Connect with us

Tech

E-ZPass toll scams are back. What to do if youre targeted.

Published

on

You might've heard of those scam texts about tolls. Heck, at this point, you've likely gotten a text pretending to be from E-ZPass or some such entity.

We covered these scams at Mashable back in January, and they're back, if they ever left at all. The main points remain the same: Do not click any links and do not engage with potential scammers. If you get a text claiming to be from E-ZPass, FasTrak, or some other toll service, be very skeptical, as this has only become a more pervasive scam.

We've got the latest details to keep you up to date.

What are the E-ZPass and FasTrak scam texts, and how do you spot them?

The E-ZPass toll scam has evolved and shifted over time, but the broad strokes remain the same: a text from a random number claiming you have unpaid tolls or fees, and that you have to remedy that fact or face some sort of consequence. That should immediately ring alarm bells — scammers often want you to feel a sense of urgency in order to keep you from thinking through your actions. Usually, this text leads you to a link, which could be used to gather your personal information.

Here's an example of a recent version posted to Reddit that received a spirited response in the comments.

Reddit

Look around online and you'll see lots of folks still posting about the scam texts, some four months after they began surfacing.

Oh no, some guy who calls himself a player is telling me I need to pay my toll

[image or embed]

— yuukasugai.itch.io (@yuukasugai.itch.io) April 23, 2025 at 2:39 PM

This is already coming in handy

[image or embed]

— Craig Calcaterra (@craigcalcaterra.bsky.social) March 26, 2025 at 9:36 AM

Once you're aware of the same, it should be pretty easy to spot. First: Check the sender. At first, these messages often came from a +63 country code, which is for the Philippines. Many of the posts online now indicate the scammers have moved on to random email addresses. Regardless, E-ZPass or other toll services are not sending emails from these sorts of phone numbers or addresses.

Second: Look at the link. DO. NOT. CLICK. THE. LINK. But often the link redirects to an obviously sketchy site.

Third: Know that this is not how E-ZPass, FasTrak, or other toll services operate. They will mail you any bills they owe, and they certainly will not threaten to suspend your driver's license.

What to do if you get an E-ZPass or FasTrak scam text?

Again, let us repeat, if you get a scam text: DO. NOT. CLICK. THE. LINK.

From there, most phones have a delete and report junk option for messages, which is what you should do. If you're concerned that there was a modicum of truth to the text, the Federal Trade Commission recommends contacting your local tolling agency to check if it's legit.

But for the most part, tread carefully with any text from an unknown number. If you have to question if you're being scammed, it's likely a scam.

Have a story to share about a scam or security breach that impacted you? Tell us about it. Email submissions@mashable.com with the subject line "Safety Net" or use this form. Someone from Mashable will get in touch.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

You can no longer go live on Instagram unless you have 1,000 followers

Published

on

By

It’s hard enough getting into the content creator space without the platform you’re on putting up restrictions. However, Instagram is now the latest social media app to institute such a restriction — forcing people to have at least 1,000 followers before they go live on the site. Previously, Instagram let anyone go live, regardless of account status.

The news first started circulating after smaller creators posted the notice on other social media channels.

The notice reads, "Your account is no longer eligible for Live. We changed the requirements to use this feature. Only public accounts with 1,000 followers or more will be able to create live videos."

A notice that reads "our account is no longer eligible for Live. We changed the requirements to use this feature. Only public accounts with 1,000 followers or more will be able to create live videos


Credit: Chance Townsend / Instagram screenshot

TechCrunch followed up with Instagram and confirmed that the social network giant made this change intentionally. As expected, small creators aren’t fans of the change, and it’s been mostly maligned across all of social media. Creators with private accounts won’t be able to go live at all, even if the account has over 1,000 followers. Instagram says the change was made to “improve the overall Live consumption experience.”

There are pros and cons to the decision, as TechCrunch notes. On the one hand, small creators will have an even harder time breaking out into the segment than they already do, as accumulating followers without buying them can be a long and painstaking process. By contrast, Instagram likely removed a lot of low-quality streams this way that only have a couple of viewers each, which makes it easier to find better live content while also saving Meta money.

This change brings Instagram more in line with TikTok’s live streaming rules. However, the number of followers you need on TikTok can vary, with plenty of people getting access long before they reach 1,000 subscribers. As of this writing, Facebook’s Help Center says that going live on Facebook only requires a 60-day-old account and at least 100 followers. YouTube still allows users to go live after just 50 followers, while Twitch remains the easiest to get started with a 0 follower limit.

Continue Reading

Tech

Lovense has finally fixed its account takeover problem

Published

on

By

Lovense is well-known for its selection of remote-controlled vibrators. It’s slightly less known for a massive security issue that exposed user emails and allowed accounts to be wholly taken over by a hacker without even needing a password. Fortunately, both issues have been fixed, but it didn’t happen without some drama.

As the story goes, security researcher BobDaHacker (with some help) accidentally found out that you could uncover a user’s email address pretty easily by muting someone in the app. From there, they were able to figure out that you could do this with any user account, effectively exposing every Lovense user’s email without much effort.

With the email in hand, it was then possible to generate a valid gtoken without a password, giving a hacker total access to a person’s Lovense account with no password necessary. The researchers told Lovense of the issue in late March and were told that fixes were incoming.

In June 2025, Lovense told the researchers that the fix would take 14 months to implement because it did not want to force legacy users to upgrade the app. Partial fixes were implemented over time, only partially fixing the problems. On July 28, the researchers posted an update showing that Lovense was still leaking emails and had exposed over 11 million user accounts.

"We could have easily harvested emails from any public username list," BobDaHacker said in a blog post. "This is especially bad for cam models who share their usernames publicly but obviously don't want their personal emails exposed."

It was around then that the news started making its way around the news cycle. Other researchers began reaching out to show that the exploit had actually been known as far back as 2022, and Lovense had closed the issue without issuing a fix. After two more days in the news cycle, the sex toy company finally rolled out fixes for both exploits on July 30.

It’s not Lovense’s first roll in the mud. In 2017, the company was caught with its proverbial pants down after its app was shown to be recording users while they were using the app and toy. Lovense fixed that issue as well, stating that the audio data was never sent to their servers.

Continue Reading

Tech

Tom Holland teases the new suit for Spider-Man: Brand New Day

Published

on

By

White man in spider-man costume

Sony and Marvel have revealed a fresh look for Tom Holland’s Spider-Man, and it’s a return to basics. In a very short 22-second teaser, fans got a decent look at Spidey’s new suit, which leans heavily into the classic comic design.

Gone is the ultra-slick Stark Suit, the high-tech armor gifted by Tony Stark, which Holland’s Peter Parker wore in three solo films and multiple Avengers crossovers.

Spoilers for 2021’s No Way Home:

By the film’s end, Peter’s high-tech suit is wrecked — and so is everything else. It's a brutal reset that leaves Peter truly alone and stripped of all the Stark tech that powered his previous adventures. This mirrors the more grounded, scrappy origins many fans felt had been missing from the MCU’s version of the character.

The closing shot in No Way Home is of a homemade suit — vibrant, hand-sewn, and all Peter — and signaled a fresh start. Now, with Brand New Day on the horizon, we’re finally seeing that suit in action. And yeah — it looks great. Here’s hoping the movie lives up to it.

Spider-Man: Brand New Day swings into theaters July 31, 2026, with Shang-Chi director Destin Daniel Cretton at the helm.

Continue Reading

Trending