Cybercriminals Exploit E-Challan Alerts to Empty Bank Accounts

Cyber fraudsters are now targeting citizens under the guise of E-Challan notifications, and a small mistake can lead to the complete loss of your bank funds.

According to reports by The 420, cybercriminals send messages to mobile users claiming that an E-Challan has been issued against their vehicle. The message includes a link or an APK file named something like RTO_Challan.apk or E-Challan_Details.apk. The file appears to be an official government document, prompting recipients—often in fear or haste—to download it. This is where the danger lies.

APK stands for Android Package Kit, the format used for Android apps. While apps downloaded from the Google Play Store are safe, APK files received via messages or WhatsApp can be malicious. Once installed, these files automatically execute, allowing hackers to access your phone entirely. They can view your banking apps, OTPs, contacts, and even transfer money directly from your account.

Once installed, these malicious files give cybercriminals full control over your phone. They can intercept OTPs, steal funds from bank apps, and automatically forward the malware to all your WhatsApp contacts, rapidly spreading the scam.

Tips to Protect Yourself

• Never download APK files received via WhatsApp or text messages.
• Check official E-Challan details only on echallan.parivahan.gov.in.
• Official government documents, PDFs, or invitations never come as APK files.
• If a friend sends an APK, confirm by calling them— their account might already be compromised.
• Disable “Install from Unknown Sources” in your phone settings.
• If you mistakenly install the file, immediately turn off mobile data/Wi-Fi, uninstall the app, and change your banking passwords.
• If funds are lost or there’s suspicion, call 1930, the national cyber fraud helpline.

Rise of Digital Frauds
With the digital world becoming the default for transactions, fraudsters now have more opportunities than ever. Elderly people and those less digitally literate are particularly vulnerable. A single wrong click can wipe out entire savings within minutes.