Pedemontana scam: fake notice for 6,95 euro

Context

TL;DR

• An SMS about an unpaid toll has been reported
• The stated amount is 6,95 euro
• The link leads to a clone of Pedemontana
• The target is banking or card details

Key facts

• Area → provinces of Como and Varese
• Amount → 6,95 euro
• Stated deadline → 24 hours
• Channel → SMS with a hyperlink
• Risk → entering banking or card details

An SMS announcing an alleged unpaid toll is circulating at the moment and may also concern Ticino drivers. The reference is to Pedemontana, the toll-booth-free motorway that crosses the provinces of Como and Varese. Anyone who has driven on it may receive a notice that, at first glance, appears plausible: the amount is modest, the text refers to a toll service, and the link seems to lead precisely to Pedemontana's website.

«Unpaid toll service, amount 6,95 euro. Pay within 24h to avoid fines».

The request combines a precise amount with a short deadline. The message indeed urges the recipient to pay within 24 hours to avoid fines. The source, however, reports that this is not a normal payment notice. This is a phishing attempt, designed to direct the recipient to a page that reproduces the appearance of Pedemontana's website.

The risk described does not concern only the payment of 6,95 euro. According to the Como-based portal QuiComo, the main objective is to obtain the data of any user who follows the link and enters their information. The target may be banking details or credit card details, requested on the page accompanying the fake unpaid-toll notice.

The report has local significance because the road in question crosses Como and Varese and because the message may reach people traveling from Ticino to that area. The report concerns a message that combines a toll notice, a precise amount, and a link apparently associated with Pedemontana. Taken together, these elements make the message seem plausible to anyone who receives the SMS; the risk emerges when the link leads to a request for data.

The fake notice

The mechanism therefore begins with contact via SMS. The hyperlink is the decisive step: instead of merely providing information about a toll, it takes the user to a site built to look like the genuine one. Logos and payment information reinforce the impression that this is a real request. It is precisely this resemblance that makes the attempt more sophisticated than other cases seen in recent years.

Operational details

Why the link may seem authentic

The attempt is described as rather sophisticated compared with others seen in recent years. It does not simply send a generic or easily recognizable request: the text contains a hyperlink leading to a page designed to imitate the real Pedemontana website. The message combines elements found in the source: the amount of 6,95 euro, the warning about fines and an online environment with logos and payment information.

This combination can confuse anyone who has actually traveled on the motorway without toll booths between the provinces of Como and Varese. The message presents a toll charge, an amount to pay and a 24-hour deadline. The link therefore directs the request to a page that looks like Pedemontana's. It is precisely the shift from initial credibility to the request for data that turns the alleged notice into a phishing attempt.

The point to check

The difference between the authentic address and the one included in the message may be small but decisive. The source invites readers to compare the address shown in the SMS with the one reported by search engines. The check does not concern only the page's graphic appearance: logos and payment information may also be present on the cloned website. The address, however, may reveal those small differences that help expose the fraudulent link.

The Como-based portal QuiComo presents this episode as a targeted phishing attempt. The target, therefore, is not merely the payment of the requested sum. The source emphasizes that the amount is not high and that the message appears plausible; the aim of the attempt, however, lies in the data that the user might enter.

For anyone who has traveled on Pedemontana, the matter does not end with recognizing a familiar graphic design. The report shows that even seemingly convincing details must be verified, because the resemblance to the real website is part of the scam. Checking the address thus becomes the concrete criterion for distinguishing the suspicious message from a reliable communication.

Key points

How to handle the message

The recommendation indicated by the source starts with a simple action: do not click directly on the link received via SMS. If the recipient has traveled on the Pedemontana and wants to check their situation, they should use the official channels or manually type the website address into the browser. In this way, the check does not go through the link contained in the message, that is, the element that leads to the page built to imitate the real one.

The next step is to compare the address. The source suggests comparing the one indicated in the SMS with the address shown in search engines. In phishing attempts, the report explains, there may be small but decisive differences. It is precisely these variations that make it possible to recognize the fraudulent site even when the page displays logos and payment information.

If the data have already been entered

Caution also applies to the payment stage. In case of doubt, the final guidance is not to pay and not to provide any data. The recommendation therefore concerns both the sum of 6,95 euro and the information requested by the page: one must not follow the link merely because the text threatens fines within 24 hours.

If, on the other hand, the card details have already been entered, the source indicates a specific action. You should contact your bank or the card issuer immediately and consider blocking the payment instrument. This refers to the card details already provided, not to a generic subsequent check.

The report closes with this caution: if in doubt, payment should not be made and no data should be provided. The page reached through the link may reproduce logos and payment information, but the source describes it as a fraudulent site. For drivers who have traveled on the motorway without toll booths between Como and Varese, manually checking the address remains the step indicated to avoid handing over data to the fraudulent site.

Source: tio.ch