Delhi Police warns against fake traffic challan messages with malware links

Have you received a message claiming that a pending traffic challan needs to be paid immediately? If so, avoid clicking any unknown links. Delhi Police has issued an alert after a surge in fraudulent WhatsApp and SMS messages pretending to be official challan notifications and tricking users into downloading malicious files.

Scammers Using Fake Challan Messages to Install Malware

The deceptive messages state that a challan is due and urge recipients to click on a link—often an APK file labeled “RTO CHALLAN.apk”—to make payment. According to officials, the links are part of phishing operations meant to infiltrate devices, install malware, gain remote control and steal money from bank accounts.

Residents in different parts of the capital have reported receiving such alerts recently. These messages frequently include specific challan amounts and even real vehicle registration numbers, making them seem legitimate. A senior police officer said, "Fearing heavy fines, many people click on the link, which results in their phones being hacked. Fraudsters then gain remote access, putting victims at serious risk of financial loss."

Delhi Police Clarifies: Challans Are Never Sent Through APK Files

Authorities emphasized that official challan notices are not issued through APK files, random links or unidentified messages. Violations recorded through CCTV are shared only via trusted SMS formats with traceable sender IDs.

Another officer explained the importance of checking message authenticity, stating, "Fraudsters are sending SMSes that look official, but citizens must check the sender code carefully. No traffic police unit, bank or govt agency sends APK links on SMS or WhatsApp," he stressed.

Messages coming from personal numbers or without official codes should immediately raise suspicion.

Verify Only Through Official Portals

Police have urged citizens to confirm any challan details exclusively through:

• Official Parivahan portal
• Delhi Traffic Police website

What to Do If You Clicked or Downloaded a Suspicious File

Experts recommend immediate action if a malicious file is downloaded or installed:

• Put the phone on airplane mode
• Delete the file and reset the device
• Change passwords using a secure device
• Disable installation from unknown sources
• Enable Play Protect
• Report cyber fraud to the 1930 helpline or cybercrime.gov.in

[With TOI inputs]