Transportation Corridor Agencies Alerts Customers of Nationwide Phishing Scam for Tolls

The Transportation Corridor Agencies (TCA), operator of The Toll Roads, is alerting customers to a text message-based scam designed to deceive drivers into entering banking or credit card information into a website, fraudulently claiming to represent tolling agencies and requesting payment of unpaid tolls. Drivers in several states across the U.S. have been targeted. If a consumer receives an unsolicited text message stating an outstanding toll balance, it is advised to not click on the link. 

The Toll Roads accountholders can verify a valid text notification by logging into their account at thetollroads.com or through The Toll Roads app. On the dashboard, scroll down to account security and click “Notification Verification” or use the direct link at https://secure.thetollroads.com/accounts/notification-verification. Customers can also call our Customer Service Center at (949) 727-4800 during normal business hours. 

To help identify phishing, smishing (SMS phishing) and spam emails you can view all official communications sent by The Toll Roads and the Transportation Corridor Agencies at the link above. Official communications from The Toll Roads will never include requests for your account credentials, such as your username or password. The Toll Roads do NOT send text messages to non-accountholders.

Those who believe they have received a fraudulent text can file a complaint with the FBI’s Internet Crime Complaint Center at, a site dedicated to sharing information on Internet crimes across law enforcement agencies, at www.ic3.gov, a site dedicated to sharing information on Internet crimes across law enforcement agencies.
If you receive one of these texts, the following is suggested by the FBI:

1. File a complaint with the FBI Internet Crime Complaint Center (IC3), www.ic3.gov, be sure to include:
   1. The phone number from where the text originated.
   2. The website listed within the text.
2. Check your account using the toll service's legitimate website.
3. Contact the toll service's customer service phone number.
4. Delete any smishing texts received.
5. If you clicked any link or provided your information, make efforts to secure your personal information and financial accounts. 

Definition for Smishing: A social engineering attack using fake text messages to trick people into downloading malware, sharing sensitive information, or sending money to cybercriminals. "Smishing" combines "SMS"—or "short message service," and "phishing." "Phishing" generally pertains to attacks on the internet, email, or websites.

The Transportation Corridor Agencies (TCA) are two joint powers authorities formed by the California Legislature in 1986 to plan, finance, construct and operate Orange County’s public toll road system comprised of the 73, 133, 241 and 261 Toll Roads, which represents 20% of Orange County’s highway system.