Fake RTO Challan or Vehicle App Sent as an APK over the phone

How it looks over the phone, the red flags and what to do.

On a call the pressure is live: no time to read, no time to check, and a rule that you must not tell anyone. Fake RTO Challan or Vehicle App Sent as an APK is one of the ways this shows up: A message says you have a pending traffic challan and asks you to install an app file to see it. The app steals SMS and banking details.

What fake rto challan or vehicle app sent as an apk looks like over the phone

• A second "senior officer" who takes over the call.
• An unknown or international number, or a number that looks like a real office.
• A calm, official voice that already knows your name or the last digits of your card.

The scammer sends the same text to many numbers or to owners of vehicles whose data is found in leaks. The wording copies an official notice with a challan number, a vehicle number format and a deadline. Because many Indians have actually received a real traffic notice, the message feels familiar. The link either downloads an APK file directly or leads to a page copying a government portal, with a download button.

Red flags to check on the phone call

• A challan message asks you to install an app file instead of using the official site or app.
• The link ends in .apk or asks you to enable installs from unknown sources.
• The deadline is a few hours and the fine doubles.
• The app asks for SMS and accessibility permissions.
• The caller asks for an OTP, UPI PIN, card PIN or CVV.
• You are told that a case, arrest, block or penalty is coming within minutes.

What to do

1. Do not tap the link or install the file.
2. Check challans only through the official transport department site or app, typed or installed by yourself from a store.
3. If you installed it, switch on airplane mode and remove the app, including from accessibility and device admin lists.
4. Call the bank or office on the number printed on your card, bill or official app, not on a number the caller gave.
5. Never share an OTP or PIN. No genuine staff member needs it.
6. If you already installed an app on the call, uninstall it and switch on airplane mode, then call your bank at once.

Report the number on the Sanchar Saathi portal (Chakshu facility). If money moved, call 1930 immediately.

If money or a code is already gone

1. Call 1930 and report at cybercrime.gov.in at once.
2. Call your bank through the number on your card and ask to block cards and UPI.
3. Change net-banking and email passwords from a safe device.
4. Save the SMS and the link before deleting them, and consider resetting your phone.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Paste the challan message into Scam check in Safeavio Sentinel to see why it looks risky, and run Link check on the link before opening it. Phone scan lists apps outside a store, shows risky permissions such as accessibility and SMS, and checks settings like unknown sources. Safeavio does not read your messages by itself and cannot tell whether you really have a challan.

Full guide: Fake RTO Challan or Vehicle App Sent as an APK: how it works, signs and what to do. Other channels: SMS, WhatsApp, fake app.

Questions