The Federal Bureau of Investigation (FBI) has issued a caution to users of iPhone and Android devices in the United States about a potential toll payment scam.

Reports from _Forbes_ indicate that the agency has warned that this scam could spread geographically, implying that it may soon extend to areas where it has not yet been detected.

This scam operates by sending victims a seemingly harmless text message that states they owe money for outstanding tolls that require immediate settlement.

Victims who click on the link provided in the message are redirected to a fraudulent website that requests sensitive banking information, including credit card or bank account numbers.

The Federal Trade Commission (FTC) has backed the FBI's warnings, stating that unsolicited messages of this type are likely to be scams.

The FTC further highlighted that individuals who engage with such messages risk not only financial loss but also identity theft.

The agency remarked, "The scammer is not only trying to take your money but if you click the link, they could obtain your personal information (like your driver's license number) - and even steal your identity."

To reduce the chances of falling prey to these scams, FBI officials recommend that individuals visit the official website of the toll service provider or directly contact their customer service instead of responding to unsolicited messages.

Users should delete any such texts to safeguard their privacy from potentially dangerous links.

The offenders behind these scams are thought to be linked to Chinese cybercriminal groups that are reportedly creating and enhancing phishing kits designed to imitate legitimate toll operators across different states.

This approach is part of a wider pattern of impersonation scams used by these groups, which also include deceptive messaging related to shipping companies, tax agencies, and immigration services.

Cybercriminals typically target individuals who may be more vulnerable or new to the country, seeking to extract payment card information or enable fraudulent transactions via mobile wallets or shell companies.

The FBI has recorded previous incidents involving these actors, including a December report detailing the infiltration of major U.S. telecommunications companies—such as AT&T, T-Mobile, and Verizon—by a group known as 'Salt Typhoon', believed to be based in China.

For users concerned about their security, the FBI has suggested considering smartphones that receive regular operating system updates, using devices that have adequate encryption management, and securing their accounts with phishing-resistant two-factor authentication methods.