"ANTAI: your traffic ticket no. 2026-4471 remains unpaid to date. Failure to pay within 48 h: surcharge of €375. Settle here: antai-gouv-paiement[.]info"
Thirty-five words. A case number that doesn't exist. A domain name that never belonged to the French state. And yet, year after year, this message remains one of the most profitable fraudulent text messages circulating in France — far ahead of the fake parcel delivery, despite the latter being better known.
The reason fits in a single sentence: almost everyone drives, has parked a little carelessly, or has doubts about that speed camera spotted last week. The scammer doesn't need to know you. He just needs you to have a doubt.
Why the fine works better than the parcel
The fake delivery text has one flaw: if you aren't expecting anything, you delete it. A fine, on the other hand, can't be checked with a quick mental glance. Nobody keeps precise accounts of their sub-5 km/h speeding or their double-parking stops.
That vagueness is the fuel of the scam. Cybermalveillance.gouv.fr, the French public assistance scheme for victims of cybercrime, ranks smishing — phishing by text message — among the threats most frequently reported by private individuals, and campaigns impersonating ANTAI (the national agency for automated offence processing) return with seasonal regularity.
Three psychological triggers stack up:
- Authority. An administrative acronym, a cold tone, a reference to a regulatory text. You don't argue with the state, you pay.
- Quantified urgency. "48 hours", "surcharge of €375". The threatening amount is always significantly higher than the sum requested — paying €45 right away seems reasonable to avoid €375.
- Shame. A traffic ticket isn't something you mention at the office. The victim handles the matter alone, quickly, without asking anyone close for advice. That's exactly the intended effect.
Add to this a formidable technical detail: spoofing, the technique that allows an arbitrary alphanumeric sender name to be displayed, such as "ANTAI" or "GOUV-INFO". The message then slots into the same conversation thread as genuine official messages received previously. For many people, seeing a fake text stack up beneath a real one is the end of all critical thinking.
The four variants circulating in 2026
The fine scam has spread. It's no longer limited to speed cameras.
1. The fake traffic ticket
The original version. A case number, an amount between €35 and €90, a link to a page reproducing the graphic design of the official site, right down to the tricolour banner. The form asks for the number plate, the date of birth, then full bank details.
2. The fake post-parking charge
Since paid parking was decriminalised in France, it's no longer a fine but an "FPS" (forfait post-stationnement), managed by municipalities or their contractors. The vocabulary is technical, poorly understood by the public, and there are many providers: ideal terrain. The text message mentions an unpaid FPS in a town you may well have driven through.
3. The fake barrier-free toll
The rollout of free-flow electronic tolling has created a genuine grey area: you may legitimately have to settle a crossing afterwards, online. Scammers have piled in, imitating motorway operators and toll badge providers. The amount is trivial — €2.80, €4.10 — and that's precisely the trap: nobody thinks twice about three euros.
4. The fake appeal
A rarer and more perverse variant: the message informs you that your appeal has been "accepted" and that a refund is waiting for you. You just need to enter your bank details. The instinct for caution collapses as soon as you believe you're receiving money rather than handing it over.
What the authorities never do
There are simple, stable rules that admit no exceptions. Knowing them removes any need for technical expertise.
| The message says… | The administrative reality |
|---|---|
| "Pay via this SMS link" | ANTAI does not send payment links by text message for an initial notice |
| "Within 48 hours" | Legal deadlines are counted in days (45 days for a fixed fine), never in hours |
| "Provide your card number" | Payment goes through the official DGFiP channels, not through a third-party form |
| "Otherwise immediate prosecution" | The surcharge procedure is written, formally notified, and leaves room for appeal |
| "Confirm your identity and bank details" | No fine refund is ever triggered by text message |
The fundamental point: a traffic ticket arrives by post, at the address of the registered vehicle keeper. That is the legally enforceable channel. Text messages and emails may serve as a supplementary notification for those who have explicitly requested it, but they never replace the letter, and they never contain a banking form.
The check that takes two minutes
When in doubt, the method is always the same: never use the route offered by the message.
- Don't click. Not even "just to see". Some data-harvesting pages log the opening and confirm the number is active, which raises its value on resale markets.
- Type the address yourself. The official ANTAI site and the fine payment portal are directly accessible from your browser. A genuine case can be found there using the notice number printed on the paper letter — the one in front of you, not the one in the text message.
- Check the domain name, character by character. French state websites end in
.gouv.fr. Anything resemblingantai-gouv.fr,gouv-antai.info,amendes-gouv.comorantai.gouv-fr.netis an imitation. The hyphen is the forger's favourite weapon. - Look at the consistency. An FPS in Bordeaux when your car hasn't left Brittany? A ticket for a registration number that isn't yours? The doubt is settled.
- Report, then delete. Forwarding to 33700, the cross-operator platform for reporting SMS spam, is free. You forward the message, then the sender's number when the service asks for it. In parallel, the Phishing Initiative platform and the Cybermalveillance.gouv.fr portal catalogue fraudulent addresses.
For anyone who struggles to read the fine print of a URL on a 6-inch screen, one hardware detail changes everything: increase the text size in the accessibility settings, or keep an illuminated reading magnifier within reach to examine a letter or a screen. This is no small matter: a good share of victims simply never saw the domain name.
What if I've already paid?
The mistake is common and there's nothing shameful about it. Reacting quickly matters more than anything else.
Within the hour:
- Call your bank's emergency number, or use the card-blocking function in its app. Stop the card.
- If the banking app allows it, disable online payments and lower your limits.
- Keep everything: screenshots of the text message, the website, the amount debited, timestamps. These are your evidence.
Within 24 hours:
- File a complaint, at a police station, a gendarmerie, or via the online pre-complaint service. The receipt is essential for what follows.
- Submit a written dispute to your bank. Article L.133-18 of the French Monetary and Financial Code provides for the reimbursement of unauthorised payment transactions; the bank must refund immediately, unless it can demonstrate gross negligence on your part. This point often hinges on the details — hence the importance of screenshots.
- Report the impersonation on Cybermalveillance.gouv.fr, which will direct you to the appropriate steps.
Within the week:
- Monitor your debits for three months. The data collected is sometimes resold and exploited long afterwards.
- If you entered identity information (name, date of birth, address, driving licence number), consider filing a declaration with the CNIL and stay alert to any account being opened in your name.
- Change any reused passwords. If you've never taken the plunge, a paper password notebook kept in a locked drawer remains, for many households, a more realistic solution than a digital manager that never gets adopted.
Reducing the attack surface upstream
You can't stop campaigns from sweeping through number ranges. But you can reduce what they find, and cushion the impact when they arrive.
Compartmentalise your numbers. Many motorists have left their personal number with a dealership, a rental company, a car-sharing platform, a toll badge operator. These databases leak. Using a second line for non-essential sign-ups — a pay-as-you-go SIM card is enough — limits the blast radius of a leak.
Turn on the built-in filters. Both iOS and Android offer filtering of unknown senders that isolates messages in a separate tab. It's imperfect, but it breaks the element of surprise: a message filed under "unknown" no longer inspires the same confidence.
Never reply, not even "STOP". With a fraudulent text — as distinct from legitimate commercial advertising, where STOP is mandatory and does work — replying confirms that the line is active.
Keep your device updated. Security patches close vulnerabilities that are genuinely being exploited. On a phone whose battery no longer lasts the day, updates get postponed indefinitely; a compact power bank breaks that vicious circle more effectively than a calendar reminder.
Talk about it. This is the most effective and least costly measure. Scammers rely on people handling it alone. One sentence — "I got this, what do you make of it?" — defuses the majority of attempts. In families where an elderly relative still drives, a beginner's guide to computer security left on the coffee table often starts the conversation better than a long lecture.
Key takeaways
An authority that demands money from you does so in writing, by post, with a deadline in days and a right of appeal. A text message demanding payment within 48 hours via a link is not a fine: it's an attempted theft.
The fake ticket scam relies on no technical feat whatsoever. It rests on a statistical calculation: send out millions of messages to reach the few thousand people who, on that particular day, genuinely do have doubts about where they parked. You aren't being targeted personally. You just happened to come along at the right moment.
The good news is that the countermeasure requires neither software nor skill: open your own browser, type the official address, and check. Two minutes. That's the price of a reflex which, over a lifetime of driving, will save you far more than €375.
And if a message strikes you as suspicious, take the time to warn those around you — a simple message sent to a parent or a neighbour who still drives is worth more than an explanation after the fact. Smishing campaigns die when information travels faster than they do.
