What to do if I shared my sensitive information on a cloned e-challan site?

Immediately contact your bank's customer service for assistance and request a card block. Report the fraud to 1930 or cybercrime.gov.in to document the incident.

How can I identify a cloned e-challan site?

Look for signs such as missing '.gov.in' in the URL, lack of SSL security indicators, and the site's acceptance of any input without validation.

How can I report cloned e-challan scams in India?

You can report the scam to the cybercrime helpline at 1930 or use the online platform cybercrime.gov.in. Additionally, inform your bank about the potential fraud.

What steps can I take to recover my money after falling victim to this scam?

Contact your bank immediately to file a complaint and request the transaction to be reversed. Document all relevant information and report the incident to 1930 and cybercrime.gov.in for further assistance.

Cloned E-Challan Portal Payment Fraud

INDIA — By BharatSecure Threat Intelligence Team · Updated May 28, 2026

Verdict: Suspicious | Risk Score: 8/10 | Severity: high

Category: UPI

How Cloned E-Challan Portal Payment Fraud Works

Overview: Cloned government portals are being used by scammers to con Indians out of their money through fake e-challan payment sites. The websites closely imitate the official Parivahan platform with copied logos, similar layouts, and sometimes convincing animation or government imagery. Victims enter their sensitive card details, which are then used by criminals to empty accounts or make fraudulent purchases. How It Works: Victims receive a text or mail with a notification and link. When opened, the portal asks you to fill in your vehicle or licence number. No matter what is entered, a fake fine detail is generated for the victim, along with payment instructions. The site then requests your card number, CVV, and expiry date—not via secure payment methods like UPI or net banking. All data is stored by the fraudster for misuse. India Angle: Such portals have targeted Indians nationwide but are particularly common in large metros (Delhi NCR, Mumbai). Victims are typically those comfortable with online government services, mostly tech-savvy urban residents. Real Examples: Scam site: chalaan-govtpay.in with Ashoka emblem and Ministry title. Claims to allow payment for MH03AB1234, even if that number is made up. Red Flags: - Web pages that allow entry of any vehicle or licence number and display a matching fake record - Only card payment accepted (UPI/net banking are missing) - No HTTPS padlock or government digital certificate - Unusual website domain (e.g., .in, .com, or .org instead of .gov.in) Protective Measures: Only trust and use the official .gov.in portals for payment. Double-check the government’s digital signature and HTTPS connection. Exit immediately if the website claims to have a record for any random vehicle number. If Victimised: Block your card, inform the bank, and make a cybercrime complaint at cybercrime.gov.in. Share scam details with BharatSecure to warn others. Related Scams: 1. Cloned PAN Application Portals for identity theft. 2. Fake scholarship application sites.

How This Scam Works — Detailed Explanation

Scammers utilize various platforms to reach victims, targeting tech-savvy individuals who frequently pay traffic fines through official channels like the Parivahan e-challan system. They often send SMS or email notifications that appear to be legitimate government communications, complete with official-looking logos and formatting. These communications typically inform users of outstanding traffic penalties and provide a link to a cloned portal for payment. The URLs, though deceptively close to legitimate ones, do not contain the mandatory '.gov.in' domain suffix, making them nefarious imitations. By using popular social media platforms like WhatsApp, scammers can further amplify their reach, spreading links to various user groups and increasing the likelihood of victim engagement.

To psychologically manipulate victims, scammers craft their messages to evoke urgency and fear. For instance, the notification may state that the user faces penalties or legal action if the payment is not made promptly, triggering a natural desire to resolve issues quickly. They may use phrases like “avoid penalties” or “immediate action required,” compelling individuals to click on the provided link without critical evaluation. Scammers may also go as far as to promise simpler payment processes than the official site, making their cloned portals seem like a better alternative. The site's interfaces often mimic official designs, providing a false sense of security.

Once victims click the link, they land on a webpage that looks exactly like the official e-challan site. They are prompted to enter personal information, including bank card details and UPI PINs. Unsuspecting victims, seeing what appears to be a real portal, believe they are making a secure payment. The site does not have proper security features, such as SSL encryption indicated by a padlock in the address bar, which is a significant red flag. After submitting their details, they find amounts withdrawn from their accounts almost instantly, often losing several thousands of rupees. Commonly, people report losing anywhere from ₹10,000 to ₹2,00,000 in such scams.

This type of fraud has a significant real-world impact across India. According to reports, cyber frauds caused losses of over ₹14,000 crore in 2022 alone. Regulatory bodies like the Ministry of Home Affairs and the Reserve Bank of India (RBI) have issued guidelines reinforcing the importance of safeguarding personal information. CERT-In has also warned about the uptick in cloned websites, stressing the importance of verifying URLs before making payments. Victims are encouraged to report losses immediately to their banks, such as SBI at 1800-11-1109 or HDFC at 1800-202-6161, and to file complaints with the cybercrime helpline 1930 or on their website cybercrime.gov.in, as swift action can sometimes recover stolen funds.

To distinguish legitimate communications from scams, users should carefully evaluate any payment notification they receive. Real messages from official entities will typically come from verified government domains, ending with '.gov.in' and usually will not demand immediate actions. Additionally, legitimate portals will have visible security indicators like SSL certificates. Users should be wary if a site allows any payment method without validation or responds to any input with fake confirmation details. Cross-referencing with official government communications or accessing portals directly via official websites can help confirm authenticity.

Visual Intelligence:

BharatSecure's AI has identified this as a used in scams targeting Indian users.

Who Does Cloned E-Challan Portal Payment Fraud Target?

General public across India

Red Flags — How to Identify Cloned E-Challan Portal Payment Fraud

Website accepts any input and shows 'real' details
Card payment is only option
No .gov.in in the domain
Missing SSL/secure padlock
No government digital signature

What To Do If You Encounter Cloned E-Challan Portal Payment Fraud

Report any suspicious links to 1930 or visit cybercrime.gov.in to file a complaint.
Immediately contact your bank’s customer service to block your card if you have entered your details.
Change your UPI PIN and online banking passwords to secure your accounts.
Monitor your bank statements for any unauthorized transactions and report them without delay.
Educate friends and family about this scam to prevent them from falling victim.
Stay updated on the latest scams through trusted news sources and official government advisories.

How to Report Cloned E-Challan Portal Payment Fraud in India

Call 1930 — National Cyber Crime Helpline (24x7)
File a complaint at cybercrime.gov.in
Contact your bank immediately if money was lost
Call RBI helpline: 14440 for banking fraud

Frequently Asked Questions

What to do if I shared my sensitive information on a cloned e-challan site?: Immediately contact your bank's customer service for assistance and request a card block. Report the fraud to 1930 or cybercrime.gov.in to document the incident.
How can I identify a cloned e-challan site?: Look for signs such as missing '.gov.in' in the URL, lack of SSL security indicators, and the site's acceptance of any input without validation.
How can I report cloned e-challan scams in India?: You can report the scam to the cybercrime helpline at 1930 or use the online platform cybercrime.gov.in. Additionally, inform your bank about the potential fraud.
What steps can I take to recover my money after falling victim to this scam?: Contact your bank immediately to file a complaint and request the transaction to be reversed. Document all relevant information and report the incident to 1930 and cybercrime.gov.in for further assistance.

Related Scams in India

Verify Any Suspicious Message

Check any suspicious message, link, or call for free at bharatsecure.app. BharatSecure uses AI to detect scams in real-time and protect Indian users.