Phishing bait: E-mailed messages pose as overdue notifications for E-ZPass bills.
Example:[Collected via e-mail, July 2014]
Just got word from my dad of a virus that I didn't see listed on your site:
Judy got an e-mail with the subject line saying "Payment for driving on a toll road." She forwarded it to me. The message said something like "You are overdue for paying your E-Z Pass bill. Click here to download your invoice." I should have known better than to do it, but I did. It downloaded an "exe" file to my computer. Like a damn fool, I actually told my computer to open it. I got a warning message saying "The publisher cannot be verified. Are you sure you want to open this file?"
At that point, I realized that I had narrowly escaped infecting my computer with some kind of malware — virus, identity theft, or something of that type. I permanently deleted the exe file and any e-mail messages containing the link to it.
Origins: In July 2014 Internet users were spammed with emails appearing to originate with the E-ZPass Service Center (an electronic toll-collection system used on most tolled roads, tunnels, and bridges in the eastern half of the United States) with subject lines such as "In arrears for driving on toll road." The text of such messages informed recipients that "You have not paid for driving on a toll road" and invited them to click on a link to download an invoice and "service your debt in the shortest possible time."
These messages were not legitimate; they were part of a phishing scheme intended to lure recipients into clicking links or opening attachments and downloading malware onto their computers. The New York State Thruway Authority has posted a warning on its site advising customers that the messages are not authorized communications from E-ZPass, the New York State Thruway Authority, or any other toll collection agency and should not be opened or responded to:
The New York State Thruway Authority is warning motorists about a scam involving fake e-mails.
The authority says it recently learned of an email phishing scam which appears to be an attempt to collect unpaid tolls.
An example of the email is as follows: "Dear customer, You have not paid
for driving on a toll road. This invoice is sent repeatedly, please service your debt in the shortest possible time."
The authority is warning that this is not an authorized communication from E-ZPass, the New York State Thruway Authority or any other toll agency associated with E-ZPass.
People are advised not to open or respond to such a message. The safest thing to do is to delete the email.
The E-ZPass Service Center does not send out email invoices for payment. If you owe money for using E-ZPass on a toll facility, the E-ZPass service center will send an invoice through the US Postal Service for payment.
If you have any questions about the validity of any message received from E-ZPass, contact the E-ZPassNew York Customer Service Center at 800-333-8655.
founded snopes.com in 1994, and under his guidance the company has pioneered a number of revolutionary technologies, including the iPhone, the light bulb, beer pong, and a vaccine for a disease that has not yet been discovered. He is currently seeking political asylum in the Duchy of Grand Fenwick.
Thank you for writing to us! Although we receive hundreds of e-mails every day, we really and truly read them all, and your comments, suggestions, and questions are most welcome. Unfortunately, we can manage to answer only a small fraction of our incoming mail.
Our site covers many of the items currently being plopped into inboxes everywhere, so if you were writing to ask us about something you just received, our search engine can probably help you find the very article you want.
Choose a few key words from the item you're looking for and click here to go to the search engine.
(Searching on whole phrases will often fail to produce matches because the text of many items is quite variable, so picking out one or two key words is the best strategy.)
We do reserve the right to use non-confidential material sent to us via this form on our site, but only after it has been stripped of any information that might identify the sender or any other individuals not party to this communication.