In the last few weeks, thousands of Android users across India (especially in Haryana, Punjab, Rajasthan, Uttar Pradesh, and Delhi-NCR) have received an unsolicited WhatsApp message that looks exactly like an official traffic challan notice.
Here’s how the scam works:
What the message looks like
Sender name: Something official-sounding like “Challan Detail”, “RTO Traffic Challan”, “E-Challan Punjab/Haryana”, etc.
Profile picture: Usually a logo with a tractor, jeep, or police emblem to make it look authentic.
Message: Either blank or a short line like “Your vehicle has a pending e-challan” or “Pay your traffic fine here”.
Attachment: An APK file named something like
→ RTO_ECHALLAN.apk
→ TrafficChallan.apk
→ EChallan_Payment.apk (usually 10–15 MB)
What happens if you install the APK?
The moment you install and open this fake app, it is actually malware (mostly a banking trojan or spyware). It can:
Read all your SMS (to steal OTPs)
Access your contacts
Steal banking app credentials and credit/debit card details
Overlay fake login screens on top of real banking/UPI apps
Silently register your phone for premium SMS services
Drain your bank account within minutes
Real-life cases have already been reported where people lost ₹20,000–₹1.5 lakh within hours of installing such APKs.
How to identify this scam instantly
Real e-challans NEVER come via WhatsApp.
Official traffic challan notifications come only through:
Parivahan website (echallan.parivahan.gov.in)
mParivahan app (official government app)
SMS from official numbers like VM-ECHALL or VK-ECHALL
Government departments will NEVER send you an APK file to “pay” or “view” your challan.
The sender is usually a new business account “joined in the last month”.
What you should do right now
If you received such a message → DO NOT download or install the APK.
Block and report the number immediately.
If you have already installed it:
Switch off internet/data immediately.
Go to Settings → Apps → look for suspicious apps (usually named “eChallan”, “RTO”, “Traffic Police”, etc.) and uninstall.
Factory reset your phone if possible.
Change passwords of all banking/UPI apps from another device.
Call your bank and ask them to block suspicious transactions.
File a cybercrime complaint at cybercrime.gov.in
How to check real traffic challans (the safe way)
Visit official website: https://echallan.parivahan.gov.in
Enter your vehicle number or challan number
Or download the official “mParivahan” app from Google Play Store (developed by Ministry of Road Transport)
Spread the word
This scam is spreading fast because people panic when they see “traffic challan” and think they have to pay immediately. Share this article with your family WhatsApp groups, especially with parents and elderly relatives who are most vulnerable.
Remember: No government department in India will ever send you an APK file on WhatsApp to pay a fine.
Stay safe, don’t click unknown APK files, and always verify from official sources.
If you’ve been a victim of this scam, drop your experience in the comments below so others can learn.
#StopRTOScam #WhatsAppScam #FakeEchallan #CyberSafetyIndia
