Criminals are using the barrier-free toll system, known as free flow, as bait to scam drivers. The cybersecurity company Kaspersky identified 480 fake websites simulating electronic toll charges since the beginning of the year, with over 80 new domains created since May.
The scam works as follows: the driver searches the internet for how to pay toll debts and accesses sponsored ads or links shared on social media. The fraudulent pages mimic legitimate electronic toll payment platforms, and after the user provides the vehicle license plate, they display a supposed outstanding debt.
To give an appearance of legitimacy, the websites display low amounts, consistent with real toll rates, and may even show accurate information about the queried vehicle. The victim is then induced to pay via Pix, and the money is transferred to "money mule" accounts, making it difficult to track and recover the funds.
Since August 24, Brazil's driver's license app has enabled toll debt verification, providing a secure option for drivers to check their financial obligations.
