What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Fake unpaid-toll texts impersonate toll agencies and pressure recipients to pay through a link. The FBI’s Internet Crime Complaint Center (IC3) described the campaign in an alert published April 12, 2024. If you receive one, don’t click or reply: check any balance through your toll agency’s independently located official website or phone number, then report and delete the message.
How the fake toll texts work
The FBI IC3 said it had received more than 2,000 complaints since early March 2024 about texts claiming to represent road toll collection services in at least three states. The messages used nearly identical wording, but the sender phone numbers appeared to change between states. The FBI said the activity might be moving from state to state. Read the FBI IC3 alert published April 12, 2024.
The FBI included this example: “(State Toll Service Name): We’ve noticed an outstanding toll amount of $12.51 on your record. To avoid a late fee of $50.00, visit https://myturnpiketollservices.com to settle your balance.” The amounts and URL are part of the FBI’s illustration; they are not a universal template or a legitimate payment destination.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteA toll agency’s name, a plausible charge, or a threat of a late fee does not prove a text is genuine. The FTC explains that the linked page may seek bank or credit-card details and personal information such as a driver’s license number. Urgency is meant to make recipients act before checking the claim. See the FTC’s guidance on fake toll texts.
#1 Best Overall
- PHISHING-RESISTANT 2FA: Cryptographically binds to real domains, making phishing attacks impossible unlike SMS codes or authenticator apps.
- 3-SIDE CAPACITIVE TOUCH: Tap the end, left, or right side to authenticate, so it works in any orientation or crowded USB port.
- MULTI-COLOR LED INDICATOR: Blue means ready, blinking blue means tap now, green means success, and red means error for instant status feedback.
- IP68 WATERPROOF & BATTERY-FREE: Crush-resistant one-piece construction survives daily carry on a keychain or in a bag for years without any batteries.
- UNIVERSAL COMPATIBILITY: Works with Google, Microsoft, Apple, GitHub, AWS, and any FIDO2 / U2F / WebAuthn service, storing up to 100 passkeys.
What “smishing” means
The FBI defines smishing as “A social engineering attack using fake text messages to trick people into downloading malware, sharing sensitive information, or sending money to cybercriminals.” The term combines SMS (short message service) and phishing. In this campaign, the link is the central risk: it can lead to a page designed to collect payment or personal information.
What to do if you get an unpaid-toll text
- Don’t click or reply. An unexpected payment demand is not a safe way to check whether you owe a toll.
- Verify outside the message. Go to the toll agency’s official website by entering its known address yourself, or call a customer-service number found independently. Do not use the text’s link or phone number.
- Report the message. Use your phone’s “report junk” option or forward the text to 7726 (SPAM), as the FTC recommends. To report the incident to the FBI’s IC3, include the originating phone number and the website shown in the message.
- Delete it after reporting and checking your account.
Mobile or FTC spam reporting helps flag unwanted messages; an IC3 report documents suspected internet crime. Checking directly with the toll agency answers a different question: whether your account has a real balance.
Rank #2
- SECURITY KEY FOR ENTERPRISE ACCESS: Supports FIDO2 passkeys and U2F for secure authentication across enterprise IT systems.
- PHISHING-RESISTANT AUTHENTICATION: Enables passwordless login with secure on-device credential storage and PIN-based user verification.
- COMPATIBLE WITH ENTERPRISE SYSTEMS: Works with FIDO2, WebAuthn, and U2F across enterprise, cloud, and modern IT environments.
- DRIVERLESS FIDO2 AUTHENTICATION: FIDO2 works natively with modern browsers and platforms. No drivers required.
- USB AND NFC CONNECTIVITY: Supports authentication via USB-C and NFC. No batteries required.
If you clicked or shared information
If you entered card or bank details, contact the relevant financial institution, secure the affected accounts, and dispute any unfamiliar charges. If you submitted other personal information, take steps to protect the affected accounts and identity. The FBI’s alert does not prescribe one universal paid service or device for recovery.
Why the toll agency’s own policy matters
Text-payment practices differ by agency, so one state’s warning cannot establish the policy for every toll system. The Colorado Transportation Investment Office (CTIO), the independent organization within CDOT responsible for Express Lanes, says it “never uses text messaging to collect any payments or personal information from customers.” Read Colorado’s official scam alert.
Rank #3
- Phishing-Resistant Security: Guard against cyber threats like phishing and credential theft with bank-grade security from OneSpan, trusted by over 60% of the world’s largest financial institutions.
- Effortless, Password-Free Authentication: Experience easy, one-touch security with this FIDO2-certified device. Say goodbye to passwords and hello to secure, passwordless access in seconds.
- Portable and User-Friendly: Compact and easy to use, DIGIPASS FX7 ensures secure access anytime. Simply plug into a USB-C port on a laptop, desktop, tablet, or phone, and tap to authenticate. For added security, a PIN entry option is also available.
- Broad Compatibility: This single security key grants access to over 1,000 FIDO2-enabled services, compatible with Microsoft 365, Google Workspace, AWS, Salesforce, Okta, OneLogin, Ping Identity, and more.
- Plug-and-Play Activation: With a zero-footprint design, DIGIPASS FX7 requires no software installation or complex configuration. Just plug it in, and it’s ready to go.
North Carolina’s NC Quick Pass likewise says it never requests payment by text and identifies links associated with its service as containing ncquickpass.com or secure.ncquickpass.com. Those domains and policies apply to that service; use your own agency’s independently located guidance to check what it does. Read NC Quick Pass’s notice.
What the FBI complaint figures do—and don’t—show
The figures in FBI notices are dated snapshots, not a live nationwide count or a tally of unique victims. In its April 12, 2024 alert, IC3 reported more than 2,000 complaints received since early March 2024, involving at least three states.
Rank #4
- HARDWARE 2FA AND MFA: FIDO Alliance Certified FIDO2 v2.1 with CTAP2 plus legacy U2F and CTAP1 for strong two-factor login and passwordless sign-in on services that support security keys
- BUILDING ACCESS ON ONE CARD: MIFARE DESFire EV2 4K applet with AES encryption adds office door and physical access control alongside digital authentication
- CERTIFIED SECURE ELEMENT: An NXP Common Criteria EAL6+ certified secure controller and Java Card platform protects your keys on a tamper-resistant chip
- DUAL INTERFACE SMART CARD: Contactless NFC ISO 14443 plus ISO 7816 contact reader support in an ISO 7810 ID-1 format that is passive and needs no battery
- SWISS ENGINEERED DESIGN: Built by Cryptnox as a single card for authentication and access control and backed by a 2 year warranty
In a separate March 12, 2025 warning about Peach Pass, FBI Atlanta reported 1,573 complaints in March to that point and 1,720 complaints during the 14-month period from January 1, 2024, through February 28, 2025. The notice also cited $3,643.42 in reported losses at that time and said the actual number of victims was believed to be much larger. Because the periods overlap, these complaint counts should not be added together. They are not a current total or a complete measure of losses. Read the FBI Atlanta notice.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Best Value
- ENTERPRISE ROLLOUT: 25 White PVC cards in one SKU sized for bulk procurement, one card per employee for both web authentication and building access
- HARDWARE 2FA AND MFA: FIDO Alliance Certified FIDO2 v2.1 with CTAP Level 1 for phishing-resistant login and passwordless sign-in where the service supports it
- BUILDING ACCESS: MIFARE DESFire EV2 applet with 4K AES storage adds door and facility access to the same card employees use for account security
- CERTIFIED SECURE ELEMENT: NXP JCOP 4 chip rated Common Criteria EAL 6+ augmented
- DUAL INTERFACE: Tap over NFC (ISO 14443) or use a contact reader (ISO 7816), backed by a 2-year warranty from Swiss company Cryptnox
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
