SMS-Based Parking Ticket Scams Are Targeting US Residents

A growing phishing scam is tricking US residents into paying fake parking fines. Since December 2024, scammers have been sending text messages stating that recipients have unpaid parking violations and face a $35 daily penalty unless they settle immediately.

The scam is widespread, with officials from cities like Boston, San Francisco, Detroit, Houston, and Denver issuing warnings. Victims receive a message impersonating the local parking violations department, urging them to click a link to pay the supposed fine.

In an effort to combat phishing scams, Apple launched a security feature in 2024 designed to disable links in text messages from unknown senders and suspicious domains. However, scammers exploit a loophole in this safeguard by using an open redirect on Google.com, a trusted domain, allowing their deceptive links to appear legitimate and avoid detection.

Clicking the link directs users to a fraudulent website crafted to mimic an official city parking authority. In New York, for instance, the fake site appears as "NYC Department of Finance: Parking and Camera Violations."

On the phishing site, victims are prompted to enter their name and zip code. No matter what information is provided, the site claims an outstanding balance and instructs users to proceed with payment. The amount varies, but scammers frequently demand small sums like $4.60 to make the request seem believable.

A common giveaway that the user is dealing with a scam is the incorrect placement of the dollar sign (e.g., “4.60$”), a formatting error uncommon in the US. This suggests the scam originates from outside the country.

Clicking "Proceed Now" leads to a page where users must enter personal information, including their full name, address, phone number, email, and credit card details. Scammers then use this data for identity theft, financial fraud, and further phishing attempts. Stolen information is often sold to other cybercriminals, exposing victims to additional scams.

Authorities urge residents to be cautious of unsolicited messages claiming unpaid fines. If you receive a suspicious text from an unknown sender demanding payment, do not click any links. Instead, block and report the number. To verify a parking violation, visit the official city website instead of clicking on unsolicited messages.