Online fraud alert: This new e-challan scam could empty your bank accounts in minutes

Cyber fraudsters are sending texts on the Messenger apps and WhatsApp with malicious urls to potential victims that they are fined for violating traffic rules.

In late 2025, when Bengaluru Police offered a 50 per cent discount on traffic penalties, cyber threat actors targeted naive smartphone users by sending fake fine invoices and tried to steal their money.

Now, they have come up with a similar e-challan scam. The modus operandi is the same, but have expanded the coverage to more cities and towns across India.

Cyber fraudsters are sending texts on the Messenger apps and WhatsApp to potential victims that they are fined for violating traffic rules. If the amount is not paid soon, they will come home to seize their vehicles.

And, the text message will have a URL link to the website, which looks like a benign government portal withthe State Emblem of India, an adaptation of the Lion Capital of Ashoka and shows it is managed by the Union Ministry of Road and Transport.

It displays an online form for people to fill in their Debit/Credit card details, including CVV number and expiry date. Unsuspecting people will just follow the on-screen instruction and before they realise what they just did, the scamster will have siphoned off a big chunk of money from the savings account in minutes.

So, smartphone users are advised to be wary of such messages. Do not panic. If you have any doubts, go to the nearest traffic police station and get it verified.

Here are tips on how to safeguard yourself from phishing scams:

1) If you receive an email or message from a person with a familiar name or even a government agency such as Bengaluru Traffic Police, read it carefully. As noted earlier, cyber crooks use fear and tell you to click on a URL link or a PDF to get more information. Do not press any link or download any file.

Government agencies do not ask citizens to share their personal or financial details through messenger apps

2) Never install APK files or any apps from third-party app stores or links marketed on social media platforms. Always download apps from Google Play, Apple App Store, or Microsoft Windows Store

In cases related to Bengaluru traffic fines, citizens can visit official websites (https://btp.karnataka.gov.in or https://www.karnatakaone.gov.in/) and the BTP ASTraM app (developed by Karnataka State Police) or the KarnatakaOne app (developed by the Director of e-Governance, Government of Karnataka), to pay pending traffic fines.

3) Never share online account details such as Gmail IDs, bank customer IDs and passwords on messenger apps or on emails with anybody or type details on an online form on a website published by an unknown company

4) Always update your smartphones and computers to the latest version to protect yourself from new emerging cyber threats

5) It is a good practice to install an anti-virus application from a well-known publisher on your device. Once installed, ensure to turn on the safe browsing feature

If you fall victim to online fraud, immediately call toll-free 1930. It is run by the Indian Cyber Crime Coordination Centre, and once you share the bank transaction details, they will be able to trace and freeze the mule bank accounts. Ensure you call them within one hour, as there will be a higher chance of blocking the cyber criminals from withdrawing the ill-got money.

Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech.