Fake Traffic E-Challan SMS Phishing Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 28, 2026

Severity: MEDIUM | View Full Scam Details

Beware the Fake Traffic E-Challan SMS Phishing Scam in India 2026: Don’t Fall for Fraudulent Traffic Fine Messages

Scammers in India are sending fake traffic e-challan SMS messages that falsely warn you about fines and threaten arrest, trying to steal your money through phishing links.

What Is the Fake Traffic E-Challan SMS Phishing Scam?

In India, traffic e-challans are official digital notices sent by government agencies for traffic violations. Genuine e-challans come from recognised portals like parivahan.gov.in and inform vehicle owners about fines with instructions to pay securely. However, fraudsters have started sending fake SMSes impersonating these government messages, targeting everyday drivers across cities and towns.

This scam particularly affects vehicle owners who may already be stressed about fines. Attackers exploit this urgency by sending SMS warnings claiming the recipient has violated traffic rules and must pay immediately to avoid consequences like vehicle seizure or arrest. The scam is widespread, with many reports filed in various states, affecting people who rely on SMS alerts instead of official apps or websites.

Authorities like CERT-In (Indian Computer Emergency Response Team) and the Indian government’s I4C (Indian Cyber Crime Coordination Centre) have issued advisories about phishing scams involving fake e-challan messages. While RBI advisories focus generally on digital payment safety, they also warn about fake UPI payment links in these scams.

How This Scam Works — Step by Step

1. Receiving the SMS: You get an SMS on your phone claiming it’s from a traffic police or transport department, saying you committed a traffic violation like speeding or signal jumping.
2. Urgent Threat: The message uses urgent language, such as “Pay penalty now to avoid arrest,” or “Vehicle will be seized if not paid within 24 hours.”
3. Malicious Link: The SMS contains a shortened or suspicious link (e.g., echallaxzv.vip), which is not related to any government domain and often lacks HTTPS.
4. Fake Website: Clicking the link takes you to a counterfeit website designed to look like the official traffic challan portal, with fake government logos and request for vehicle and personal details.
5. Payment Request: The fake site asks for payment via UPI apps or debit/credit card entry, tricking you into transferring money directly to the scammers.
6. Data Theft: Sometimes, the victim’s Aadhaar number, PAN, or bank credentials may also be asked, risking identity theft.
7. Loss: Once payment or details are submitted, scammers disappear, and legitimate fines remain unpaid while victims lose money and sensitive data.

Real Warning Signs to Watch For

• SMS comes from an unknown number or a non-governmental short code
• Links use suspicious domains ending in .vip, .xyz, or random letters, not official gov.in URLs
• No HTTPS padlock or “Not Secure” warning in the website URL bar
• Urgent, threatening language demanding instant payment or threatening arrest/seizure
• Requests for UPI or card payment through unfamiliar portals instead of official government payment gateways
• The website asks for Aadhaar, PAN, or bank credentials unnecessarily
• The SMS contains spelling or grammar mistakes uncommon in official government messages

What Happens to Victims

Victims of this scam often face significant financial loss as payments sent via UPI apps or cards are usually irreversible once completed. Unlike some ATM withdrawals, UPI transactions cannot be easily reversed without the receiver’s consent, which scammers exploit. Additionally, victims risk their Aadhaar or PAN data being stolen, potentially used for identity fraud, fake loan applications, or SIM swaps that can further compromise bank accounts.

The psychological impact is also severe, causing anxiety about fines, fear of legal consequences, and stress over potential identity theft. Many victims report difficulty in reaching help or reversing losses, with police and cybercrime authorities investigating but often unable to recover funds.

What RBI and CERT-In Say

The Reserve Bank of India (RBI) regularly warns users to be cautious about phishing attempts disguised as official government or bank messages, especially those asking for UPI or net banking payment details. RBI urges people to verify URLs and never share OTPs or PINs with anyone.

CERT-In and I4C have issued advisories about the rising trend of phishing SMSes and websites impersonating government services, recommending users to confirm messages through official portals like parivahan.gov.in before making any payment.

In case of suspicion, victims can call the government-run cybercrime helpline at 1930 to report phishing and seek guidance. For financial issues, bank customer care and the RBI’s banking grievance redressal framework can also be reached.

How to Protect Yourself

1. Always verify traffic challan details on official websites like parivahan.gov.in or your state traffic police’s official portal.
2. Do not click on SMS links that use unfamiliar or suspicious domain names.
3. Look for HTTPS security and official Gov.in domains before entering any details.
4. Never pay fines or provide bank credentials through links shared in SMS or WhatsApp unless verified.
5. Avoid sharing OTPs, PINs, Aadhaar, or PAN details on unknown websites or calls.
6. Use official government apps like DigiLocker or mParivahan for challan information.
7. Register your mobile number with your vehicle’s registration to receive legitimate challans directly from government systems.

What to Do If You've Been Targeted

• Do not panic and immediately stop any ongoing transactions.
• If you have paid via UPI, contact your bank customer care right away to block the transaction or account if possible.
• Change passwords/PINs and lock your Aadhaar biometrics using UIDAI’s website to prevent misuse.
• File a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in.
• Call the 1930 cybercrime helpline for advice and reporting phishing SMS or websites.
• Report the incident to your local police station with details of the SMS and payments made.
• Monitor your bank statements and UPI transaction history regularly for any suspicious activity.

Frequently Asked Questions

Q: How can I tell if a traffic e-challan SMS is genuine?
A: Genuine e-challan SMSes come from official government numbers or short codes and provide verifiable details such as a challan number and official payment link like parivahan.gov.in. Suspicious URLs, urgent threatening language, or strange domain names likely indicate a fake message.

Q: Can I reverse a UPI payment if I fall victim to this scam?
A: UPI payments are usually instant and final, making reversals difficult. You should immediately contact your bank to report fraud and freeze your account if possible. Prompt reporting improves chances of recovery or blocking further losses.

Q: Will sharing my Aadhaar or PAN on a fake site cause problems?
A: Yes, sharing sensitive documents can lead to identity theft, fraudulent loans, or SIM swaps linked to your identity. It is crucial to protect this information and notify UIDAI if you suspect misuse.

If you receive suspicious traffic fine messages, verify them first at BharatSecure.app. To report fraud or phishing, call the 1930 cybercrime helpline immediately.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.