Beware before paying E-challan: Cyber fraudsters with fake APK Files raise alarm in Bhubaneswar

With the strict enforcement of rules linking the clearance of e-challans to the issuance of Pollution Under Control Certificates (PUCC) in Odisha, cyber fraudsters have found a new opportunity to cheat vehicle owners. 

The cyber criminals are now sending fake e-challan messages containing malicious APK files, clicking on which can result in immediate loss of money from bank accounts. The fake traffic messages are being circulated mainly through WhatsApp, asking recipients to download an APK file to pay the fine. Once installed, the malware gives fraudsters access to banking details.

One such incident involved Amarjit, a resident of Bhubaneswar's Khandagiri, who received a message demanding Rs 2,200 for allegedly jumping a red light. Suspicious as his vehicle had not been taken out, he checked the m-Parivahan app and found no pending challan. Police later confirmed the message was fake.

Also Read: Odisha Transport Authority introduces online & offline E-Challan payment option for public convenience

“When I suddenly received the message, I doubted it. First, for trial, they ask you to deposit Rs 1. Then, they will deduct all the money from the account. They easily collect vehicle numbers and mobile numbers, so it becomes easy for them to cheat. So, if you receive any such messages, even in WhatsApp, then verify them first before taking any step,” stated Amarjit.

How Are Fake E-Challans Being Sent?

Vehicle owners are receiving messages on WhatsApp claiming traffic violations. These messages include an APK file link, asking users to download the file to pay the challan. Once clicked, the malware instantly drains the victim’s bank account.
Even road safety experts have received similar fake challan links. They have lodged complaints at the cyber police station and informed the Transport Commissioner.

How to Protect Yourself

•    Cyber experts advise never to click on APK files sent via WhatsApp or SMS. If clicked accidentally:
•    Immediately switch the phone to airplane mode
•    Turn off mobile data
•    Take a backup of important photos and videos
•    Format the phone
•    Delete any suspicious apps

If WhatsApp gets hacked, a complaint should be lodged immediately with the cyber helpline.
Meanwhile, the Bhubaneswar DCP Jagmohan Meena urged citizens to stay away from APK files and confirmed that WhatsApp has been informed to block such content. The State Transport Authority has also issued a public warning through the social media platform X.

According to available data, cyber frauds of various kinds amounting to nearly Rs 58 crore have occurred in Bhubaneswar alone in 2025, and 61 people have been arrested so far.

“If you receive any APK file on WhatsApp and you click on it, then there are chances of your data getting leaked. Most of the cyber crimes are done using the APK files. Although many people are aware, many others click on the files by mistake. So, we are making efforts that people don’t get tangled in such mistakes and be aware,” stated DCP Meena.