Pa. residents warned of new phishing scam

By TAYLOR BROWN
Senior Reporter
tbrown@yourmvi.com

Phishing text messages and email scams impersonating PennDOT, the Pennsylvania Turnpike Commission, EZ Pass and other transportation- related agencies have been targeting unknowing state residents.

Phishing texts, also known as “smishing,” are text messages sent by scammers to trick recipients into revealing personal information or downloading malware. These messages often impersonate legitimate organizations like banks, delivery services or government agencies to gain trust.

The latest scam alleges to be from the “Pennsylvania Department of Motor Vehicles.”

Senate Transportation Committee Chairs Judy Ward and Marty Flynn and House Transportation Committee Chairs Ed Neilson and Kerry Benninghoff are urging residents to avoid clicking links or giving away personal information from texts or emails that claim to represent transportation agencies.

“All Pennsylvanians must remain vigilant in the ever- changing environment of scam messages via text and email,” Ward said. “Your safety and security are imperative, which is why I implore you to heed the advice of commonwealth agencies and law enforcement officers.”

Phishing schemes often involve the use of email or text messages containing malicious links or attachments. These messages are designed to appear legitimate, often using logos, branding and language that mimic reputable organizations such as banks, social media plat- forms or online services.

“These messages look official, but they’re nothing more than scams designed to steal your personal and financial information,” Flynn said. “PennDOT does not collect tolls, and legitimate agencies will never ask for payment through unsolicited texts or emails.”

The attackers’ goal is to lure the victim into clicking on the malicious link, opening the attachment or divulging information directly.

“Residents should be warned to not respond to these messages, avoid opening any links that are attached and do not respond with personal information,” Neilson said. “These phishing scams are dangerous because they often target vulnerable senior citizens on a tight income who are just trying to do the right thing.”

These attacks are a form of social engineering, exploiting human psychology and behavior to bypass security measures and steal valuable information.

“These scammers are educated — albeit misguided — individuals who are persistent in their attempt to disrupt the lives of their targets,” Benninghoff said. “The success of their effort is predicated on a lack of knowledge about how these agencies legally communicate with their constituents.”

The fraudulent messages often claim to be from PennDOT, E-Z Pass the PA Turnpike Commission or other transportation agencies. They direct users to click a link and make an urgent payment or face penalties such as vehicle registration suspensions, driver’s license suspensions and fines.

These links lead to phishing websites intended to compromise personal data.

To protect yourself from phishing scams, there are a few things to be mindful of before you click.

Do not click any links in texts or emails claiming to be from transportation agencies if you did not initiate the contact.

To manage your toll account safely, use the official PA Turnpike E-Z Pass website or the PA Toll Pay app, which is available on the Apple App Store and Google Play.

Payments should not be made unless you have confirmed the request is legitimate through official channels.

You can log in to your E-Z Pass or Toll By Plate account to check for suspicious activity and direct questions to the PA Turnpike Commission’s Customer Service Center at 877-736-6727 from 8 a.m. to 6 p.m. Mondays through Fridays.

“If you are suspicious about any message, email or phone call you receive,” Neilson said, “make sure you err on the side of caution and verify the legitimacy of the call before making a payment, clicking a link or giving away personal information.”

If you clicked a suspicious link or shared sensitive information, take immediate steps to secure your accounts and dispute unfamiliar charges.

Scam attempts should be reported to the Federal Trade Commission at reportfraud.ftc.gov or the FBI’s Internet Crime Complaint Center at www.ic3.gov.

“Scammers want you to panic and act fast. That’s their game,” Flynn said. “Always take a moment to verify the information. If you are unsure, go directly to a trusted source like the official turnpike website or app before taking any action.”

It can be difficult to backtrack if you are fooled by a phishing scam, so it’s better to be safe than sorry.

“Anyone who has fallen victim to one of these scams can tell you how difficult and time consuming it is to recover and repair your good name, reputation and credit report,” Benninghoff added. “Time spent validating a request for personal information is a wise investment which could avoid a costly mistake.”