Fake RTO Challan or Vehicle App Sent as an APK by SMS

How it looks by SMS, the red flags and what to do.

On SMS the scammer has only a few lines to work with, so they use a deadline, a threat or a prize and a link that must be tapped "now". Fake RTO Challan or Vehicle App Sent as an APK is one of the ways this shows up: A message says you have a pending traffic challan and asks you to install an app file to see it. The app steals SMS and banking details.

What fake rto challan or vehicle app sent as an apk looks like by SMS

• A very short message with a deadline such as "today" or "within 24 hours".
• A shortened or oddly spelled link that does not match the real website.
• A request to call a number, install an app or share an OTP.

The scammer sends the same text to many numbers or to owners of vehicles whose data is found in leaks. The wording copies an official notice with a challan number, a vehicle number format and a deadline. Because many Indians have actually received a real traffic notice, the message feels familiar. The link either downloads an APK file directly or leads to a page copying a government portal, with a download button.

Red flags to check on the text message

• A challan message asks you to install an app file instead of using the official site or app.
• The link ends in .apk or asks you to enable installs from unknown sources.
• The deadline is a few hours and the fine doubles.
• The app asks for SMS and accessibility permissions.
• It threatens blocking, arrest, disconnection or a fine unless you act at once.
• It promises a refund, prize or cashback you never asked for.

What to do

1. Do not tap the link or install the file.
2. Check challans only through the official transport department site or app, typed or installed by yourself from a store.
3. If you installed it, switch on airplane mode and remove the app, including from accessibility and device admin lists.
4. Report the sender on the Sanchar Saathi portal (Chakshu facility) and block the number.
5. Delete the message and tell family members who may get the same text.
6. Do not reply, do not tap the link and do not call the number in the message.

You can report suspicious SMS and calls on the Sanchar Saathi portal (Chakshu facility) of the Department of Telecommunications.

If money or a code is already gone

1. Call 1930 and report at cybercrime.gov.in at once.
2. Call your bank through the number on your card and ask to block cards and UPI.
3. Change net-banking and email passwords from a safe device.
4. Save the SMS and the link before deleting them, and consider resetting your phone.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Paste the challan message into Scam check in Safeavio Sentinel to see why it looks risky, and run Link check on the link before opening it. Phone scan lists apps outside a store, shows risky permissions such as accessibility and SMS, and checks settings like unknown sources. Safeavio does not read your messages by itself and cannot tell whether you really have a challan.

Full guide: Fake RTO Challan or Vehicle App Sent as an APK: how it works, signs and what to do. Other channels: WhatsApp, fake app, phone call.

Questions