FASTag Cloning Fraud — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 28, 2026

Severity: HIGH | View Full Scam Details

FASTag Cloning Fraud in India 2026: How to Spot and Stop This Toll Payment Scam

FASTag cloning fraud is a growing cybercrime threat in India where scammers illegally duplicate your vehicle’s FASTag to steal money from your linked account.

What Is the FASTag Cloning Fraud?

FASTag is the electronic toll collection system mandated by the Ministry of Road Transport and Highways and linked to your bank account or prepaid wallet for hassle-free payments at toll plazas. As FASTags become mandatory on Indian highways, fraudsters have found a new target — cloning the RFID chip embedded in genuine FASTag stickers.

In this scam, fraudsters use illegal RFID readers to capture and duplicate your FASTag data. The cloned tag is then attached to another vehicle or a device used by the scammers to pass through toll plazas multiple times. Each passage deducts toll charges from your bank account or wallet without your consent or knowledge.

This scam specifically targets vehicle owners who have FASTags linked with their bank accounts or UPI wallets. Public complaints and police records indicate rising cases across major Indian states with heavy highway traffic. The rise in online sales and second-hand transfers of FASTags creates additional loopholes exploited by fraudsters. Though there is no singular official advisory yet from RBI or CERT-In specifically on FASTag cloning, the Indian government’s overall cybercrime framework via I4C (Indian Cyber Crime Coordination Centre) encourages vigilance about digital payment frauds including toll payments.

How This Scam Works — Step by Step

1. Research and Data Capture: Scammers track vehicle owners online, especially those selling or recharging FASTags on marketplaces or apps. Sometimes, they use illegal RFID scanners near toll plazas or parking lots to capture your FASTag’s UID (unique ID).

2. Contacting the Victim: Fraudsters may call or message, often posing as representatives from toll authorities, banks, or FASTag service providers. They might ask for FASTag details under the pretext of resolving payment issues or offering refunds.

3. Cloning the RFID Chip: Using the captured data, fraudsters replicate your FASTag’s RFID chip onto a dummy tag or attach it to another vehicle they control.

4. Unauthorized Toll Passes: The cloned FASTag is used repeatedly at toll plazas to make multiple toll payments. Your linked bank account or prepaid wallet is debited each time, sometimes in small increments to avoid immediate suspicion.

5. Delayed Detection: Since toll payments show up in your bank or wallet statement as legitimate FASTag transactions, you may not notice discrepancies for weeks. By then, significant losses may have occurred.

6. Victim Realizes After Receiving Alerts: The victim notices unusual toll charges during bank statement reviews, or receives SMS alerts from their bank for transactions they did not authorize.

Real Warning Signs to Watch For

• Unexpected toll deduction notifications from your linked bank or wallet, especially multiple transactions in a short span.
• Calls or WhatsApp messages claiming to be from toll authorities or your bank asking for FASTag details or OTPs.
• Offers to sell second-hand or recharged FASTags on unverified online platforms or social media.
• Alerts or messages of unpaid toll dues when you have recently recharged your FASTag.
• Physical damage or tampering signs on your vehicle’s FASTag sticker.
• Your vehicle’s FASTag balance showing sudden drops even though you haven’t travelled on toll roads recently.
• Calls using official-sounding numbers that pressure you to share personal or FASTag-linked banking info.

What Happens to Victims

Victims of FASTag cloning face direct financial losses as toll charges are deducted repeatedly without consent. Unlike UPI or bank transactions, reversing these duplicate toll payments can be complicated and time-consuming since toll payments are regulated under different frameworks.

Emotional stress and loss of trust in digital payment systems also follow, especially when victims struggle to get timely support from toll authorities or banks. In some cases, linked Aadhaar details or PAN numbers associated with the bank account come under scrutiny, adding to the victim’s troubles in proving fraud.

Victims relying on one-time password (OTP) based authentication may also suffer if fraudsters use SIM swap tactics, which have been reported as an enabling step in similar scams.

What RBI and CERT-In Say

While the Reserve Bank of India (RBI) has issued broad advisories on UPI safety and digital payment frauds, specific warnings on FASTag cloning are not yet separately issued. However, RBI emphasizes safeguarding your payments credentials and reporting any unauthorized transactions immediately.

CERT-In (Indian Computer Emergency Response Team) and I4C encourage citizens to stay alert against identity theft and transaction frauds involving digital wallets, mobile banking, and prepaid instruments like FASTags. Cybercrime.gov.in and the 1930 cybercrime helpline serve as official channels to report such fraud.

The Ministry of Road Transport and Highways also advises verifying official FASTag service providers and caution while buying or selling FASTags online.

How to Protect Yourself

1. Buy FASTags Only from Official Sources: Avoid unverified online platforms or third-party sellers offering discounted FASTags.

2. Do Not Share FASTag Details or OTPs: Never provide your FASTag registration number, RFID code, OTPs, or bank details over phone or WhatsApp, even if the caller claims to be from a bank or toll authority.

3. Monitor Your Bank and Wallet Statements Regularly: Check for repeated or unusual toll deductions daily or weekly.

4. Use App Notifications: Enable notifications on your FASTag app and bank app to track every transaction instantly.

5. Physically Inspect Your FASTag: Look for signs of tampering or double stickers on your windshield.

6. Report Suspicious Calls or Messages: Immediately block and report phone numbers or WhatsApp contacts trying to extract sensitive data.

7. Update Contact Details: Ensure your mobile number linked with FASTag, bank, and Aadhaar is secure and not compromised via SIM swaps.

What to Do If You've Been Targeted

• Immediately contact your FASTag service provider to report suspected cloning and request a block or replacement of your FASTag.
• Inform your bank or wallet provider to monitor or freeze linked accounts temporarily.
• Call the 1930 Cybercrime Helpline or visit cybercrime.gov.in to file an official complaint.
• Inform your local police station about the fraud and share all call records, messages, and transaction statements.
• Document all suspicious transactions with screenshots or bank statements as evidence.
• Change passwords and MPINs linked to your FASTag and mobile banking apps.
• Follow up with the toll plaza authorities for transaction dispute resolution.

Frequently Asked Questions

Q: Can FASTag cloning lead to my bank account being hacked?
A: FASTag cloning itself duplicates only the RFID tag used for toll deduction. However, if scammers obtain your linked bank or UPI details through OTPs or calls, they could attempt unauthorized access. Protect your banking credentials separately.

Q: How quickly can I report and reverse unauthorized FASTag deductions?
A: Toll payments can take longer to dispute compared to bank or UPI transactions. Contact your FASTag issuer and bank immediately and file a complaint on cybercrime.gov.in. Early reporting improves chances of reversal.

Q: Are there official apps to safely manage and monitor my FASTag?
A: Yes, government-approved apps and bank portals provide secure ways to recharge, track toll payments, and raise disputes. Avoid third-party apps not listed on official FASTag or bank websites.

For any suspicious messages or calls related to FASTag, verify them with BharatSecure.app and report suspected fraud immediately at the 1930 cybercrime helpline.

Disclaimer: This article describes a pattern of fraud reported in public sources for public-safety awareness. It is not legal, financial, or medical advice. To request correction or removal of any content, write to hello@bharatsecure.app.