers doesn’t absolve drivers of legitimate toll responsibilities—meaning victims could end up paying twice.
Is Any PikePass Toll Payment Text Legitimate?
With all these warnings about scam texts, Oklahoma drivers may wonder if the OTA ever sends legitimate text messages. According to Lisa Shearer-Salim, text communication from the OTA is extremely limited:
“We want our customers to know that the majority of the ways we communicate are through email,” Shearer-Salim stated. “There’s only a very minimal amount of texting that we do.”
The OTA does occasionally conduct data collection through text with a company called Harris & Harris. These legitimate texts have specific identifiable features:
- They will display the Harris & Harris logo
- They will also display the OTA logo
- They will not contain urgent payment demands
- They will not request personal financial information
If you receive a text about toll payments that lacks these official markers, it should be considered suspicious.
How to Protect Yourself from PikePass Toll Payment Scams
Oklahoma drivers can take several steps to avoid falling victim to these increasingly sophisticated scams:
1. Verify Through Official Channels
Rather than clicking on links in text messages, go directly to the official websites:
- For PikePass accounts: pikepass.com
- For PlatePay accounts: platepay.com
You can check your account status by entering your license plate number. As Shearer-Salim noted, “If it doesn’t say search by license plate, you are probably on the wrong website.”
2. Contact Customer Service Directly
If you’re uncertain about a communication regarding toll payments, contact the OTA directly:
- Call: 1-800-PIKEPASS
- Email: through the official website
- Visit: an OTA customer service center in person
3. Be Skeptical of Urgent Demands
Legitimate toll authorities typically provide reasonable time frames for payment and send multiple notifications before imposing penalties. Be wary of any message creating extreme urgency or threatening immediate legal action.
4. Check the Sender
Legitimate communications from toll authorities will come from recognizable official domains and phone numbers. International phone numbers (especially those starting with +44, +63, or +86) are a major red flag.
5. Protect Your Personal Information
Never provide credit card information, banking details, or personal identifying information in response to an unsolicited text message.
Frequently Asked Questions
1. Is the Harris & Harris PikePass text legitimate?
Yes, the OTA does work with Harris & Harris for certain data collection purposes. However, legitimate texts from this partnership will always display both the Harris & Harris logo and the OTA logo. If these logos are absent, the text is likely fraudulent.
2. How can I tell if I actually owe toll fees?
Check your account status through the official PikePass website (pikepass.com) or PlatePay website (platepay.com), or call the official customer service line at 1-800-PIKEPASS. Never rely on information provided in unsolicited text messages.
3. What should I do if I’ve already clicked on a scam link?
If you’ve clicked a suspicious link but haven’t entered personal information, close the browser immediately. If you’ve provided financial information, contact your bank or credit card company immediately to report potential fraud. Consider placing a credit freeze with the major credit bureaus and monitor your accounts closely for unauthorized charges.
4. Will ignoring a text about unpaid tolls result in penalties if I do actually owe money?
No. The OTA primarily communicates about unpaid tolls through email or postal mail. Ignoring suspicious texts will not impact your legitimate toll account status. However, you should regularly check your account through official channels to ensure you don’t have outstanding balances.
5. Can these scammers access my PikePass account?
No, receiving a scam text doesn’t mean scammers have access to your actual PikePass account. However, if you’ve entered your login credentials on a fraudulent website, you should immediately change your password on the legitimate PikePass website and monitor your account for unauthorized activity.
What to Do If You Receive a Suspicious Text
If you receive a text message claiming to be from PikePass or another toll authority:
- Don’t click any links in the message
- Don’t reply to the message
- Report the message to the Internet Crime Complaint Center at ic3.gov or the Federal Trade Commission at ReportFraud.ftc.gov
- Forward the message to 7726 (SPAM) to report it to your mobile carrier
- Block the number to prevent future messages
- Verify your account status through official channels
By staying vigilant and following these guidelines, Oklahoma drivers can protect themselves from becoming victims of these increasingly sophisticated scam attempts.
Remember: The Oklahoma Turnpike Authority will never pressure you to make immediate payments through text message links. When in doubt, go directly to the official website or call customer service to verify any communications about your toll account.
