
Kerala police have warned vehicle owners about a scam where fraudsters send fake e-challan SMS messages from private mobile numbers with a link that installs a malicious APK file on the device.…
Kerala police have warned vehicle owners about a scam where fraudsters send fake e-challan SMS messages from private mobile numbers with a link that installs a malicious APK file on the device. The SMS appears genuine, but opening the link leads to a fake website mimicking the official Motor Vehicles Department portal.

After the user enters a vehicle registration number, a dialogue box titled 'Internal Security Review' appears and prompts the download of an application. Selecting 'Yes' installs a malicious Android Package Kit that can seek permissions to take control of the device and access sensitive information, police said.
Police urged people not to install APK files received via SMS, WhatsApp or Telegram in the name of e-challan, traffic fines, KYC or RTO services. Anyone who suspects a malicious app has been installed should disconnect the device from the internet, avoid banking transactions, and report the matter to cyber police via helpline 1930 or the cybercrime portal.
This scam follows a pattern seen across several states where cyber criminals exploit the public's familiarity with digital traffic enforcement. The Motor Vehicles Department and Parivahan portal are legitimate government platforms that never require users to download APK files for fine payment or verification. Victims risk not only financial fraud but also identity theft, as the malicious app can access SMS, contacts and stored passwords. The police helpline 1930 and the cybercrime portal are the designated channels, quick reporting increases the chance of freezing stolen funds under the RBI's cyber fraud resolution framework. Vehicle owners should bookmark the official e-challan and Parivahan websites directly rather than clicking links from SMS messages.
Source: hindustantimes.com
This brief was synthesised by AI from the source linked above.