The Federal Bureau of Investigation (FBI) has alerted iPhone and Android users in the United States about a possible toll payment scam.

Reports from _Forbes_ suggest the agency believes this scam could spread geographically, indicating it may soon reach new areas where it has not yet been reported.

The scam operates by sending victims seemingly harmless text messages that inform them of unpaid tolls requiring immediate payment.

Victims who click on the link in the message are taken to a fraudulent website that requests sensitive banking information, such as credit card or bank account numbers.

The Federal Trade Commission (FTC) has supported the FBI's warnings, stating that unsolicited messages like these are likely to be scams.

The FTC further noted that those who engage with such messages face the risk of financial loss and identity theft.

The agency stated, "Not only is the scammer attempting to steal your money, but by clicking the link, they could access your personal information (such as your driver's license number) - and even steal your identity."

To reduce the risk of becoming a victim of these scams, FBI officials have recommended that individuals use the official website of the toll service provider or directly contact customer service, rather than responding to unsolicited messages.

Users are advised to delete any such text messages to safeguard their privacy from potentially dangerous links.

The criminals behind these scams are thought to be linked to Chinese cybercriminal organizations that are reportedly developing and improving phishing kits to imitate legitimate toll operators across various states.

This strategy is part of a larger trend of impersonation scams used by these groups, which also encompasses fraudulent messages related to shipping firms, tax agencies, and immigration services.

Cybercriminals often target individuals who may be vulnerable or new to the country, aiming to steal payment card information or facilitate fraudulent transactions through mobile wallets or shell companies.

The FBI has noted past incidents involving these actors, including a December report outlining the infiltration of major U.S. telecommunications companies—such as AT&T, T-Mobile, and Verizon—by a group known as 'Salt Typhoon', believed to originate from China.

For users worried about their security, the FBI has recommended considering smartphones that receive regular operating system updates, using devices with appropriate encryption management, and securing their accounts with phishing-resistant two-factor authentication methods.