The NYTollServices scam is a smishing operation that invents a fake “NYTollServices” brand name to impersonate New York toll authorities. Unlike the sister scams that copy real toll-agency branding, the NYTollServices scam uses a brand that simply does not exist. New York has no single entity called “NYTollServices” — toll collection across the state is handled by E-ZPass NY for transponder users and Tolls by Mail NY for non-E-ZPass drivers, plus various agency operators including MTA Bridges and Tunnels and the NY State Thruway Authority.

Victims of the NYTollServices scam receive a text message claiming a small unpaid toll balance and a link to “pay now” — the link leads to a phishing site that harvests card details, names, and addresses. The fictional NYTollServices brand sounds plausible enough that many recipients do not realise it is invented, particularly out-of-state visitors who are unfamiliar with how New York actually administers its tolls.

The NYTollServices scam is part of a much larger toll-smishing wave that has hit every major US toll authority since 2024. The same criminal infrastructure that runs the NYTollServices scam also runs near-identical campaigns impersonating RiverLink in Kentucky and Indiana, BayAreaFasTrak in California, the Ohio Turnpike, the Illinois Tollway, NC Quick Pass, and the Maryland DriveEzMD system. Only the brand label changes — the playbook is identical.

What makes the NYTollServices scam particularly effective is the fictional brand itself. Because there is no real organisation by that name to verify against, victims who try to look it up online often find the criminals’ own look-alike phishing sites in the top search results rather than an official rebuttal. This is why the NYTollServices scam succeeds where a name-aware victim would otherwise spot the fraud.

Despite the invented branding, the scam follows the same playbook as every other smishing fraud: a believable-sounding sender, a small urgent amount, a look-alike domain, and a payment form that captures card data. The same approach is documented in our phishing scam pillar, the Illinois Tollway Invoice Scam sister guide, and the traffic violation text scam broader category guide.

The NYTollServices scam follows the same six-stage pattern used by every smishing campaign that has hit US toll authorities since 2024. Recognising the structure makes the individual warning signs easier to spot before any payment information is entered.

Step 1: The Phone Number Harvest

The NYTollServices scam begins with bulk phone-number lists. The criminals buy or obtain millions of US mobile numbers from data brokers, leaked breach dumps, and dark-web marketplaces. The lists are not filtered by New York residency — anyone with a US mobile number is a potential target.

This is why people who have never driven in New York — or even visited the East Coast — still receive the smishing text. The criminals do not know or care whether the recipient has any genuine reason to interact with any New York toll system. The volume of texts sent means even a tiny conversion rate is profitable.

Step 2: The Smishing Text

The NYTollServices scam text arrives looking convincingly official. A typical message reads: “NYTollServices: You have an outstanding toll balance of $12.90. To avoid late fees and DMV holds, please pay immediately at nytollservices-pay.com/balance/[random-string].” Sender names include “NYTollServices,” “NY Toll Services,” “New York Toll Bureau,” or numeric short codes.

The text deliberately uses official-sounding language — “Toll Services,” “Bureau,” “Authority” — to lend the invented brand legitimacy. The NYTollServices scam also uses iMessage delivery where possible to add the apparent legitimacy of a blue-bubble message rather than an SMS short code, and to bypass carrier-level spam filtering.

Step 3: The Look-Alike Domain

The link in the smishing text points to a domain built around the fake brand — nytollservices.com, nytollservices-pay.com, nytollservices-bureau.com, ny-toll-services.live, or hundreds of similar variations. Because the brand itself is invented, the criminals can register any “NYTollServices” domain they want without competing against a real authority for the name.

None of these domains are legitimate New York toll websites. The real domains are ezpassny.com and tollsbymailny.com. Any link in the NYTollServices scam pointing anywhere else — including domains that combine “NYTollServices” with anything else — is fraudulent infrastructure designed to harvest card data.

Step 4: The Phishing Form

When the victim clicks the link, the NYTollServices scam landing page renders a professional-looking payment portal with copied logos and styling pulled from real toll agencies. The victim is prompted to enter a name, address, phone number, and full card details — including the CVV — to pay the small claimed amount.

The form processes the payment for the trivial sum, then thanks the victim and closes. To the victim, the NYTollServices scam appears resolved. In reality, the card details have been captured and the larger fraud is just beginning.

Step 5: Card Monetisation

Once the criminals have card details from the NYTollServices scam, monetisation begins. The card is typically used for high-value online purchases routed through reshipping mules, or sold in bulk on dark-web markets to other criminals. The small “toll payment” was a tiny test charge to verify the card was live.

Victims of the NYTollServices scam often see fraudulent charges appear within hours or days. The amounts vary from a few hundred dollars to thousands. Card issuers usually reverse the charges under zero-liability policies — but only if the victim reports promptly.

Step 6: Identity Layer-On

Beyond the immediate card fraud, the NYTollServices scam often harvests enough personal data to feed downstream identity theft. Name, address, phone, and card number provide a foundation that criminals combine with data from other breaches to attempt new-account fraud, mobile carrier port-outs, and synthetic identity theft. This is why the NYTollServices scam overlaps with our identity theft scams guide.

The NYTollServices scam is one of many regional smishing campaigns that share the same underlying infrastructure and playbook. The criminal networks rotate the impersonated brand based on the state list they are targeting — but the warning signs are identical. These are the five sister variants of the fraud.

The Manhattan Business Traveller and the $12.90 Balance

A 46-year-old consultant based in Manhattan received a NYTollServices scam text claiming a $12.90 unpaid toll balance. Because he had recently driven across the Verrazzano Bridge for a client meeting, the message seemed credible. He clicked the link, which led to a professional-looking payment page at nytollservices-pay.com, and entered his debit card details.

Two days later, $250 had been withdrawn from his checking account in three separate transactions. His bank reversed the fraudulent charges and issued a new card — but the criminals had also harvested his name, address, and phone number, which began appearing on phishing lists for unrelated frauds over the following months.

The lesson: if he had paused to look up “NYTollServices” online before paying, he would have discovered no such organisation exists. The NYTollServices scam works only because victims do not verify the brand name itself. Real New York toll bills come from E-ZPass NY or Tolls by Mail NY — not from “NYTollServices.”

The Concerned Mother and the Credit Inquiries

A 38-year-old mother of two in Queens received a NYTollServices scam email warning that her account was overdue and that further delays would lead to “vehicle registration suspension.” Fearing it might affect her car registration before the school run, she clicked the link and entered her card details, address, and date of birth.

Over the following weeks she noticed multiple credit inquiries on her credit file and two attempted credit card applications in her name that were flagged and denied by the issuers. She had to freeze her credit at all three bureaus and dispute every entry — months of work caused by a single click on what turned out to be the NYTollServices scam.

The lesson: scare tactics about DMV holds and vehicle registration are designed to override the natural pause that would otherwise lead to verification. Real DMV consequences from unpaid tolls take months to materialise and are always preceded by mailed notices — never triggered by a single SMS or email demand.

The Retiree and the $600 Phone Call

A 71-year-old retiree in Long Island received a robocall purporting to be from “NY Toll Services” — the call had clearly evolved from the text-based NYTollServices scam into a voice-based variant. The automated voice claimed an immediate payment was needed to avoid a court summons. He followed the instructions and gave his bank account number over the phone.

$600 was withdrawn from his account before his bank’s fraud team intervened. The bank reimbursed him after a four-week dispute process. The harvested details continued to be sold and reused for months — he received more than 30 follow-up smishing attempts from the same criminal network in different brand guises.

The lesson: the NYTollServices scam now spans SMS, email, robocalls, and live-agent calls. The medium changes but the brand name does not. Anyone calling about “NYTollServices” is part of the fraud — verify only with E-ZPass NY at 1-800-333-TOLL.

US consumer protection bodies and the New York toll authorities themselves have all issued public warnings about the NYTollServices scam and the broader toll-smishing wave it belongs to.

The FBI’s Internet Crime Complaint Center (IC3) issued a public service announcement specifically about US toll-smishing in 2024 and has updated it since. The IC3 confirms that the NYTollServices scam and its sister variants are part of a coordinated criminal infrastructure that has expanded to nearly every US state with major tolled roads. Report at ic3.gov.

The Federal Trade Commission has published consumer alerts about toll-text scams including the NYTollServices scam. The FTC stresses three core rules: real toll agencies do not text you about unpaid tolls, look-alike domains and invented brand names are the giveaway, and reporting at reportfraud.ftc.gov directly helps the takedown effort against the criminals running these campaigns.

E-ZPass NY and the NY State Thruway Authority have issued public warnings clarifying that there is no agency called “NYTollServices.” The official New York toll administration channels are E-ZPass NY for transponder accounts and Tolls by Mail NY for non-E-ZPass drivers. Any message branded “NYTollServices” is the NYTollServices scam by definition.

The New York Attorney General’s office and the New York State Department of Motor Vehicles have warned New York drivers about the NYTollServices scam through public-safety bulletins. These advisories note the criminal pattern is identical to the smishing operations the same networks run across other US states impersonating real toll agencies.

Mobile carriers including AT&T, T-Mobile, and Verizon have all set up the 7726 (SPAM) short code as a free reporting route. Forwarding the smishing text to 7726 helps carriers block the sender at the network level — an effective community-level mitigation against the campaign.

Memorise the Real New York Toll Brands

The single most effective protection against the NYTollServices scam is knowing the real brands. New York toll administration uses exactly two consumer-facing brands: E-ZPass NY (ezpassny.com) for transponder account holders, and Tolls by Mail NY (tollsbymailny.com) for non-E-ZPass drivers receiving toll bills by mail. Anything else — including “NYTollServices,” “NY Toll Bureau,” or “New York Toll Services” — is invented.

Once you know the two real brand names, the NYTollServices scam cannot reach you regardless of how convincing the message appears. The fictional brand is the entire fraud — recognising it is the entire defence.

Verify Balances Only via Official Channels

If you genuinely use E-ZPass NY or pay tolls by mail, type ezpassny.com or tollsbymailny.com directly into your browser. Do not click any link in any text or email. Do not search for “ny toll login” and click the first result — sponsored search ads for NYTollServices scam look-alikes have been documented. Type the URL directly.

You can also call E-ZPass NY at 1-800-333-TOLL — the number printed on official E-ZPass NY mail and on the genuine ezpassny.com site. If the message wants you to call a different number, that number is part of the criminal infrastructure.

Forward Suspicious Texts to 7726

Every major US mobile carrier supports the 7726 (SPAM) reporting short code. Forward the smishing text to 7726 and the carrier’s spam-filtering system processes it — helping block similar messages to other customers and contributing data to the takedown effort.

Forwarding is free, takes seconds, and works regardless of carrier. After forwarding, delete the smishing text from your inbox so you do not accidentally tap the link later.

Block the Sender and Report on iMessage

On iPhone, long-press the NYTollServices scam message and choose “Report Junk” — Apple’s built-in tool that reports the sender to Apple for blocking. On Android, use the “Report spam” option in your messaging app. For emails, use your provider’s “Report phishing” option in Gmail or Outlook.

Block the sender afterwards so future NYTollServices scam variants from the same source do not reach your inbox. The criminals will rotate to new numbers, but blocking each one slows them down.

Never Enter Card Details After Clicking an SMS Link

If you accidentally clicked a NYTollServices scam link, close the tab immediately. Do not enter any details — name, email, card number, anything. Closing the tab before entering data means no information was captured beyond the click event itself, which by itself is not enough for the criminals to use against you.

If you did enter data, contact your card issuer through the number on the back of the card and request a fraud freeze. Then change passwords on any account that uses the same email address you entered.

Educate Family Members — Especially Out-of-State Visitors

The NYTollServices scam disproportionately catches out-of-state visitors who do not know New York toll branding. Share this guide with anyone who plans to drive through New York or who already drives there. Explain that real New York toll bills come from E-ZPass NY or Tolls by Mail NY — never from “NYTollServices.”

One conversation prevents the NYTollServices scam from reaching travellers and visitors who would otherwise be the easiest victims. Most prevention happens at this conversation, not at the bank’s fraud department after the fact.

Watch Card Activity for Weeks After Any Click

Even if you only clicked the NYTollServices scam link without entering anything, the criminals now know your phone number actively engages with their messages. You will likely receive more smishing attempts. Watch card and bank activity for at least 30 days after any click, and consider enabling transaction alerts on every account so unauthorised charges surface immediately.

If you have already entered card details or personal information through a NYTollServices scam link, act quickly. The steps below give you the best chance of limiting the damage and preventing the downstream identity-theft attacks that often follow.