Four Men Arrested for Duping Businessman with Fake Challan — How to Identify & Stay Safe

Severity: MEDIUM | View Full Scam Details

Beware in 2026: Four Men Arrested for Duping Businessman with Fake RTO Challan Scam in India

A new UPI fraud scam involving fake traffic challans is tricking Indian businessmen, causing financial losses and emotional distress.

What Is the Four Men Arrested for Duping Businessman with Fake Challan?

In early 2026, police in India arrested four men involved in a sophisticated scam targeting businessmen by using fake Regional Transport Office (RTO) challans. Challans are official receipts for traffic violations and fines, widely used across India. Scammers send counterfeit digital challans to victims, often via WhatsApp, pretending to be officials or suppliers demanding payment for alleged traffic offenses.

This scam primarily targets business owners and professionals who rely on digital communication platforms for transactions and operational updates. Due to the growing use of UPI (Unified Payments Interface) for quick payments and WhatsApp for business communication, fraudsters exploit these familiar channels to appear credible.

The scam is part of a rising trend of social engineering and app-based fraud in India. The Indian government agency CERT-In (Indian Computer Emergency Response Team) and the Integrated Financial Intelligence Unit (I4C) have both issued advisories warning against fake messages posing as government authorities or official challan notifications with payment links. RBI has also cautioned users about fake apps disguised as official payment tools.

How This Scam Works — Step by Step

1. Initial Contact via WhatsApp
   The fraudsters first approach the victim via WhatsApp, posing as either a local supplier or an RTO official. They claim the victim has outstanding traffic fines requiring immediate payment.

2. Sharing a Fake RTO Challan
   To establish authenticity, the scammers send a digital challan mimicking the official RTO format. This includes fake registration numbers, QR codes, and penalty details.

3. Creating a Sense of Urgency and Fear
   The fraudsters pressure the victim by stating the fines must be cleared immediately to avoid vehicle impoundment or legal trouble, using fear psychology.

4. Request to Download a Malicious APK
   They instruct the victim to download an app (an APK file) supposedly necessary to verify and settle the fine. This app is actually malware designed to steal banking credentials or hijack UPI transactions.

5. Stealing Money via UPI Fraud
   Once installed, the fake app captures UPI PINs or uses permission to initiate payments from the victim’s bank account without consent.

6. Blocking Further Communication
   After the money is transferred, the scammers block the victim on WhatsApp and disappear.

Real Warning Signs to Watch For

• Receiving unsolicited messages about fines or penalties without prior notice or RTO calls
• Links or attachments asking to download apps outside official app stores (Google Play Store)
• Misspellings or inconsistent details in the digital challan or message format
• Pressure tactics demanding immediate payment with threats of legal action
• Requests for your UPI PIN or Aadhaar details through chat or suspicious app platforms
• Inability to verify the sender’s phone number or official credentials
• Asking to scan QR codes sent in messages from unknown contacts

What Happens to Victims

Victims of such scams often experience a significant financial blow as money is instantly drained via UPI transactions. Since UPI payments are typically instant and irreversible, recovering funds becomes difficult. Many are unaware they have infected their phones with malware, which may leak Aadhaar-related data or SIM-based OTP codes, risking identity theft.

Emotionally, victims suffer from stress, anxiety, and embarrassment. Businessmen, in particular, worry about trust breaches with vendors and customers when their official communications get compromised.

What RBI and CERT-In Say

The Reserve Bank of India has emphasized never sharing UPI PINs or OTPs with anyone and warns against downloading apps from third-party links. RBI’s official helpline for fraud-related queries is 1800-122-191.

CERT-In advises users to keep their devices updated and use genuine apps only from trusted app stores. They recommend reporting suspicious communications to the national cybercrime helpline 1930 or filing complaints on cybercrime.gov.in. Both regulators highlight increased vigilance against social engineering attacks exploiting digital payment systems and messaging platforms.

How to Protect Yourself

1. Never download APKs or apps from unknown sources or links shared over WhatsApp. Always use official app stores.
2. Verify any challan or fine by directly calling the official RTO or checking the government’s transport website.
3. Do not share UPI PIN, OTP, Aadhaar details, or bank credentials over WhatsApp or any chat platform.
4. If asked to pay fines, use official government portals or trusted payment gateways, never links sent via message.
5. Watch for poor grammar, spelling errors, or inconsistent messages that look unprofessional or rushed.
6. Enable multi-factor authentication on your phone and banking apps for added security.
7. Regularly check your bank and UPI transaction history for unauthorized payments.

What to Do If You've Been Targeted

• Immediately call your bank and request to block or freeze suspicious transactions or linked UPI IDs.
• Report the complaint to the national cybercrime helpline at 1930, explaining the scam details.
• File a cybercrime complaint on cybercrime.gov.in with all evidence like screenshots and message details.
• Inform your Aadhaar service provider if you suspect misuse of your Aadhaar-linked mobile or data.
• Change passwords and PINs for banking apps and UPI services promptly.
• Contact your mobile operator if you notice SIM or phone control issues to prevent SIM swap fraud.
• Share the experience on platforms like BharatSecure.app to warn others.

Frequently Asked Questions

Q1: Can this scam happen to ordinary individuals or only businessmen?
While businessmen are common targets due to frequent digital transactions, anyone receiving unsolicited WhatsApp messages about traffic fines can fall victim. Always verify before you act.

Q2: How can I be sure if the challan notification is genuine?
Official challans come from state RTOs through registered phone numbers or government portals. Do not trust WhatsApp messages or random phone numbers without confirmation from official channels.

Q3: Is it safe to pay a traffic fine through UPI apps?
Pay only through trusted apps like BHIM, Google Pay, or banks’ official apps, and only when you initiate the payment via verified government sites or direct RTO systems. Never pay via links sent by unknown contacts.

Stay alert and protect your money and identity in 2026 and beyond. Whenever you receive suspicious messages about fines or payments, verify their authenticity at BharatSecure.app before responding or clicking any links. Your vigilance is your first line of defense against digital fraud.