TL;DR: Fake 407 ETR texts claim a toll is overdue, threaten a penalty and link to a site that isn’t 407etr.com. In 2025, 407 ETR’s security teams took down more than 1,100 fraudulent domains impersonating it. Real payment reminders come from an official six-digit short code and include your first name, and 407 ETR says it "will never ask for passwords, PINs or credit card details through any communication channel." Check your balance only at 407etr.com or in the 407 ETR app, forward fakes to 7726 and report to the Canadian Anti-Fraud Centre.
What the fake looks like
407 ETR’s March 2026 Fraud Prevention Month release lists the common themes:
- a claim that a toll payment is overdue;
- a threat of a penalty if you don’t act right away;
- urgent or threatening language;
- a link to a website that isn’t 407etr.com.
MalwareTips recorded one version headed "407 ETR: Unpaid Toll Reminder," warning that unpaid tolls "may result in the revocation of your driver’s license," with a link to an address beginning 407etr.com- followed by a different domain. That’s the trick: the real brand name sits at the front of the link, and the actual website is whatever comes after the dash.
How big is this?
Big enough that 407 ETR runs a takedown operation. In 2025 its cybersecurity teams identified and took down more than 1,100 fraudulent domains impersonating the company, according to the March 2026 release. That’s roughly three fake 407 websites a day, every day, for a year. In November 2025 the company had already warned of a "surge" of impersonation messages (407 ETR, Nov 2025; CTV News).
Real reminder or fake? The quick test
| Clue | Real 407 ETR | Fake |
|---|---|---|
| Sender | Official six-digit short code | A random mobile number, email or long number |
| Greeting | Uses your first name | Generic or none |
| Tone | No threats | "Pay today or lose your licence" |
| Link | 407etr.com only | 407etr.com-something, or another domain |
| Asks for | Never passwords, PINs or card details | Card number, login, personal details |
407 ETR says it does contact customers by text, email, phone and mailed letter, so a message from 407 isn’t automatically fake. What it won’t do is ask for sensitive details or use threatening language to rush you.
Why it works
407 ETR does send real payment reminders by text, so a toll message doesn’t sound absurd, especially if you’ve driven the 407 recently. The scammers aren’t after the toll; they’re after your card details.
What to do
- Don’t click. Open the 407 ETR app or type 407etr.com and log in to My Account to check your balance.
- Forward the text to 7726 so your carrier can block it.
- Report it to the Canadian Anti-Fraud Centre.
- If you paid or typed your card number, call your card issuer right away and ask for a new card.
- If you entered a password that you use elsewhere, change it everywhere.
407 ETR also keeps a fraud awareness page at 407etr.com/fraudawareness. Its CIO, Ali Razavi, put the rule simply: "customers should always verify communications through official 407 ETR channels."
Same scam, other places
Toll texts are a global favourite: see E-ZPass in the US. Peel police also investigated fake company plates used to dodge 407 tolls (Project Octane).
Scammers build their target lists from leaked data. A free email exposure check shows whether your email is in breach data too.
Frequently Asked Questions
How do I know if a 407 ETR text is real?
Real payment reminders come from an official six-digit short code and include your first name. Don’t click any link; check your balance at 407etr.com or in the 407 ETR app.
Does 407 ETR ask for card details by text?
No. 407 ETR says it will never ask for passwords, PINs or credit card details through any communication channel.
What is the official 407 ETR website?
407etr.com. A link like 407etr.com-something is a different website.
How many fake 407 ETR websites are there?
407 ETR said it took down more than 1,100 fraudulent domains impersonating it in 2025.
I paid on a fake 407 ETR site. What now?
Call your card issuer immediately, ask for a new card, and report it to the Canadian Anti-Fraud Centre.
Where do I report a fake 407 ETR text?
Forward it to 7726 and report it to the Canadian Anti-Fraud Centre.
Sources
- 407 ETR: Fraud Prevention Month tips (Mar 5, 2026)
- 407 ETR: Beware of messages impersonating the company (Nov 7, 2025)
- CTV News: 407 ETR seeing increasing reports of phishing scams
- MalwareTips: 407 ETR unpaid toll text scam
- Canadian Anti-Fraud Centre