Millions of Americans are being hit by a dangerous wave of fake text messages that appear to come from official Department of Motor Vehicle (DMV) offices.
The messages, which first surfaced in May 2025, claim recipients owe an unpaid fine or toll and urge them to resolve the issue by clicking a link.
That link leads to a counterfeit website designed to steal sensitive personal information, including bank logins, Social Security numbers, and phone credentials.
Officials say the scam is spreading swiftly across several states, with California, New York, Florida, Georgia, and Illinois among the hardest hit.
Alexi Giannoulias, the Secretary of State of Illinois, warned: ‘Don’t be fooled by phony text messages threatening ‘suspension of driving privileges.’
The attacks, known as smishing (SMS phishing), have grown more convincing than ever. Scammers are now using AI-generated language and domain spoofing to build fake websites that closely mimic official government portals.
In New York, traffic attorney James Medows said he’s seen a rise in clients who unknowingly paid fake citations.
‘These scams work because they feel urgent and personal,’ he said. ‘A real DMV ticket won’t come with threats over text. Always confirm through the DMV before clicking anything.’
Security experts warn the scam can lead to drained bank accounts, malware infections, and long-term identity theft
California DMV Director Steve Gordon issued a statewide alert after residents reported receiving scam texts claiming unpaid tolls.
‘These messages looked like they came from us,’ Gordon said.
‘The safest way to respond is to visit our official website or call our contact center directly.’
The Florida Department of Highway Safety and Motor Vehicles has also confirmed similar reports.
Victims are told their driver’s license or registration will be suspended unless they pay a fraudulent fee through a link provided in the message.
In response, local governments, including the New York City Council, are calling for widespread public awareness campaigns to help residents recognize and report scam tactics.
‘Legitimate government agencies will rarely, if ever, contact you by text message for sensitive matters,’ officials warned.
Although Georgia has no official DMV, scammers are spoofing the Department of Driver Services (DDS). The texts use near-identical domains to trick residents into clicking links.
The attack, called smishing (SMS phishing), involves text messages designed to look like they’re from local DMV or toll authorities
Commissioner Angelique McClendon said in a statement: ‘DDS employees do not contact customers to ask for payment or other confidential information.’
In Illinois, messages claim to be from a fake ‘Illinois State DMV’ and threaten to revoke vehicle registration.
Officials clarified the state only sends text reminders for scheduled appointments, not license or registration updates.
Secretary Giannoulias is urging residents to delete the messages and report them immediately.
The FTC says smishing now ranks among the top causes of fraud, contributing to the $12 billion in consumer losses reported in 2024.
Many of these attacks rely on domain names like dmvpay-verification.net or ezpass-update.us, designed to look trustworthy.
Because these messages are often generated using AI, they are free of the grammar and spelling errors that once signaled a scam.
Investigators believe much of the operation is run from overseas, making prosecution difficult.
The FCC recommends registering your number with the National Do Not Call Registry.
Officials urge reporting suspicious texts by forwarding them to 7726 (SPAM) or filing a report at reportfraud.ftc.gov.
