DMV Text Scam in California: Don’t Click That Link (2026)

1. The Short Answer: Is That DMV Text Real?

Almost certainly not. If the text arrived out of nowhere, names the DMV (or a toll agency, or a court), and asks you to pay something, hand over personal information, or click a link — it is a scam. The California DMV says so in plain words on its own scam-alert page: “Californians are getting fake text messages and seeing social media ads with links that pretend to be from the DMV asking them to take action. The DMV will never ask for personal or financial information by text. If you get one, don’t open it or reply.” That page, at dmv.ca.gov/portal/dmv-scam-alert/, is the single most important source for this guide, and it was read live on November 6, 2026.

The scam has a technical name — smishing, which is phishing by SMS text message — and the FBI defines it as “a social engineering attack using fake text messages to trick people into downloading malware, sharing sensitive information, or sending money to cybercriminals.” The mechanism is simple, and that is why it works. A criminal sends a text pretending to be the DMV, a toll agency, or a court. The text’s only job is to get one tap on a link, one scan of a QR code, or one reply. The link opens a fake payment portal built to look like dmv.ca.gov or a toll agency’s site, complete with a state seal and official-looking forms. Anything typed there — name, address, date of birth, driver’s licence number, Social Security number, card details — goes straight to the scammers.

Here is the part most people get wrong, and it matters: the scammers do not really want the small amount in the text. The message might say you owe $12.51 in tolls, or $6.99 for a court fee, or a $160 late charge. Those numbers are bait. What the scammers actually want is the card number, the identity details, and — in some reported variants — the one-time verification code your bank sends you. That code can be used to add your card to a mobile wallet on the scammer’s phone. So the right way to think about the text is not “I only owe $7, what’s the harm?” but “someone is trying to take over my card and my identity, and the $7 is the hook.”

Why does it work so well? Because the threat is plausible. Tolls, tickets, and registration deadlines are real things people genuinely owe. The text arrives on your phone, it feels personal, and it creates panic with a deadline of “today” or “within 24 hours.” The scammers blast thousands of numbers at once from rotating numbers and email addresses, so blocking one sender does nothing. And the messages land on people who have nothing to do with California at all — one documented case, reported in the news in November 2026, involved a Texas man who had not lived in California for nearly a decade and still received a “final reminder” from the “California DMV” warning of licence suspension and added fees. He did not click. Getting the text proves nothing about you or your driving record. It proves your number was on a list.

The scale is not small. The FBI’s Internet Crime Complaint Center received more than 2,000 complaints about toll smishing texts from at least three states in the first few weeks of the campaign in early 2024, and noted the scam was “moving from state to state.” Bitdefender Labs tracked the wider campaign from December 2025 through April 2026 and counted more than 79,000 fraudulent messages across 40 distinct SMS scam campaigns worldwide, with more than 25,000 phishing URLs in the US campaign alone — and California and Texas were the most-targeted regions. The FTC reported that Americans lost $470 million to scams that started with a text message in 2024, five times the 2020 figure of $94 million, with bogus toll notices the fourth most common text scam. Nearly 247,000 text-message fraud reports were filed with the FTC in 2024. Those are the official numbers. This page prints no other loss or growth statistic, because no other one could be traced to an official source.

Use this table as the ten-second test. If your text matches the left column on even one row, treat it as a scam and follow section 5.

One more thing before the variants: this site is an independent guide and is not affiliated with the California DMV or dmv.ca.gov. Nothing on this page is an official DMV message, and no link on this page is a DMV payment link. The official site is dmv.ca.gov — type it into your browser yourself, never through a link in a message.

2. The Five Versions Running on California Phones

The scam is one trick wearing five costumes. The costume changes — a toll one month, a ticket the next, a court notice after that — but the shape never does: an unexpected message, a threat, a deadline, and a link or QR code that is the trap. Learn the five versions and you will recognise the sixth when it arrives, because the next version will use the same shape with a new name on it.

2a. Variant A — The Fake Unpaid Toll / FasTrak Text

This is the oldest and biggest version, and it is where the whole wave started. In early March 2024 the FBI’s Internet Crime Complaint Center began receiving complaints about smishing texts impersonating road toll collection services. By April 12, 2024, the FBI had received more than 2,000 complaints from at least three states, and it issued a public service announcement (I-041224-PSA) because the scam was “moving from state to state.” California, with FasTrak, The Toll Roads in Orange County, and the Bay Area express lanes, was an obvious target from the start.

The FBI published the canonical example of the toll text, and it is worth quoting because the wording barely changes from wave to wave:

“(State Toll Service Name): We’ve noticed an outstanding toll amount of $12.51 on your record. To avoid a late fee of $50.00, visit https://myturnpiketollservices[.]com to settle your balance.”

Note the two numbers. $12.51 and $50.00 recur across complaints — they are part of the template, not a real balance. If you receive a text with those exact amounts, that alone is a fingerprint of the scam. Other versions use different small amounts — $6.89 is a documented one — with the same $50 late-fee threat and the same shape: “To avoid a $50.00 late fee and DMV suspension, pay by today: [link]. Reply Y, then reopen this message to activate the link.” The California version impersonates FasTrak or “The Toll Roads.” California Attorney General Rob Bonta issued a consumer alert about exactly these texts, warning that scammers had become skilled at imitating legitimate companies, “sometimes even linking to legitimate websites,” and that “text-based toll charge scams are prevalent right now.”

The “Reply Y” trick deserves its own paragraph, because it catches people who are careful enough not to click. Several variants ask the recipient to reply “Y” and reopen the message to make the link clickable. Some phones do not render links in a message as tappable until the sender is “verified” by a reply, so the scammers ask for the reply first. But replying also confirms your number is active and monitored by a real person, which invites more scam messages. The rule is simple: do not reply — not even “STOP.” A legitimate opt-out does not exist in a scam text, and a reply is a signal, not a shield.

The real rule for tolls is the opposite of the text. FasTrak does not request payment by text with a link to a website — that is the Attorney General’s own statement. Real toll violations arrive by paper mail to the registered owner’s address, with a plate photo and a window measured in weeks to respond. The Toll Roads, the Orange County toll agency, say the same thing in their own way: a legitimate account notification can be verified only by logging into the account at thetollroads.com or through The Toll Roads app — never through a text link. If you have a FasTrak account, check it by logging in at the official site or app yourself. If you do not have an account and you receive a toll text, that alone is nearly conclusive: toll agencies mail pay-by-plate invoices to the registered owner, and they do not text strangers a payment link. The FTC issued its own toll-text alert on January 17, 2025 — “Got a text about unpaid tolls? It’s probably a scam” — with the same advice: don’t click, check with your real toll agency, forward the text to 7726, and delete it.

A practical test for the toll version: ask yourself whether you drove a toll road at all. Many recipients have never driven on a toll road, or have not driven one in years, or do not own the vehicle named. The texts are blasted to numbers, not to drivers. If the text cannot name the toll road, the date, the plate number, and the invoice number, it is not a toll bill. A real toll invoice names all four.

2b. Variant B — The Fake Unpaid Traffic Ticket / “DMV Final Notice”

This is the version the page title targets, and it is the one that surged in 2025. On July 21, 2025, the Federal Trade Commission warned that scammers were pretending to be the DMV “from states all over the country,” demanding payment for an “overdue traffic ticket.” The FTC’s description of the scam text’s threats is the definitive list, and it is worth printing in full, because readers search for these exact phrases when they are trying to decide whether their text is real:

“Department of Motor Vehicles (DMV) Final Notice: Enforcement Penalties Begin on [date]. Our records show that as of today, you still have an outstanding traffic ticket… If you do not complete payment by [date], we will take the following actions: 1. Report to the DMV violation database. 2. Suspend your driving privileges for 30 days. 3. Suspend your vehicle registration. 4. Transfer to a toll booth and charge a 35% service fee. 5. You may be prosecuted and your credit score will be affected.”

Read that list again, slowly. Five punishments in one message: a violation database, a licence suspension, a registration suspension, a 35% fee, prosecution, and credit damage. A real notice does not stack five punishments in one message. A scam does, because fear makes people act before they think. And two of the five are invented outright. There is no “DMV violation database” that reports you for an unpaid ticket, and there is no 35% service fee. Both phrases exist only inside these scam texts. If the text you received mentions either one, you do not need any further test — it is a scam. The FTC’s own advice on this version is to learn more at ftc.gov/textscams and to report the text at ReportFraud.ftc.gov.

The ticket text also leans on fake authority. Some versions cite “Administrative Code 15C-16.003” as if it were a real law. It is not a real citation — it is part of the scam text, printed to look like a legal reference. A code number in a threatening text is not evidence of anything except that the scammer knows a code number looks convincing. The dates in these texts rotate with every wave — “pay by June 24, 2025” was one wave’s deadline — so never treat a date in a scam text as current, and never treat a date on a warning page as current either. Every example on this page is date-stamped for exactly that reason.

Here is the real-world California case, reported in the news in November 2026. A Texas man who had not lived in California for nearly a decade received a “final reminder” from the “California DMV” warning of licence suspension and added fees, including a $160 late payment charge. The text came from a number with a +63 country code — the Philippines — linked to ca.mnvtl.life/dmv, and asked him to reply “Y.” He did not click. Every element of that message is a textbook tell: a foreign country code, a .life domain, a late fee, and a “Reply Y” instruction. US government agencies do not send legal notices from international numbers. If the sender’s number starts with +63, +44, or any country code outside the US, the message is not from a California agency, whatever the sender name says.

The real rule for tickets is the one that makes this variant collapse on inspection. In California, traffic tickets are handled by the courts, not by the DMV by text. A real ticket comes from a court or a police department, usually on paper, and it is paid through the court’s own website or in person. The DMV does not collect traffic fines by text, and it never will. The Santa Barbara County Superior Court says it directly on its alerts page: it has been made aware of “fraudulent text messages being sent to individuals claiming to be from the Department of Motor Vehicles (DMV) or the court system,” which “often state that the recipient owes penalties or fees related to traffic violations or DMV infractions and may include a link or phone number to resolve the matter.” The Yolo County Superior Court is shorter and blunter: “If you receive text messages claiming to be from the DMV and stating that a citation payment is overdue: these messages are fraudulent. The DMV never requests personal or financial information via text.” Attorney General Bonta’s standing line is the same, and it covers both halves: courts and the DMV never text, call, or email asking for money. If you think a ticket might genuinely exist, check it with the court that would handle it — our own guide to how a real California traffic ticket works walks through the real process — and never through a link in the text.

2c. Variant C — The “Notice of Civil Infraction Hearing” With a QR Code

This is the newest version, and it is the most dangerous one, because it looks the most official. Instead of a plain text link, the message contains an image that looks like an official court notice — headed “Notice of Civil Infraction Hearing,” from a district court, with a state seal, a fake case number, a fake court date and time, and a QR code. The notice warns that the recipient must appear in person for a hearing, or admit responsibility and pay a penalty before the hearing date. Scanning the QR code leads, via a CAPTCHA page, to a fake government portal showing an “unpaid balance” — $6.99 in every case documented so far.

Michigan Attorney General Dana Nessel flagged this variant in a consumer alert first issued in March 2026 and reissued on July 2, 2026: “Recently, scam messages have included an image claiming to be a ‘Notice of Civil Infraction Hearing.’ The notice falsely claims to be from a district court… The scam also includes a QR code that leads to a deceptive website.” Her office had received hundreds of complaints to its Consumer Protection Team over the past year. The campaign has hit residents in New York, California, North Carolina, Illinois, Virginia, Texas, Connecticut, and New Jersey. The fake domains in this campaign follow the same pattern as the others — names like ny.gov-skd[.]org and ny.ofkhv[.]life — and the pattern is the point: a “.gov” buried inside a longer domain is not a .gov site. “ny.gov-skd.org” is not ny.gov. It is a .org domain with the letters “gov” inside it, and that is a different thing entirely.

A QR code is worse than a link, because you cannot read the address before you land on it. With a link, you can at least see the domain before you tap. With a QR code, the destination is hidden until the scan. That is exactly why the scammers switched to it. The rule is absolute: never scan a QR code from an unsolicited text. Real courts communicate through official mail, not unsolicited texts with QR codes. A court notice that arrives as a picture in a text message is not a court notice.

One honesty note belongs here, because this guide does not print what it cannot source. No California-specific court has been documented issuing a warning about this exact QR-code variant as of November 6, 2026. The variant is documented nationally, the multi-state list includes California, and the Michigan alert is the official flag. So this page presents it as what it is: the newest version of the same scam, now reaching California phones — not as a California-court warning that does not exist. If a California court flags it later, this page should be updated with that citation.

2d. Variant D — The REAL ID “Update Your Contact Information” Text

This version is the oldest of the five, and it keeps coming back because REAL ID is a real programme with real deadlines that people are genuinely unsure about. The first documented wave came in March 2021. The DMV issued a press release on March 1, 2021, after texts circulated saying: “Our records indicate that your contact information must be updated for REAL ID Compliance. Provide an Up-to-date Mailing Address and Phone Number.” Clicking “continue” led to: “Action Needed: Due to an update on our new regulation complaint, every CaDMV customer must update their contact information.” The DMV’s then-Director, Steve Gordon, was blunt: “The DMV has not sent such a text, nor would we… We offer secure online services and send text messages for some services, but never ask for personal information outside of a secure DMV account accessed by the customer.”

The same release contains the cleanest official statement of the rule anywhere, and it should be quoted, not paraphrased: “The DMV does not send customers unsolicited requests for information. When the DMV texts or emails customers, it is based on action initiated by the customer.” That one sentence decides nearly every text you will ever receive. Did you start the action? If not, the message did not come from the DMV.

The variant returned in 2026, riding on real news: a large batch of California REAL IDs had been issued with wrong expiration dates, the DMV was mailing replacement notices, and replacement fees were waived. Scammers exploited the real story, sending texts and emails claiming the recipient must “verify” or pay for a replacement. The DMV’s warning for that wave was the same rule in a new context: it will not ask for payment or personal data by text, email, or unexpected phone call in connection with the reissue. The real replacement notices arrive by mail. Our own guide covers that wave in full at REAL ID reissue notice — if your text mentions a REAL ID replacement, start there. And note the reporting detail from the 2021 release, which still applies: report phishing to the FTC at ftc.gov/complaint, forward a phishing email to reportphishing@apwg.org, and forward a phishing text to SPAM (7726).

2e. Variant E — The Registration / Licence “Final Reminder”

The fifth version is quieter and therefore easy to miss. It does not threaten arrest. It says your vehicle registration or your driver’s licence “will expire soon,” or that this is a “Final Reminder,” and it directs you to click a link or call a number to renew. Sometimes it wears a fake DMV logo. Sometimes it uses a near-identical URL — dmv.ca.com, dmv-ca.gov, or ca-dmv.net instead of dmv.ca.gov. The difference between those addresses and the real one is a few letters, and on a phone screen, in a hurry, a few letters are easy to miss. That is the whole design.

Other versions of this one say “Verify your identity to avoid DMV penalties” or “your account needs verification.” The DMV’s own scam page lists exactly that wording — “Verify your identity to avoid DMV penalties” — as one of its common examples of a scam. The real rule is the same as for the other four versions. If a registration or licence is expiring, the DMV sends a paper notice to the mailing address on file, not a text or email with a clickable link. A paper notice has your name and address on it, a specific action, and weeks to respond. A text with a link has none of those things. For the real renewal process, see our registration renewal guide and our licence renewal guide — both describe what the real notice looks like and what the real renewal costs, from official sources.

3. What the Real DMV NEVER Does by Text — and What It DOES Do

This is the section to bookmark, because it is the whole guide in one list. Everything on the left is verified on the DMV’s own scam-alert page or in the DMV’s own 2021 release. Everything on the right is the same sources’ description of legitimate contact. The single most important correction in this guide is the one in the second half: the DMV does send some text messages. Several ranking pages say “the DMV never texts at all,” and that is false. The DMV’s own page says “some DMV offices may send official reminders.” The difference between a real reminder and a scam is not whether a text arrived — it is what the text asks for. A page that tells you “the DMV never texts” will make you delete a real appointment reminder, and a page that tells you “texts are fine” will make you click a scam. This section gets the line right.

The NEVER list

The real California DMV NEVER, by text — or by unsolicited email or phone call:

• Asks for personal or financial information. No driver’s licence number, no Social Security number, no banking information, by text. Ever. The DMV’s page states this twice, in two forms: “The DMV will never ask for personal or financial information by text,” and official reminders “will never ask for your Social Security number, banking info, or full driver’s license number via text or email.”
• Sends a text with a link to make a payment. The DMV’s own sentence: “The DMV does not send text messages with links to make payments.” Any payment link in a DMV text is, by definition, not from the DMV.
• Asks for payment by gift card, wire transfer, or an app like Venmo or Zelle. No government agency collects fees this way. If a message asks for a gift card, it is a scam, whatever name is on it.
• Threatens arrest, fines, or suspension in an unsolicited message. Real enforcement does not arrive as a threat in a text. Suspension or revocation happens through official mail and court documents, not through a message that says “pay now or lose your licence.”
• Sends unsolicited requests for information. “The DMV does not send customers unsolicited requests for information. When the DMV texts or emails customers, it is based on action initiated by the customer.” If you did not start the action, the message did not come from the DMV.
• Asks you to “verify your identity to avoid penalties,” to “update your contact information” for REAL ID, or to renew a registration or licence through a link. The DMV lists the “verify your identity” wording as a common scam example on its own page.
• Suspends or cancels a licence through a text message or email. The DMV does not do this by text, and it does not do it by email either.
• Collects traffic-ticket fines by text. Traffic fines are a court matter in California. The DMV does not collect them, by text or by any other channel.

What the real DMV DOES send

Now the other half. The DMV does send some text messages — but only ones tied to an action you took, and only in the forms below. If a text does not match one of these descriptions, it is not a real DMV text.

• Appointment reminders. If you booked a DMV appointment online, you may receive a text reminder about that appointment — the office, the date, the time. It refers to a service you actually booked. It asks for nothing, threatens nothing, and contains no payment link. Our guide to booking a California DMV appointment explains what the real reminder refers to, and our Get in Line guide covers the same-day notification tied to an office visit you started.
• Registration renewal notices and service notifications — only for people who signed up. If you signed up for a specific DMV notification service through your online DMV (MyDMV) account, you may receive a notification about that service. The message refers to a service you actually use, and it follows the same rule: no payment link, no data request, no threat. You can check the real state of your registration yourself by logging into your MyDMV account — typed in yourself, never through a link in a message.
• Office notifications tied to an action you took. Same principle: a notification about something you started at a specific office.

And here is how a real DMV notice arrives when it is not a text at all: by mail, to the address on file — an envelope with the DMV logo, your name and address, an explanation of the action needed, a deadline measured in weeks or months, and a mailing address or website where you can respond. Real DMV mail never asks you to click a link or call a number to “verify” information. Real DMV emails come only if you signed up, from an address ending in @dmv.ca.gov. If the message you received does not look like any of this, the safe assumption is the right one: it is not from the DMV.

Two claims that appear on other guides are deliberately not printed here, because no official DMV source confirms them. One guide claims that real DMV texts come from numbers starting with 833. Another claims suspicious texts can be forwarded to the DMV at a short code, DMVCA (36822). Neither claim was found on any dmv.ca.gov page or DMV release in this research, and sender numbers can be spoofed in any case, so a prefix is not a safety test. This page does not repeat them as fact. The reporting steps that are verified — 7726, ReportFraud.ftc.gov, ic3.gov — are in section 5, and they are the ones to use.

4. Spot a Fake in 10 Seconds: The 12-Flag Checklist

Run this checklist on any unexpected DMV text. One flag is enough to stop. Two flags, and you can delete it without a second thought. Print it, or send it to a parent — older readers and young adults are both named as targets in the official warnings, and the checklist works the same for both.

1. It demands money by text. Any text demanding payment for a ticket, toll, fine, or fee is a scam. Full stop. No US motor vehicle department demands payment by text message.
2. It has a link or a QR code to pay. The DMV does not send texts with links to make payments. Never scan a QR code from a text — a QR code hides its destination until you have already landed on it.
3. It threatens you. Suspension, arrest, prosecution, credit-score damage, a “DMV violation database,” a 35% fee. A real notice does not stack five punishments in one message. A scam does, because fear makes people act before they think.
4. It is urgent. “Pay today,” “within 24 hours,” “final notice,” “enforcement begins on [date].” Real DMV mail gives weeks or months. Urgency is the scammer’s tool, not the DMV’s.
5. The sender is wrong. A random number, an email address as the sender, or a foreign country code — +63 for the Philippines and +44 for the UK appear in documented examples. US government agencies do not send legal notices from international numbers. Also note: a sender name that says “CA DMV” proves nothing. Sender names are trivially spoofed, and a scammer can make any name appear on your screen.
6. The link is wrong. It is not dmv.ca.gov. Lookalikes to watch for: dmv-ca.gov, dmv.ca.com, ca-dmv.net, dmv-verify.com, ca.gov-okqs.bond, ca.mnvtl.life/dmv, and anything ending .top, .xin, .info, .life, .bond, or .cc. Read the domain from right to left: the real domain is the part immediately before the final dot-slash. “ca.gov-okqs.bond” is a .bond domain, not a .gov domain, whatever letters it contains.
7. It asks you to reply “Y.” Or to reply “STOP” to opt out, or to copy the link into your browser. Replying confirms your number is live and monitored by a real person, which invites more scam messages. Do not reply at all.
8. It is generic. “Dear Customer,” no full name, no citation number, no plate number, no specific toll date or location, no invoice number. Real notices name the specific violation, the date, the location, the plate, and the invoice number. A message that knows nothing about you is not a message about you.
9. It cites fake authority. “Administrative Code 15C-16.003,” a “DMV violation database,” a “35% service fee.” None of these exist. A code number in a threatening text is not evidence of anything except that the scammer knows a code number looks convincing.
10. It arrived even though you do not fit. You do not drive toll roads. You do not live in California any more. You have no ticket. You have never owned a car in California. The texts are blasted indiscriminately to thousands of numbers, and the people who receive them include people who left the state a decade ago. If the text does not fit your life, believe your life, not the text.
11. Bad grammar or odd phrasing. The DMV’s own list includes poor grammar and misspellings as a flag, and many scam texts still have them. But warn yourself, too: modern scam texts are often well-written, sometimes better written than a real government notice. Clean grammar does not mean real. A perfect text with a payment link is still a scam.
12. It mentions gift cards, wire transfers, Venmo or Zelle, crypto, or a “verification code.” The DMV never asks for any of these by text. A “verification code” request is especially dangerous: in reported variants, the code the victim hands over is the bank’s code for adding the victim’s card to a mobile wallet on the scammer’s phone. If a message asks for a code, it is not a DMV message.

One more test, for the message that passes all twelve flags and still feels wrong: check it yourself, through a channel you found yourself. Type dmv.ca.gov into your browser. Log into your MyDMV account. Call 1-800-777-0133 from a number you looked up yourself. For a possible real ticket, call the court. For a possible real toll, log into your FasTrak or Toll Roads account directly. A real obligation will be visible there. A scam will not be, because it does not exist anywhere except in the text.

5. What to Do: Three Situations, Step by Step

What you do next depends on one thing: how far the scam got. Most readers are in the first situation — they received the text and have not clicked anything. That takes one minute to handle. The second situation — you clicked but entered nothing — takes a few minutes. The third — you entered information or paid — needs action now, calmly, in the order below. Do not panic, and do not skip steps because you feel embarrassed. Millions of people receive these texts. The FTC received nearly 247,000 text-message fraud reports in 2024 alone, and that is only the people who reported.

5a. You Received the Text and Did NOT Click (Most Readers)

1. Do not click, do not reply, do not scan the QR code, do not call any number in the message. Not even “STOP.” Every response confirms the number is live.
2. Screenshot the message — including the sender number and the link or QR code. The Attorney General’s office asks for exactly this in complaints: the sender number and the website in the text.
3. Forward the text to 7726 (SPAM). Copy the message and forward it to 7726, which spells SPAM on a phone keypad. It is free on major US carriers, and the carrier may reply asking for the sender’s number. The FTC calls this the first reporting step: “This helps your wireless provider spot and block similar messages in the future.”
4. Use your phone’s “Report Junk” or “Report spam” option, then block the sender. Blocking one number will not stop the campaign — the scammers rotate numbers — but it stops that sender, and the report helps your carrier and your phone’s spam filter learn the pattern.
5. Report it to the FTC at ReportFraud.ftc.gov. Paste the message text into the comments. The FTC cannot accept forwarded messages, so the paste matters — copy the wording, the sender number, and the link as it appeared.
6. For toll variants, also file at ic3.gov. The FBI asks victims to file at ic3.gov including the phone number the text came from and the website listed in the text. That detail — the sender number plus the website — is what investigators use to shut domains down.
7. Delete the message. Once you have screenshotted it and reported it, delete it, so nobody else who picks up your phone taps the link by accident.
8. If you are still worried, check it yourself. Type dmv.ca.gov into your browser and log into MyDMV, or call the DMV at 1-800-777-0133 using a number you found yourself. For a possible real ticket, check with the court that would handle it. For a possible real toll, log into your FasTrak or Toll Roads account directly. A real obligation will be visible there. A scam will not.

5b. You Clicked the Link but Entered NOTHING

1. Close the page immediately. Do not enter anything, do not download anything, do not allow any permission the page asks for.
2. Clear the browser cache for that site and run your phone’s security or antivirus scan if one is offered. The fake pages in this campaign are usually built to collect typed information, not to install software, but do not take the chance.
3. Still report it — 7726, ReportFraud.ftc.gov, and ic3.gov for toll variants. The URL helps investigators shut the domain down, and your report is more valuable now, because it confirms the link is live.
4. Watch for follow-up scam texts and calls over the next days. Clicking marks the number as active, and the same operation may try a different costume — a ticket text after a toll text, or a court-notice image after a ticket text. Run the 12-flag checklist on every new message, and do not assume a second message is real just because it looks different from the first.

5c. You Entered Information or Paid (Act Now, Calmly)

1. Call your bank or card issuer immediately. Report the charge as fraud, ask for a replacement card, and ask them to watch for — and block — attempts to add the card to a mobile wallet. Dispute any unfamiliar charges. Do this first, before anything else, because money moves fastest.
2. Change the password for any account whose password you entered, and enable two-factor authentication on it. If you used the same password anywhere else, change it there too.
3. Place a fraud alert with one of the three credit bureaus — Equifax, Experian, or TransUnion. One alert notifies the other two. A fraud alert tells lenders to take extra steps to verify your identity before opening new credit in your name. This page does not print the bureaus’ phone numbers, because the numbers in the secondary sources could not be verified against an official source at build time — contact the bureau through its official website or the number printed on your credit report.
4. File an identity-theft report at IdentityTheft.gov if you gave a Social Security number, a date of birth, or enough data to open accounts. The FTC’s spam-text guidance points there directly for anyone who shared a Social Security, credit card, or bank account number: IdentityTheft.gov gives you steps based on what was shared.
5. File at ic3.gov (FBI) and ReportFraud.ftc.gov (FTC), and file a complaint with the California Attorney General at oag.ca.gov/contact/general-contact-form. Include the screenshot with the sender number and the website from the text.
6. Check your free credit reports at annualcreditreport.com — the only official site for free credit reports — for accounts or inquiries you did not open. Check all three bureaus, and check again in a few weeks, because fraudulent accounts do not always appear immediately.
7. Call the DMV at 1-800-777-0133 if you gave a driver’s licence number, and ask what to do about a compromised licence number. Use the number you looked up yourself, not a number from the text.
8. If the fake site asked for a one-time code and you gave it, tell your bank explicitly. In reported variants, that code is used to enrol your card in a mobile wallet on the scammer’s phone. Say so in so many words when you call, so the bank checks for wallet enrolment, not just for charges.

A note on the reporting step that most people skip: report even if you did not lose money. The FTC, the FBI, and the Attorney General all build their cases from reports, and the domains get shut down because enough people reported the same link. Your one report is the difference between a scam link that runs for a week and one that runs for a month. The carrier report to 7726 is the fastest of the three — it takes seconds — and it is the one that protects the next person who receives the same text.

6. Real Examples: Scam Wording vs Official Messages

Reading a real example is the fastest way to learn the pattern, because the pattern is in the wording. Every example below is labelled with its source and its date. Examples quoted from official warnings — the FBI, the FTC, the DMV, Bitdefender — are quoted verbatim. Examples labelled “illustrative” in their source are presented as “what this kind of text looks like,” never as a real message someone received. No scam link on this page is clickable. Every scam domain is defanged — written with [.] instead of a dot — so it cannot be tapped by accident. Do not visit them, and do not type them into your browser. They are printed here so you can recognise them, not so you can open them.

Example 1 — The FBI’s toll text (official example, April 2024)

“(State Toll Service Name): We’ve noticed an outstanding toll amount of $12.51 on your record. To avoid a late fee of $50.00, visit https://myturnpiketollservices[.]com to settle your balance.”

Source: FBI IC3 Public Service Announcement I-041224-PSA, April 12, 2024. Note for the reader: $12.51 and $50.00 recur across complaints — the amounts are part of the template, not a real balance. If your text has those exact amounts, it is the same template.

Example 2 — The FTC’s DMV ticket text (official description, July 2025)

“Department of Motor Vehicles (DMV) Final Notice: Enforcement Penalties Begin on [date]. Our records show that as of today, you still have an outstanding traffic ticket… If you do not complete payment by [date], we will take the following actions: 1. Report to the DMV violation database. 2. Suspend your driving privileges for 30 days. 3. Suspend your vehicle registration. 4. Transfer to a toll booth and charge a 35% service fee. 5. You may be prosecuted and your credit score will be affected.”

Source: FTC consumer alert, July 21, 2025, as quoted in the FTC’s own alert and corroborated by the Benjamin Goldman Law Office post of July 15, 2025 and by seniorphoneguide.com. The “Administrative Code 15C-16.003” citation that appears in some versions of this text is fake authority — it is part of the scam, not a real law. The dates in this text rotate with every wave; the June 2025 “pay by” dates in the 2025 wave are already past, and any date in a text you receive today is a new rotation of the same template.

Example 3 — The California example from the live campaign (Bitdefender, 2026)

“California Administrative Penalty Notice: You have an unpaid traffic ticket… An arrest warrant will be issued… Your vehicle registration will be suspended starting March 18… Pay: https://ca[.]gov-okqs.bond/portal — (Reply ‘Y’ and reopen to click the link)”

Source: Bitdefender Labs, “Operation Road Trap,” April–May 2026. Note the .bond domain, the “Reply Y” instruction, and the “March 18” suspension date — a date that belonged to the 2026 wave and has already passed. Three tells in one message: a non-.gov domain, a reply instruction, and a deadline designed to create panic.

Example 4 — A real California DMV text received by a real person (news report, November 2026)

A Texas man who had not lived in California for nearly a decade received a “final reminder” from the “California DMV” warning of licence suspension and added fees, including a $160 late payment charge. The text came from a +63 (Philippines) number, linked to ca.mnvtl.life/dmv, and asked him to reply “Y.” He did not click. Source: theeveningleader.com, November 2026, “Is that traffic ticket text a scam or real?” This is the case that proves the point of section 1: the text arrived for a person with no California connection at all, from a foreign number, to a .life domain, with a late fee and a “Reply Y” instruction. Every element is a tell, and the recipient spotted them all.

Example 5 — The 2021 REAL ID text (the DMV’s own warning)

“Our records indicate that your contact information must be updated for REAL ID Compliance. Provide an Up-to-date Mailing Address and Phone Number.” → “Action Needed: Due to an update on our new regulation complaint, every CaDMV customer must update their contact information. Update now at: [fictitious link].”

Source: California DMV press release, March 1, 2021, via NBC Palm Springs. The DMV’s response at the time: “The DMV has not sent such a text, nor would we.” Five years later the same wording still circulates, because it still works on people who are unsure about REAL ID.

Example 6 — The civil-infraction-hearing image (official description, 2026)

An image styled as a “Notice of Civil Infraction Hearing” from a district court, with a state seal, a fake case number, a fake court date, and a QR code. The text warns the recipient must appear in person for a hearing or admit responsibility and pay a penalty before the hearing date. Scanning the QR code leads, via a CAPTCHA page, to a fake government portal showing an “unpaid balance” of $6.99 in every case documented so far. Source: Michigan Attorney General consumer alert (March 2026, reissued July 2, 2026) and Bleeping Computer, summarised November 5, 2026. The fake domains in this campaign include names like ny.gov-skd[.]org and ny.ofkhv[.]life — neither has anything to do with real state government infrastructure, and the pattern to remember is the domain ending (.life, .bond, .cc, .top), not any single address, because the addresses rotate.

What a REAL DMV message looks like (for contrast)

No official source publishes a verbatim legitimate DMV reminder text, so this page does not fabricate one. What the official sources do describe, precisely, is what a real message contains and what it never contains. A real appointment reminder refers to an appointment you booked: the office, the date, the time. It asks for nothing, threatens nothing, and contains no payment link. A real DMV letter arrives by mail, on DMV letterhead, with your name and address, a specific action, and weeks or months to respond. A real DMV email comes only if you signed up, from an address ending in @dmv.ca.gov. If the message in your hand does not match that description, it is not a real DMV message, however official it looks.

7. How to Check a Real Ticket, Toll, or Registration Yourself

The fastest way to end the worry is to check the real record through a channel you found yourself. A real obligation will be visible there. A scam will not be, because it does not exist anywhere except in the text. Do each check by typing the address yourself or by calling a number you looked up yourself — never through a link, a number, or a QR code in the message.

• A possible real traffic ticket: traffic tickets in California are handled by the courts, not by the DMV by text. Check with the court that would handle it — the county where the ticket was issued — through the court’s own website or by phone. Our California traffic ticket guide explains how a real ticket works, where it is paid, and what a real notice contains.
• A possible real toll: log into your FasTrak account or The Toll Roads account directly, at the official site or app you already use. If you have no account, a toll text is nearly conclusive on its own: toll agencies mail pay-by-plate invoices to the registered owner’s address. A list of California tolling agencies is at fastrak.org/tollinginca.
• A possible real registration or licence issue: log into your MyDMV account at dmv.ca.gov, or call the DMV at 1-800-777-0133. The MyDMV account shows your real registration status, your real licence status, and any real action needed — and it is the place the DMV itself points you to. Our registration renewal guide and our DMV fees guide describe what a real renewal notice looks like and what the real fees are, from official sources.
• A possible real appointment: if you booked a DMV appointment and received a text about it, compare the text against section 3: does it name your real appointment (office, date, time), ask for nothing, threaten nothing, and contain no payment link? If it asks for money, data, or a click to “verify,” it is a scam even if you do have an appointment. When in doubt, verify at dmv.ca.gov or 1-800-777-0133. Our appointment booking guide covers the real process.
• A possible real REAL ID matter: REAL ID replacement notices arrive by mail. If your text mentions a REAL ID replacement, start at our REAL ID reissue notice guide, which covers the real replacement programme and the scam texts riding on it.

One habit makes all five checks unnecessary in future: bookmark dmv.ca.gov and the court and toll sites you actually use, and never reach them through a message. The DMV’s own advice is the same: “Bookmark the official California DMV website dmv.ca.gov” and “visit the official California DMV website dmv.ca.gov directly — type the address into your browser, don’t trust search ads or unknown links.” A bookmark cannot be faked by a text message.

8. Why California Gets Targeted — and Who Gets Targeted

California is not targeted because Californians are careless. It is targeted because it is the biggest, most plausible market for this scam. Bitdefender Labs, which tracked the campaigns from December 2025 through April 2026, found California and Texas were the most-targeted US regions. California has the country’s largest toll-road footprint — FasTrak, The Toll Roads, Bay Area express lanes — and tens of millions of licensed drivers. A scam text needs only a plausible agency name, and in California, “FasTrak” and “DMV” are plausible to almost everyone who receives them. The US campaign alone ran 17 distinct scam campaigns with more than 25,000 phishing URLs; worldwide, Bitdefender counted more than 79,000 fraudulent messages across 40 campaigns, with more than 31,900 different phishing URLs. Those are global and US totals, not California totals — this page prints no California-specific victim count or loss figure, because no official source gives one.

Who receives the texts? Everyone. Young adults are increasingly conned by the toll and ticket variants, according to the Michigan Attorney General’s July 2026 alert, which says scammers are “increasingly conning young adults by exploiting a false sense of urgency.” Seniors are a named audience for several of the best guides on this topic, because the texts are written to create panic and because older readers are less likely to have seen the pattern before. The honest answer is that the texts are blasted to thousands of numbers at once, and the people who pay are the people who were worried, in a hurry, or holding a phone at the wrong moment — not the people who are careless. If you received one, you are not the exception. You are the target list.

There is one more reason the scam survives: it adapts faster than the warnings. The toll version ran in 2024. The ticket version surged in 2025. The QR-code court notice arrived in 2026. Each version borrows the credibility of the last real thing in the news — a REAL ID deadline, a toll increase, a court date — and each one uses the same shape underneath. The defence does not change with the costume. The DMV never asks for personal or financial information by text. It does not send texts with links to make payments. If the message asks for money or data through a link, it is not from the DMV, whatever it calls itself this month.

9. Why the Internet Gets This Wrong

If you search for this topic, you will find pages that contradict each other, and the contradictions are the reason this page exists. Three errors recur across the ranking pages, and each one is worth naming, because each one can make a reader do the wrong thing.

Error one: “The DMV never texts at all.” Several pages state this as an absolute. It is false, and the DMV’s own page contradicts it: “Some DMV offices may send official reminders.” The 2021 DMV release says the same thing in different words — the DMV sends text messages for some services, but never asks for personal information outside a secure DMV account accessed by the customer. A reader who believes the absolute version will delete a real appointment reminder. A reader who believes the opposite — that DMV texts are normal — will click a scam. The correct rule, and the one this page prints, is the DMV’s own: texts happen only for actions you initiated, and they never ask for money, data, or a click to pay.

Error two: unsourced “official” details. The most-copied California competitor pages present several claims as DMV fact without an official source: that real DMV texts come from numbers starting with 833, that suspicious texts can be forwarded to the DMV at a short code, and a set of credit-bureau phone numbers. None of those claims was found on any dmv.ca.gov page or DMV release in this research. They may be true or they may not be — but a guide that prints them as DMV fact, without a source, is guessing, and this page does not guess. Where a claim could not be verified, this page says so and leaves it out. The reporting steps on this page — 7726, ReportFraud.ftc.gov, ic3.gov, IdentityTheft.gov, the Attorney General’s complaint form — are each traceable to the FTC, the FBI, or the Attorney General’s office, and the sources section lists them.

Error three: stale dates and missing variants. Several 2025-era pages still present the toll variant as the whole story and miss the 2025 ticket-text wave and the 2026 QR-code court-notice variant entirely. Others quote a June 2025 “pay by” date as if it were current, months after it passed. And the four overlapping California scam pages on the most-copied competitor site contradict each other: one says the DMV “does not send unsolicited text messages” at all, while another says it sends appointment and renewal texts to people who signed up. Both cannot be right, and the second one is — with the qualification in section 3. This page covers all five variants, dates every example, and names the invented phrases — “DMV violation database” and the 35% fee — that readers actually search for when they are trying to decide whether their text is real.

None of this is a criticism of the reader. The scam is designed by professionals, it is updated every few months, and it is backed by tens of thousands of phishing URLs. The defence is not cleverness. It is one rule, applied every time: no payment, no personal information, no click, through a text message, ever. Check it yourself at dmv.ca.gov, or call 1-800-777-0133. Everything else is noise.

Frequently asked questions

Sources

• California DMV, “DMV Scam Alert” — dmv.ca.gov — DMV Scam Alert (read live November 6, 2026: “The DMV will never ask for personal or financial information by text”; “The DMV does not send text messages with links to make payments”; official reminders never ask for a Social Security number, banking info, or full driver’s licence number, never threaten arrest, fines, or suspension, and never ask for payment through gift cards, wire transfers, or apps like Venmo or Zelle; report suspicious messages to the FTC at reportfraud.ftc.gov)
• California DMV press release, March 1, 2021 — REAL ID phishing warning, via NBC Palm Springs (“The DMV does not send customers unsolicited requests for information. When the DMV texts or emails customers, it is based on action initiated by the customer.”; report phishing texts to SPAM (7726))
• Federal Trade Commission, “That text about an overdue traffic ticket is probably a scam” — consumer alert, July 21, 2025, at consumer.ftc.gov (threat list: “DMV violation database,” licence and registration suspension, 35% service fee, prosecution, credit damage; report at ReportFraud.ftc.gov; learn more at ftc.gov/textscams)
• Federal Trade Commission, “How to Recognize and Report Spam Text Messages” — consumer.ftc.gov (updated October 1, 2026: forward to 7726, report at ReportFraud.ftc.gov, use “report junk” in your messaging app; IdentityTheft.gov if a Social Security, credit card, or bank account number was shared)
• Federal Trade Commission, Data Spotlight, April 2025 — $470 million lost to scams that started with a text message in 2024, five times the 2020 figure ($94 million); bogus toll notices the fourth most common text scam; nearly 247,000 text-message fraud reports in 2024
• Federal Trade Commission, “Got a text about unpaid tolls? It’s probably a scam” — consumer alert, January 17, 2025
• FBI Internet Crime Complaint Center, Public Service Announcement I-041224-PSA, April 12, 2024 — ic3.gov (more than 2,000 toll-smishing complaints since early March 2024 from at least three states; canonical $12.51 / $50.00 example; file at ic3.gov with the sender number and website)
• California Attorney General Rob Bonta — consumer alert on text-based toll, parking, and delivery scams (FasTrak express-lane charges; “courts and the DMV never text, call, or email asking for money”; FasTrak “does not request payment by text with a link to a website”; real toll violations arrive by paper mail; file a complaint at oag.ca.gov/contact/general-contact-form) and “Slam the Scam Day” alert — oag.ca.gov
• Santa Barbara County Superior Court, “Current Alerts” — santabarbara.courts.ca.gov (fraud alert: scam texts claiming DMV penalties; call the DMV at 800-777-0133 if concerned)
• Yolo County Superior Court, Divisions — yolo.courts.ca.gov (“If you receive text messages claiming to be from the DMV and stating that a citation payment is overdue: these messages are fraudulent.”)
• Michigan Attorney General Dana Nessel, consumer alert, March 2026, reissued July 2, 2026 — michigan.gov (“Notice of Civil Infraction Hearing” image with QR code; hundreds of complaints; young adults increasingly targeted)
• Bitdefender Labs, “Operation Road Trap” — bitdefender.com (December 2025–April 2026: 79,000+ fraudulent messages, 40 campaigns, 31,900+ phishing URLs worldwide; US: 17 campaigns, more than 25,000 phishing URLs; California and Texas most targeted; California example with ca[.]gov-okqs.bond)
• News case: theeveningleader.com, November 2026 — “Is that traffic ticket text a scam or real?” (real California DMV text received by a Texas man who had not lived in California for nearly a decade: +63 number, ca.mnvtl.life/dmv, $160 late charge, “Reply Y”)
• QR-code variant reporting: Bleeping Computer, summarised November 5, 2026 — fake court-notice image, QR code, $6.99 balance in documented cases, fake domains in the campaign
• Our own guides used for boundaries and corroboration: California Traffic Ticket (how a real ticket works); Registration Renewal (real renewal notices); MyDMV Account (the safe place to check your real status); DMV Phone Number (1-800-777-0133); REAL ID Reissue Notice (the REAL ID phishing variant); California DMV Appointment (what a real appointment reminder refers to); DMV Get in Line (office notifications tied to an action you took); DMV Fees (real fees from official sources); Licence Renewal
• Competitor pages used for the search-result and error-spotting work only, never as the source of a load-bearing fact: seniorphoneguide.com, “DMV Scam Text: Spot a Fake Ticket Text and Report It” (the best guide in the set; no California-specific DMV page citation, no QR-code variant); dmvchangeofaddress.com, four overlapping California DMV scam pages (unsourced “833 prefix” and “DMVCA 36822” claims, internally contradictory on whether the DMV ever texts, no QR-code variant); identityiq.com, “DMV Text Scam” (commercial identity-protection site; thin on California specifics); gmork.com, E-ZPass toll-text guide (toll-only; “reply Y” and wallet-enrolment code tricks described as reported); scamadviser.com, “Fake DMV Text Scams Are Stealing Money From Drivers in 2026” (May 11, 2026); pabloshelpdesk.com (October 23, 2026). Their claims are named on this page only as errors or as corroboration, with the DMV, FTC, FBI, and Attorney General sources printed as the facts.

Method note. This page’s headline was tested, not assumed. The DMV’s scam-alert page was read live on dmv.ca.gov on November 6, 2026, and the FTC’s July 2025 ticket-text alert, the FBI’s April 2024 toll-smishing advisory, and the Attorney General’s toll-scam alert were re-checked at build time. A site-restricted search for Reddit and Quora threads on this topic returned no direct threads in this run, and no Google People Also Ask box was available through the search tool used — so the FAQ questions are drawn from the questions the FTC and the DMV describe, from a real reader case reported in the news, and from the top guides’ FAQ sections, and the section is labelled “Frequently asked questions” rather than attributed to a forum thread that was not read. No search volume is claimed anywhere on it. Two claims that appear on other California guides are deliberately not printed here, because no official DMV source confirms them: that real DMV texts come from numbers starting with 833, and that suspicious texts can be forwarded to the DMV at a short code. The credit-bureau phone numbers in some guides were also left out, because the numbers in the secondary sources could not be verified against an official source at build time — the bureaus are named without numbers instead. No loss or growth statistic is printed beyond the FTC’s $470 million figure for 2024, the FBI’s 2,000+ complaints, and Bitdefender’s campaign counts, because no other such figure could be traced to an official source. This page prints no registration-fee figure, no replacement-plate fee, no estate-threshold figure, no smog abatement fee, no knowledge-test question count, and no wait-time minutes, because none of those figures is needed here and several are gated pending verification. The “DMV violation database,” the 35% service fee, and “Administrative Code 15C-16.003” appear only as named inventions inside the scam texts, never as facts. All scam links are defanged with [.] and are not clickable. This site is an independent guide and is not affiliated with the California DMV or dmv.ca.gov.

Last verified against dmv.ca.gov: November 6, 2026. Rules, forms, and fees change — confirm current rules on dmv.ca.gov before you apply. The DMV’s scam-alert page was read live at build time on November 6, 2026: “The DMV will never ask for personal or financial information by text” and “The DMV does not send text messages with links to make payments” are quoted from that page; the FTC’s July 21, 2025 ticket-text alert, the FTC’s spam-text guidance updated October 1, 2026, the FBI’s April 12, 2024 toll-smishing advisory, and the California Attorney General’s toll-scam alert were re-checked at build time; the Santa Barbara and Yolo court warnings were read live; and the Michigan Attorney General’s March 2026 civil-infraction-hearing alert and Bitdefender’s Operation Road Trap report were re-checked. This page prints no registration-fee figure, no replacement-plate fee, no estate-threshold figure, no smog abatement fee, no knowledge-test question count, and no wait-time minutes, because none of those figures is needed here and several are gated pending verification. The “DMV violation database,” the 35% service fee, and “Administrative Code 15C-16.003” appear only as named inventions inside the scam texts, never as facts. No search volume is claimed anywhere on it. This site is an independent guide and is not affiliated with the California DMV or dmv.ca.gov.