The FBI is warning that a texting scam targeting Americans for months is now spreading to even more states.

The ongoing scheme has been trying to trick people into thinking they have unpaid road tolls and that they have to pay them off immediately to avoid expensive late fees.

Federal officials said smartphone users need to delete these messages immediately and alert the actual toll service the scammers are claiming to represent.

According to the FBI Internet Crime Complaint Center (IC3), they've already received over 2,000 complaints about this smishing scam.

'Smishing' is an attack by cybercriminals using fake text messages to get people to share private information, send money, or download malware onto their smartphone.

In spring 2024, IC3 warned that the scam was targeting smartphone users in at least three states.

A year later, the criminals appear to be targeting most of the US, from New York to Washington state.

In a fresh warning this month, FBI agents in Seattle said locals need to be on the lookout for more fake messages about unpaid tolls, mounting debt by drivers, and threats of stiff fines.

The warning out of Washington state comes just weeks after this scheme caught the attention of the Federal Trade Commission (FTC).

'Scammers are pretending to be tolling agencies from coast to coast and sending texts demanding money,' FTC officials wrote in a statement in January.

'The scammy text might show a dollar amount for how much you supposedly owe and include a link that takes you to a page to enter your bank or credit card info — but it's a phishing scam,' the agency continued.

IC3 shared an image of what these fake text messages look like, showing as if they are coming directly from the state toll service.

The message claims recipients didn't pay certain unspecified road charges and provides a website link to click on to pay before receiving a late fee.

Anyone who clicks on these links falls into the scammer's trap, as the link takes them to a phony webpage that prompts victims to type in their personal data and credit card details, allowing scammers to steal the information.

Moreover, the phony link may also download malware onto the device used, giving the hackers access to that person's smartphone.

Despite the danger of getting fooled by fake tolling agencies, officials have noted that this scheme is a lot sloppier than others involving scammers pretending to be from government offices.

Many of the recipients either don't have a car or have no connection to the state the fake text messages are coming from.

Vermont Attorney General Charity Clark recently said in an Instagram video: 'We do not have tolls roads in Vermont but travelers may mistake these scams for actual toll operators in other states.'

Louisiana Attorney General Liz Murrill added on Facebook: 'It is a SCAM. If you ever receive a text that looks suspicious, be sure to never click on it.'

In early February, I received this kind of text from a number that traces back to Atlanta, Georgia claiming I had unpaid E-ZPass bills.

Unfortunately for the scammer, I've never owned an E-ZPass and have never driven through Georgia, so the signs of a scam were clear from the start.

Plus, what government agency would put three emoji in a text message about unpaid fines?

For US drivers who don't use an electronic toll-collecting device like E-Zpass, it's important to note that the government doesn't come looking for their money in a text message.

If you pass through a tunnel, cross a bridge, or just drive on a state road which doesn't have a toll booth but still charges you - those bills arrive in the mail.

Whether you see them or not, there's a camera somewhere taking a picture of your license plate, and that bill is sent to the home of the person connected to that car, according to department of motor vehicle records.

So, what should you do if this kind of scam text finally shows up on your smartphone?

Before deleting the message without responding, IC3 asked people to file a complaint on their website, giving agents the phone number and fake web address that was sent.

Next, find the legitimate website of the tolling service the text claimed to be from and check your account (if you have one).

Alternatively, you can call that agency's verified phone number and ask to speak with customer service about the scammers impersonating them.

If you mistakenly clicked on any links in the text, quickly take action to secure your bank accounts and personal info.

You can do this by changing your passwords and also enabling two-factor authentication (2FA) - an added layer of protection which texts you a security code before logging into your email or other private accounts.