{"success":true,"data":{"id":"toll-violations-final-collection-phish","label":"Fake toll authority (EZPass, SunPass, FasTrak) claiming unpaid toll violations have escalated to final collection with a DMV registration hold unless paid immediately via email link — credential-harvest and advance-fee fraud; real toll collection notices are delivered by USPS and authenticated toll portals, never cold email payment ultimatums.","description":"Fake toll authority (impersonating EZPass, SunPass, FasTrak, TxTag, NC Quick Pass, or generic \"Toll Services\") claiming the target has unpaid toll violations that have escalated to final collection status with a DMV vehicle registration hold and additional penalty fees unless the outstanding balance is paid immediately via email link — credential-harvest and advance-fee fraud targeting drivers. Real toll authority collection notices are delivered via USPS and through authenticated online toll account portals; cold emails threatening DMV registration holds for unpaid tolls have been specifically highlighted by EZPass, FasTrak, the FTC, and FBI IC3 as a top toll-impersonation fraud pattern with millions of fraudulent messages sent annually. Distinct from vehicle-registration-delinquency-phish (DMV registration lapse pretext) — this targets the toll authority unpaid violations / final collection / DMV registration hold / pay immediately vocabulary. Detection: unpaid toll violations + final collection + DMV registration hold + pay immediately + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +4. Source: GC1-R30; FBI IC3 toll fraud alert 2024; FTC toll payment scam advisory 2025; EZPass anti-phishing bulletin; CISA toll-authority impersonation patterns.","tier":"danger","category":"phishing","isThin":false}}