Google is taking new steps to protect Android users from rising text message scams, especially those targeting consumers with fake “unpaid toll” alerts. A new update to Google Messages—the default messaging app on most Android devices—will now identify and flag suspicious texts, helping users avoid falling for common phishing tricks.
This update, part of a broader Android enhancement rollout, arrives just ahead of Google’s developer conference. Alongside aesthetic improvements and the expansion of the Gemini AI assistant to smartwatches and vehicles, this security update is meant to address growing concerns over text-based scams that cost consumers hundreds of millions annually.
Toll Text Scams Are on the Rise
Scams involving fake toll payment requests have become increasingly common. According to data from the FBI’s Internet Crime Complaint Center, about 60,000 toll-related scam complaints were reported last year alone. Between January and late February of this year, fake toll payment messages surged nearly fourfold, according to cybersecurity firm McAfee. In total, the Federal Trade Commission (FTC) estimates that Americans lost around $470 million to text scams in 2024.
Typically, these scam messages claim the recipient owes a small toll payment and prompt them to click on a link or call a number. The messages often impersonate real toll collection services like E-ZPass and may use fake logos and urgent language to pressure the recipient. States like New York have issued warnings, reminding users that official agencies never request personal information like credit card or social security numbers via text.
How the Scam Alerts Work
The updated Google Messages app uses an on-device detection system that analyzes incoming messages for typical red flags, including suspicious URLs, urgent wording, grammatical errors, and fake branding. When a message appears to be a scam, the app will alert the user with a “likely scam” warning and provide options to block or report the sender—or to mark it as safe if it was mistakenly flagged.
Importantly, this detection runs directly on users’ phones, meaning that private messages are not sent to Google’s servers for analysis. This ensures that the system maintains user privacy while adding an extra layer of defense against phishing attacks.
Smarter Scams Require Smarter Protection
Fraudsters are becoming more sophisticated in their methods. Scammers now rotate web addresses or cloak links to bypass detection systems. They may also mimic real toll service language to sound legitimate. What may look like a simple message is often carefully crafted to manipulate the recipient.
Sameer Samat, Google’s President of the Android ecosystem, emphasized how deceptive these texts can be. He noted that while the scams may appear simple on the surface, they often involve complex tactics designed to fool both users and security systems.
Google’s response is to evolve its scam detection accordingly, using AI and local device processing to adapt quickly to new scam formats. In addition to toll scams, the system can now flag texts related to cryptocurrency fraud, technical support hoaxes, and gift card cons.
Keeping Android Users Safe and Informed
Other tech companies are also working to stop scam texts. McAfee offers tools to detect risky links in messages, and Bitdefender has developed a chatbot that can analyze suspicious emails and messages. However, Google’s solution stands out by being built directly into the native messaging platform many Android users already rely on.
This security-focused update follows other safety efforts by Google, such as warning users when sharing their phone screen with unknown contacts during banking app use and identifying scam websites in Chrome.
As scammers become more inventive, Google aims to stay a step ahead. “They’re raising the bar,” Samat said. “So we had to match it—and go further.”
