Fake RTO Challan or Vehicle App Sent as an APK
A message says you have a pending traffic challan and asks you to install an app file to see it. The app steals SMS and banking details.
A text says a traffic challan has been issued against your vehicle and must be paid within hours to avoid a bigger fine. It includes a link and a file called 'RTO Challan.apk' or 'Vehicle Services.apk'. The offer to view your challan sounds practical, but the installer is a malicious app. Once it is on your phone, it can read your messages and capture OTPs, while showing a harmless screen.
How the scam works
The scammer sends the same text to many numbers or to owners of vehicles whose data is found in leaks. The wording copies an official notice with a challan number, a vehicle number format and a deadline. Because many Indians have actually received a real traffic notice, the message feels familiar. The link either downloads an APK file directly or leads to a page copying a government portal, with a download button.
The pressure is the penalty. The text says that the fine will double, the licence may be affected or the vehicle may be seized. To 'avoid trouble', you are told to install the app and pay inside it. The app asks for SMS permission and accessibility rights, claiming they are needed to detect your challan. Once granted, it can see messages, press buttons on your behalf and show fake payment pages for your UPI app.
The payoff is money and data. OTPs for bank transfers are read as they arrive, the app can drive your phone as if it were a remote operator, and your card details are collected in the fake payment page. The malware may also send the same text to your contacts. Since the original message looked like a government notice, victims often do not suspect a link between the text and the later loss.
An example of what you may see
Example SMS (invented): 'Traffic notice: A challan of Rs 1,000 has been issued on your vehicle. Pay within 24 hours to avoid a fine of Rs 5,000 and licence action. Download the official app here to view and pay: (link to RTO_Challan.apk)'. After installation the app requests permission to read messages and to control the screen through accessibility. The message also says 'Last warning, do not ignore' and the sender is a long mobile number that you do not recognise.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A challan message asks you to install an app file instead of using the official site or app.
- The link ends in .apk or asks you to enable installs from unknown sources.
- The deadline is a few hours and the fine doubles.
- The app asks for SMS and accessibility permissions.
- The message does not show a valid vehicle number, place or time of the violation.
- The sender is a personal number or an odd short code.
What to do right now
- Do not tap the link or install the file.
- Check challans only through the official transport department site or app, typed or installed by yourself from a store.
- If you installed it, switch on airplane mode and remove the app, including from accessibility and device admin lists.
- Check your bank statements and change passwords from another device.
- Report the sender in Sanchar Saathi under Chakshu.
If you already paid or shared a code
- Call 1930 and report at cybercrime.gov.in at once.
- Call your bank through the number on your card and ask to block cards and UPI.
- Change net-banking and email passwords from a safe device.
- Save the SMS and the link before deleting them, and consider resetting your phone.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Paste the challan message into Scam check in Safeavio Sentinel to see why it looks risky, and run Link check on the link before opening it. Phone scan lists apps outside a store, shows risky permissions such as accessibility and SMS, and checks settings like unknown sources. Safeavio does not read your messages by itself and cannot tell whether you really have a challan.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
How do I check a real challan?
Use the official transport department website or its app installed from a trusted store, and enter your own vehicle number there. Do not use links or files sent in unexpected messages. Search the official portal by typing its address yourself rather than tapping a link from a message.
Why would an app need accessibility permission?
Accessibility lets an app read the screen and press buttons for you. It is powerful and meant for assistive tools. A challan app that asks for it is a serious warning sign. Only a few special tools need it, so a challan or invoice app asking for it is unusual and risky.
I installed it but did nothing else. Am I safe?
Not necessarily, since malware runs in the background. Disconnect from the internet, uninstall the app, change passwords from another device and watch your bank messages. Treat the phone as exposed until you have checked the apps, changed your passwords and talked to your bank.