How to Spot Fake Toll Road and E-Tag Invoice Scams Targeting Australian Small Businesses

Summary

This guide helps you troubleshoot and resolve: How to Spot Fake Toll Road and E-Tag Invoice Scams Targeting Australian Small Businesses. Follow the steps below to fix the issue.

Common Causes

Toll road and e-tag invoice scams are targeting Australian small businesses with fraudulent payment requests. These messages often appear legitimate, using familiar branding and urgent language to trick businesses into paying fake invoices or clicking malicious links.

Warning Signs to Look For

Fake toll and e-tag invoices commonly include several red flags. Recognising these indicators can help protect your business from payment fraud.

• Unexpected invoices from toll operators you do not use
• Urgent payment demands with threats of fines or account suspension
• Sender email addresses that do not match the official toll road domain
• Generic greetings such as "Dear Customer" instead of your business name
• Spelling or grammatical errors in the message body
• Links that hover to unfamiliar URLs or shortened links
• Attachments claiming to be invoices but ending in .exe, .zip, or .scr

How to Verify a Toll or E-Tag Invoice

1. Do not click any links or call any phone numbers provided in the suspicious message.
2. Open your web browser and navigate directly to the official website of the toll road operator, such as linkt.com.au, etoll.com.au, or e-way.com.au.
3. Log in to your account using your existing credentials to check for legitimate outstanding invoices.
4. Compare the invoice number, amount, and vehicle registration details against what appears in your official account.
5. If no matching invoice exists in your account, treat the message as a scam.

Legitimate toll operators will never demand immediate payment via email or threaten legal action without prior written correspondence through official channels.

What to Do If You Receive a Suspicious Invoice

1. Do not reply to the email or SMS.
2. Do not open any attachments or click any embedded links.
3. Mark the message as junk or phishing in your email client.
4. Delete the message from your inbox and deleted items folder.
5. If you have already clicked a link or entered payment details, contact your financial institution immediately.
6. Report the scam to Scamwatch.
7. If you believe your business credentials may be compromised, contact your IT support provider for assistance.

Never provide payment card details, bank account information, or e-tag account login credentials in response to an unsolicited email or text message.

Protecting Your Business

• Ensure all staff who handle accounts payable are aware of toll road and e-tag scam tactics.
• Implement a verification process where all unexpected invoices are checked directly with the supplier via official contact details.
• Keep your operating systems, web browsers, and email security software up to date.
• Use multi-factor authentication on business email and toll road operator accounts where available.

Still Having Issues?