The Federal Bureau of Investigation (FBI) has alerted iPhone and Android users in the United States about a potential toll payment scam.

As reported by _Forbes_, the agency warned that this scam could spread to new areas, indicating that it may soon target regions where it has not yet surfaced.

This scam operates by sending victims a seemingly harmless text message, claiming they have unpaid tolls that require urgent payment.

Those who click on the link in the message are taken to a fake website that asks for sensitive banking information, including credit card or bank account details.

The Federal Trade Commission (FTC) confirmed the FBI's warnings, stating that unsolicited messages of this kind are likely fraudulent.

The FTC also stressed that individuals who respond to such messages risk financial loss and identity theft.

The agency remarked, "Not only is the scammer trying to steal your money, but if you click the link, they could access your personal information (like your driver's license number) - and even steal your identity."

To reduce the chance of becoming a victim of these scams, FBI officials have advised individuals to use the official website of their toll service provider or to contact customer service directly, instead of engaging with unsolicited messages.

Users should delete any suspicious texts to safeguard their privacy from potentially dangerous links.

The criminals behind these scams are believed to be linked to Chinese cybercriminal groups that are reportedly developing and improving phishing kits designed to imitate legitimate toll operators across different states.

This strategy is part of a larger trend of impersonation scams executed by these groups, which also includes fraudulent messages pertaining to shipping companies, tax agencies, and immigration services.

Cybercriminals usually target individuals who may be vulnerable or newly arrived in a country, aiming to extract payment card information or facilitate fraudulent transactions through mobile wallets or shell companies.

The FBI has highlighted previous incidents involving these actors, including a December report detailing the breach of major U.S. telecommunications companies—such as AT&T, T-Mobile, and Verizon—by a group known as 'Salt Typhoon', believed to originate from China.

For users worried about their security, the FBI has recommended considering smartphones that receive regular operating system updates, using devices with proper encryption management, and securing accounts with phishing-resistant two-factor authentication methods.