Keralam Police have warned vehicle owners about a new cyber fraud in which scammers send fake e-challan SMS messages containing malicious links to steal sensitive information and gain access to mobile devices.
According to the police, fraudsters send messages from private mobile numbers featuring seemingly genuine traffic challan details. The links redirect users to fake websites resembling the official Motor Vehicles Department (MVD) portal.
After entering their vehicle registration number, users are shown a message labelled “Internal Security Review” and prompted to download an application to complete verification. Clicking “Yes” downloads a malicious Android Package Kit (APK) file.
Once installed, the application may request permissions that allow scammers to access sensitive data and potentially gain control of the device.
Police have urged people not to download APK files received through SMS, WhatsApp, Telegram or other messaging platforms in the name of e-challans, traffic fines, KYC verification or vehicle-related services.
Vehicle owners should verify challans only through official government portals, including the Parivahan and e-challan websites. They should avoid clicking suspicious links and remain cautious of messages asking them to install applications to clear pending fines.
Anyone who suspects that they have installed a malicious application should disconnect their device from the internet, avoid banking transactions, and check their bank accounts and payment apps for unauthorised activity.
Victims of financial fraud should immediately contact their bank and report the incident to the cybercrime helpline at 1930 or through the National Cyber Crime Reporting Portal.
