Fake Traffic E-Challan SMS Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 28, 2026

Severity: MEDIUM | View Full Scam Details

Beware the Fake Traffic E-Challan SMS Scam in India 2026: Protect Your Wallet and Data

The Fake Traffic E-Challan SMS Scam is a rising cyber threat in India, targeting vehicle owners with fake messages demanding immediate payment of traffic fines to steal money and personal details.

What Is the Fake Traffic E-Challan SMS Scam?

This scam involves fraudsters sending fake SMS or WhatsApp messages to unsuspecting drivers, claiming their vehicle has been issued an e-challan for a traffic violation. These messages typically appear to come from traffic police or related government bodies and warn of severe penalties such as hefty fines, license suspension, or even vehicle seizure. The urgency and legal tone prompt many to act quickly without verifying the claim.

Across India, this form of phishing attack has grown sharply, exploiting the widespread use of digital communication for official notices. Many people rely on SMS and WhatsApp to receive legitimate updates from transport departments, which scammers use to lend credibility to their fake messages.

While there is no official RBI or CERT-In advisory specifically for this scam variant at the time of writing, cybercrime units under the Indian government’s I4C (Indian Cyber Crime Coordination Centre) have reported it often in complaints received. They urge citizens to be vigilant as the scam capitalizes on fear and urgency around traffic penalties to commit fraud.

How This Scam Works — Step by Step

1. Received Message or WhatsApp Text: The victim gets a message allegedly from the traffic police stating their vehicle number has been penalised for a traffic offence, such as signal jumping or over-speeding.

2. Threat and Urgency: The message typically warns that immediate payment of a fine is required to avoid further penalties like license suspension or vehicle impoundment.

3. Suspicious Link Provided: A link is included to an online payment page, often using shortened URLs or web addresses resembling official transport department sites but hosted on fake phishing domains.

4. Victim Clicks Link: Believing the notice to be genuine, the victim clicks on the link.

5. Entering Payment and Personal Information: The fake site requests payment details, UPI information, or bank card numbers. Sometimes, the victim is also asked to provide Aadhaar or PAN details for “verification.”

6. Money and Data Stolen: Once payment or information is entered, the victim’s bank account is debited, or their data is harvested to commit further fraud. Victims may observe unauthorized UPI transactions or face SIM swap risks.

7. No Legitimate E-Challan Issued: The victim’s actual traffic record shows no such fine, but it is too late as financial loss or identity theft has occurred.

Real Warning Signs to Watch For

• Unexpected Message from Unknown Number: Official government alerts come from verified sources, not random phone numbers.

• Urgent Demand for Immediate Payment: Genuine challan notices provide timelines and options; scare tactics are uncommon.

• Suspicious Links in SMS or WhatsApp: URLs that don’t match official transport department domains or use URL shorteners.

• Request for Sensitive Data Such as Aadhaar or Bank Details: Authentic e-challan portals never ask for sensitive personal data via SMS or WhatsApp.

• Poor Language and Spelling Mistakes: Often the text contains grammatical errors or awkward phrasing.

• Pressure to Pay via UPI or Instant Online Transfer: Real government portals use official payment gateways, not random UPI IDs or unknown payment apps.

• Mismatch in Vehicle or Offence Details: Check traffic department websites or apps to verify actual challan status.

What Happens to Victims

Victims often bear immediate financial loss when their bank accounts or UPI IDs are fraudulently debited after entering payment on fake sites. Recovering stolen funds can be difficult if bank passwords or OTPs were compromised. Additionally, victims face the emotional stress of unauthorized transactions, potential identity theft using Aadhaar or PAN details, and the hassle of reporting and rectifying fraud.

In some cases, SIM swap fraud follows, where scammers use the stolen data to hijack a victim’s mobile number, gaining access to bank OTPs and other sensitive accounts. This can deepen the victim’s losses and complicate account recovery.

What RBI and CERT-In Say

Although there is no specific RBI advisory exclusively for the fake e-challan SMS scam, RBI has repeatedly warned consumers to avoid sharing OTPs, PINs, or full bank details over SMS or email. CERT-In (cert-in.org.in) advises users to verify all government-related messages with official portals and avoid clicking on suspicious links.

The Government of India’s Indian Cyber Crime Coordination Centre (cybercrime.gov.in) encourages reporting such scams through the national 1930 cybercrime helpline and the cybercrime reporting portal, which handle phishing and fraud incidents.

How to Protect Yourself

1. Do Not Click Links in Unsolicited Messages: Always verify online challan status via official state transport or NIC portals.

2. Check Vehicle Details on Verified Apps: Use government-approved apps or websites for any challan updates.

3. Never Share OTPs, PINs, Aadhaar, or Bank Details: Legitimate agencies do not request these via SMS or WhatsApp.

4. Watch Out for Language and URL Anomalies: Verify URLs carefully before typing payment information.

5. Install Mobile Security Apps: Use apps that can detect phishing attempts and malicious URLs.

6. Block and Report Suspicious Numbers: Use your phone’s spam filter or report the number on BharatSecure.app.

7. Keep Your SIM and Bank Details Secure: Avoid sharing OTPs broadly; contact your mobile operator immediately if SIM cloning or swaps are suspected.

What to Do If You've Been Targeted

• Stop Further Payments Immediately: Contact your bank or UPI app to block transactions.

• Report the Incident to Your Bank: Request investigation and reversal of unauthorized debits.

• File a Complaint with Cybercrime Authorities: Visit cybercrime.gov.in or call the 1930 helpline to report the scam.

• Inform Your Mobile Operator: Report any suspected SIM swaps or number misuse.

• Keep Copies of All Scam Messages and Payment Receipts: These will support your complaint with police or cybercrime units.

• Change Passwords and UPI PINs Immediately: Secure your digital payment apps and email accounts.

Frequently Asked Questions

Q: Can I get a genuine traffic challan via SMS or WhatsApp?
A: Typically, most Indian states provide challan status via official websites or mobile apps, not unsolicited WhatsApp messages. Always cross-check with the official transport department portal.

Q: What should I do if I accidentally paid through a fake link?
A: Contact your bank immediately to report fraud and request blocking or reversing the transaction. Also, file a complaint at cybercrime.gov.in and call the 1930 helpline for assistance.

Q: How can I verify the authenticity of an e-challan message?
A: Do not trust links in messages. Instead, visit your state’s official transport website or use government-approved apps such as the Ministry of Road Transport’s digital portals to check your vehicle’s challan status.

Whenever you receive messages about traffic violations or fines, always verify before making any payments. To confirm suspicious messages or report an incident, visit BharatSecure.app or call the 1930 cybercrime helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.