Overview
- Texts posing as “final notice” traffic tickets now use a QR code and a $6.99 fee to lure drivers into paying.
- Scanning the code leads through a CAPTCHA to a counterfeit DMV site that steals personal and credit card data.
- The campaign has been seen in at least nine states, signaling broad reach beyond any one region.
- Security researchers note the shift from clickable links to image-based QR codes, which can slip past some spam filters.
- State warnings say fines typically arrive by mail, and people should verify with a court or DMV and report scams to the FTC or FBI IC3.