Don't Fall for the Unpaid Parking Fee Scam Text

Unpaid parking tickets happen to the best of us—and one of the latest phishing scams is counting on you to believe you've missed or forgotten to pay an outstanding fee. This text message scam prompts you to pay overdue parking fines and hand your credit card number and other personal information directly to the scammers to turn around and use.

Scammers are using the threat of unpaid parking fees

The unpaid parking fee scam is one of many relatively unsophisticated text-based phishing attempts that depends on recipients responding to the threat of owing money and giving up personal and financial information in the process. It's similar to the current unpaid tolls scam text, which may seem just plausible enough that you might be tempted to click the link to settle your supposed fine.

In this instance, scammers are impersonating city governments by sending notices of unpaid parking "invoices," which will accrue daily late fees until payments are made. The text message includes a web address or link spoofing an official government website, which directs you to enter details from your name and billing address to your credit card number. If you follow through, you obviously hand your credit card over to the scammers.

The Salt Lake City phishing text, for example, reads "This is a notice from Salt Lake city. Your vehicle has an unpaid parking invoice of $4.35. To avoid a late fee of 355, please settle your balance promptly. To avoid late fees, access your file by typing the following link into your browser" with a web address that looks similar to the city's parking portal but is, in fact, fake.

According to Bleeping Computer, these texts started circulating in December 2024 and have been spotted in numerous cities across the U.S., including major metro areas like Boston, Denver, Detroit, Houston, Milwaukee, New York City, Salt Lake City, Charlotte, San Diego, and San Francisco. In some of the texts, there's a clickable link that uses an open redirect on Google.com, which avoids an iOS security feature that disables links from unknown senders and suspicious domains.

How to spot a parking fee scam text

Like we've said, this scam isn't especially elaborate, but it does attempt to create just enough doubt about your history of parking tickets in your own city that you'll engage. The first question you should ask yourself is whether you've used paid public parking recently—if not, that's an obvious giveaway.

Even if you have, though, question whether a city government is likely to text you about unpaid parking fees, and look at the number the text is coming from. While official (legitimate) text messages typically come from five-digit senders, phishing texts often come from full phone numbers, international numbers (with a prefix like "+44"), or even email addresses.

From there, other signs of a scam include directions to copy and paste or type a web address into a browser or to respond to the text itself. Non-hyperlinked URLs are a clear giveaway, but you should also be wary of clicking links in any texts from unknown senders and always go directly to official government websites. In the parking fee scam, there are also signs like misspelled words and missing or misplaced symbols, like the dollar sign coming after the amount.

View the full article