TLDR
The 'unpaid toll' / 'traffic violation' text scam (E ZPass, road tolls, parking fines) remains one of the highest volume smishing campaigns. As people learned to distrust links in texts, 2026 campaigns increasingly embed a QR code inside a...
How it works
The 'unpaid toll' / 'traffic violation' text scam (E ZPass, road tolls, parking fines) remains one of the highest volume smishing campaigns. As people learned to distrust links in texts, 2026 campaigns increasingly embed a QR code inside a...
Red flags
- Urgent pressure to click, pay, or share codes immediately.
- A link or sender that does not match the official organization.
- Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What to do
- 1Defence: never pay via a link/QR from an unsolicited message; go to the official toll/authority site directly; report the number/notice; if you entered card details, call your bank's anti fraud line and request a block/chargeback.
Source
Malwarebytes-Labs
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/news/2026/04/traffic-violation-scams-swap-links-for-qr-codes-to-steal-your-card-detailsFAQ
Is Toll & traffic violation smishing evolves to QR 'quishing' (2026): fake unpaid toll texts now hide a QR to a card stealing page a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What should I do first?
Defence: never pay via a link/QR from an unsolicited message; go to the official toll/authority site directly; report the number/notice; if you entered card details, call your bank's anti fraud line and request a block/chargeback.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.