eFlow Toll Text Scam – Fake Unpaid M50 Toll Demands

High Risk

Got a message, call or offer like this?

Take your time. Treat it as a scam until you have checked it yourself.

Don't tap links, reply, or ring numbers it gives you. On a call, hang up.
Don't pay, and don't share card details, PINs, passwords or codes.
Check with whoever it claims to be, using contact details you find yourself.

Already paid or shared details? What to do now Full step-by-step guide Report it

Overview

A text says you have an unpaid M50 toll and gives you a deadline to pay it. eFlow runs the barrier-free toll on the M50, and the reason this scam works is that the demand it makes is a real one: on a barrier-free road you genuinely do pay after the journey, so "you owe a toll" is a plausible sentence in a way that most cold demands are not. eFlow's own site sets the rule — "Pay your M50 toll before your journey or by the 8pm next day deadline" — so a message about a missed deadline lands on something drivers already half-know. What the scam adds is a link. One line from eFlow's own security page settles every version of it: "eFlow does not send text messages with links to customers." eFlow states it "will never send an SMS about a failed payment or outstanding penalties", "will never ask customers to open links to confirm payment details", and "will never ask you for personal information or payment details via text or phone call". For email it is just as flat: "eFlow will not send you any links for payment by email." The link leads to a copy of the eFlow payment page, and what comes off it is not the small sum on the screen — Bank of Ireland, warning its customers about these same texts, describes fake sites collecting "personal card and online banking details". This is the same shape as the An Post SMS Scam under Delivery Scams: a trusted Irish name, a small fee, a real process the reader half-remembers, and a payment page that is not theirs. What is particular to eFlow is the threat attached. In the wave Gardaí warned about in July 2025 the message was not about a fee at all but about a "radar ticket", and what it threatened was your vehicle registration and your driving licence.

What This Scam Looks Like

Tap a highlighted part to see why it's suspicious. Every red flag is also listed under the message.

9:41

100%

+353 83 XXX 77121

Today, 09:14

eFlow: Our records show an unpaid M50 toll on your vehicle. Settle today to avoid a late payment penalty and suspension of your vehicle registration2: red flag 2, show why: https://eflow-tollpay.icu/settle3: red flag 3, show why

Text Message

Red flags in this message

1
Sender: +353 83 XXX 7712
A random mobile number. eFlow does not send text messages with links to customers at all, from any number
2
“suspension of your vehicle registration”
A threat no toll text carries. eFlow says it will never send an SMS about a failed payment or outstanding penalties
3
“https://eflow-tollpay.icu/settle”
Not eflow.ie. eFlow's own check is "Is the link from eflow.ie?" — the July 2025 wave used .icu addresses

Typical Targets

•Anyone who drives on the M50, which is most people who drive in or around Dublin
•Drivers with no tag and no video account, who have to pay each journey themselves inside the deadline
•People who cannot say from memory whether they passed the toll point on a given day
•Anyone who has recently bought, sold or changed a vehicle and is unsure what is registered against it
•Recent arrivals to Ireland who have never seen a genuine eFlow notice and have nothing to compare against
•Anyone reading on a phone in a hurry, which is where a message designed to be settled in under a minute does its work

Why This Scam Works

•The M50 toll really is paid after the journey, so an after-the-fact demand is not in itself strange
•There really is a deadline, and it is tight — eFlow's own instruction is to pay "by the 8pm next day deadline"
•Charges are applied by camera to the registered owner, so a driver has no receipt or barrier moment to check against
•The sum demanded is small enough to pay rather than argue with, which is the point of it being small
•The threat attached is not small. The July 2025 wave threatened suspended vehicle registrations, a suspended driving licence and further charges
•The fake payment pages are numerous and disposable — Transport Infrastructure Ireland recorded over 70 of them destroyed in a single year
•A text arrives on the device where checking a web address is hardest and the keyboard is already open

Example

There is a documented Irish wave to point at, so this page describes that rather than inventing a victim. On 23 July 2025 the Irish Examiner reported that Gardaí had urged the public to be vigilant over eFlow scam texts. The messages told recipients they had failed to pay a "radar ticket" and warned that vehicle registrations would be suspended, driving licences suspended and further charges levied; the link carried a .icu domain, not eflow.ie. eFlow's response, as reported, was that its "system has not been compromised or subjected to a data breach" and that it "did not send links in text messages". The scale is documented separately: the Irish Times reported on 21 August 2024 that Transport Infrastructure Ireland's 2023 annual report recorded that "with assistance from the Bank of Ireland fraud team, the identification and destruction of over 70 fake eFlow websites was achieved". No source we have names a victim, a county or a sum, so this page does not either. Read it as a pattern that keeps returning in new wording, not as an outbreak on a particular date.

* An illustration of how this scam works, not from a victim case we hold.

How to Avoid This Scam

The line that settles it is eFlow's own: "eFlow does not send text messages with links to customers." A toll text with a link in it is a scam, whatever the amount and whatever the deadline
eFlow also states it "will never send an SMS about a failed payment or outstanding penalties". A text about an overdue toll or a penalty is not a reminder that arrived awkwardly — it is the scam
Two more of eFlow's own lines cover the phone and the inbox: it "will never ask customers to open links to confirm payment details", and it "will never ask you for personal information or payment details via text or phone call"
Never pay through the link. Type eflow.ie into the address bar yourself, or ring eFlow on 0818 50 10 50, the number published on eflow.ie
Check the address, not the design. eFlow's own test is the question "Is the link from eflow.ie?" — the July 2025 wave used a .icu address behind a page that looked right
For email, eFlow says "verify if the sender is from an eflow.ie email domain", and that it "will not send you any links for payment by email"
Learn the genuine process, because it is what the message has to survive. eFlow's site: "When you pass through the tolling point you will be liable to pay the M50 toll by 8pm the next day to avoid unnecessary penalties", and "cameras positioned on the overhead gantry capture the vehicle registration numbers of all vehicles, allowing toll charges to be applied to the registered owner"
A genuine penalty arrives as a notice with a number on it — eFlow's payment page asks for the number "on the top right of the penalty notice that we sent you". A link in a text is not that notice
Bank of Ireland's rule, published in its own warning about these texts, holds well beyond them: a legitimate company "will never send a text linking to a website that requests online banking details"
If you are genuinely unsure whether you owe a toll, that uncertainty is the hook and not a reason to click. Settle it at eflow.ie or on the phone

If You've Been Caught Out

Don't panic – take these steps immediately:

1If you entered card or online banking details, ring your bank now on the number printed on the back of your card and stop the card. Bank of Ireland tells customers who have given banking details to ring 1800 946 764 immediately
2Change your online banking password, and change it anywhere you reused it. A cloned login page takes the password, not only the account it was typed into
3Report it at your local Garda station. An Garda Síochána states that "incidents of fraud occurring in this jurisdiction should be reported to your local Garda station"
4Report the fake site itself. eFlow directs this to Netcraft: email the exact website name to [email protected], or use https://report.netcraft.com/
5Do not reply to the message, and do not ring a number that came in it
6Keep watching the account for the next few weeks, not the next few days — card details taken today are not always used today
7If it turns out you do owe an M50 toll, pay it at eflow.ie or on 0818 50 10 50. The scam text changes nothing about what you actually owe

* This information is for guidance only. Always seek professional advice for your specific situation.