Fake RTO Challan or Vehicle App Sent as an APK on WhatsApp

How it looks on WhatsApp, the red flags and what to do.

WhatsApp is private and fast, which scammers like: a "wrong number" chat can turn into a task, an investment tip or a payment request within minutes. Fake RTO Challan or Vehicle App Sent as an APK is one of the ways this shows up: A message says you have a pending traffic challan and asks you to install an app file to see it. The app steals SMS and banking details.

What fake rto challan or vehicle app sent as an apk looks like on WhatsApp

• A PDF, APK or image that must be opened to "see the details".
• A link that pretends to be a wa.me, courier or bank page.
• A message from an unknown number, often with a stock photo of a smiling person.

The scammer sends the same text to many numbers or to owners of vehicles whose data is found in leaks. The wording copies an official notice with a challan number, a vehicle number format and a deadline. Because many Indians have actually received a real traffic notice, the message feels familiar. The link either downloads an APK file directly or leads to a page copying a government portal, with a download button.

Red flags to check on the WhatsApp message

• A challan message asks you to install an app file instead of using the official site or app.
• The link ends in .apk or asks you to enable installs from unknown sources.
• The deadline is a few hours and the fine doubles.
• The app asks for SMS and accessibility permissions.
• The sender moves you quickly to Telegram or to a second app.
• A file ending in .apk arrives; never install it.

What to do

1. Do not tap the link or install the file.
2. Check challans only through the official transport department site or app, typed or installed by yourself from a store.
3. If you installed it, switch on airplane mode and remove the app, including from accessibility and device admin lists.
4. Warn the group or family, and report the number on Sanchar Saathi if it is a scam call or message.
5. Do not click links or open files. Do not send money or codes.
6. Open the chat, tap the contact name and choose Block and report.

Inside WhatsApp use Block and report; for numbers that call or text you, the Sanchar Saathi portal (Chakshu facility) also takes complaints.

If money or a code is already gone

1. Call 1930 and report at cybercrime.gov.in at once.
2. Call your bank through the number on your card and ask to block cards and UPI.
3. Change net-banking and email passwords from a safe device.
4. Save the SMS and the link before deleting them, and consider resetting your phone.

National Cyber Crime Helpline: 1930; report at cybercrime.gov.in.

Paste the challan message into Scam check in Safeavio Sentinel to see why it looks risky, and run Link check on the link before opening it. Phone scan lists apps outside a store, shows risky permissions such as accessibility and SMS, and checks settings like unknown sources. Safeavio does not read your messages by itself and cannot tell whether you really have a challan.

Full guide: Fake RTO Challan or Vehicle App Sent as an APK: how it works, signs and what to do. Other channels: SMS, fake app, phone call.

Questions