Summary

This guide helps you troubleshoot and resolve: How to Identify Fake eWay Toll Invoice SMS Messages Targeting Australian Small Businesses. Follow the steps below to fix the issue.

Common Causes

How to Identify Fake eWay Toll Invoice SMS Messages Targeting Australian Small Businesses

Australian small businesses are increasingly targeted by fraudulent SMS messages claiming to be from eWay Toll. These scams typically state that a commercial vehicle has an unpaid toll invoice and demand immediate payment via a suspicious link. Clicking these links can lead to phishing websites designed to steal business credentials, payment card details, or install malware on your device. This guide explains how to identify fake eWay Toll SMS messages and protect your organisation.

Identify the Warning Signs

• Urgency and threats: The message claims your vehicle will be deregistered or fined immediately if you do not pay.
• Generic greetings: Messages addressed to "Customer" or "Dear User" instead of your business name or account number.
• Suspicious links: URLs that do not match the official eWay website domain or use link shorteners.
• Unexpected invoices: You receive a toll invoice for a vehicle not registered to your business or for a toll road you do not use.
• Poor spelling and grammar: Australian English errors or awkward phrasing throughout the message.

Verify Through Official Channels

1. Open your web browser and manually type https://www.eway.com.au into the address bar.
2. Avoid using any link, phone number, or email address provided in the SMS message.
3. Select Log in or My Account from the top navigation menu.
4. Enter your registered credentials to access your eWay account dashboard.
5. Review your invoice history and outstanding balance directly within your account.
6. If no unpaid invoice exists, the SMS message is fraudulent.

Secure Your Mobile Device

1. On iPhone, open the Messages app, swipe left on the conversation, and tap the delete icon.
2. On Android, open the Messages app, long-press the conversation, and select the delete option.
3. Do not reply to the message, as replying confirms your number is active to scammers.
4. If you accidentally clicked a link, do not enter any personal or payment information on the resulting website.
5. Close the browser tab immediately and clear your browser history and cache.

Warning: Never enter payment card details, ABN, or driver licence information on a website reached via an SMS link. eWay will never request immediate payment via an unsolicited text message.

Note: If you manage a fleet of commercial vehicles, assign one trusted staff member to handle all toll account administration. This reduces the risk of employees paying fraudulent invoices.

Reporting the Scam

1. Visit the Australian Cyber Security Centre's ReportCyber portal.
2. Select the option to report a scam or phishing attempt.
3. Include the sender phone number, the full message text, and any links contained in the SMS.
4. You may also report the message to the Australian Competition and Consumer Commission via Scamwatch.

Still Having Issues?