Illinois Tollway warns residents about phishing texts. Here's what to know
Hannah HudnallIllinois residents should keep an eye out for a rising text scam asking them to pay unpaid tolls. Though the notices may seem official, the Illinois Tollway warns about the rise in phishing messages seeking to steal your identity.
According to the anti-virus software company McAfee, Chicago is one of the top five U.S. cities getting targeted by scammers, just below Dallas, Atlanta and Los Angeles.
Here's what to know about the phishing texts and what to do if you receive one.
Does Illinois Tollway send texts to collect payments?
No, the Illinois Tollway does not text customers requesting sensitive information. The entity published a statement on its website warning users about the phishing scam.
"Any requests by the Illinois Tollway pertaining to customer account information are made through the tollway's official website," the statement reads. "We DO NOT use non-tollway entities – third-party websites – to collect or modify customer account information."
The tollway notes on its website that it likewise does not send emails requesting your password, social security number or confidential personal information.
Others are reading: Don't click the link! Toll road scammers still sending fake payment requests via text
What do the scam texts look like?
The texts typically claim recipients owe money for unpaid tolls and detail a specific toll amount, saying, "I-PASS Toll Violation Notice: This is a final reminder regarding an outstanding toll balance on your account."
The text then asks recipients to click a link to pay, but this link is not affiliated with the Illinois Tollway.
What to do if you receive scam texts
Recipients are recommended to forward suspicious emails appearing to be sent from the Illinois Tollway to info@getipass.com. The tollway website warns that those receiving suspicious emails or texts should refrain from clicking on any links or attachments and instead delete them from their inbox and deleted items folder.
Users should check their tollyway accounts online at illinoistollway.com to verify the existence of any unpaid tolls or call the website's customer service center at 1-800-824-7277 between 7 a.m. and 7 p.m. on weekdays. You should also file a complaint with the Internet Crime Complaint Center at www.ic3.gov.
How can I tell if a link is fake?
McAfee notes on its website that the texts often vary in style but typically include URLs resembling the real thing. The company compiled a list of some of the most popular link styles spotted in these texts:
- paytollbysuab[dot]top/pay 
- thetollroads-paytollhmm[dot]world 
- thetollroads-paytollxtd[dot]world/us 
- thetollroads-paytollwpc[dot]world/us 
- thetollroads-paytollolno[dot]xin/us 
- thetollroads-paytollktc[dot]world/us 
- thetollroads-paytoll[dot]world/us 
- paytollmit[dot]vip 
- paytollaqs[dot]vip 
- paytollcqb[dot]top/ezdrivema 
What is phishing? What is smishing?
Phishing is pronounced like the word "fishing" and is defined by Illinois Tollyway as "the practice of sending fraudulent email messages that are disguised as legitimate and often include company logos that look real." They are designed to steal money and often start with an official-looking message appearing to be from a trusted source, such as a credit card company or reputable online merchant.
Recipients are directed in the messages to a fraudulent website or asked to open an attachment that may contain potential email viruses. The information obtained is then usually used for identity theft.
Phishing is typically done either via phone call or email.
Smishing is essentially SMS phishing, where the method of trying to steal information is through text messages.
Katie Wiseman and Mary Walrath-Holdridge contributed to this report.