Residents across the United States are being inundated with text messages purporting to come from toll road operators like E-ZPass, warning that recipients face fines if a delinquent toll fee remains unpaid. Researchers say the surge in SMS spam coincides with new features added to a popular commercial phishing kit sold in China that makes it simple to set up convincing lures spoofing toll road operators in multiple U.S. states.

"The ultimate goal of these kits, he said, is to phish enough information from victims that their payment cards can be added to mobile wallets and used to buy goods at physical stores, online, or to launder money through shell companies."

https://krebsonsecurity.com/2025/01/chinese-innovations-spawn-wave-of-toll-phishing-via-sms/

Chinese Innovations Spawn Wave of Toll Phishing Via SMS – Krebs on Security

@briankrebs it may be useful to readers to examine url payment links carefully. In this scam they often end in .top even if other parts of the url look like EZPass or USPS in the case of mail scams. .top is a China-centric top level domain that is cheap to set up on.
Highway Robbery 2.0: How Attackers Are Exploiting Toll Systems in Phishing Scams

Censys