The fake APK, posing as an RTO E-Challan or MParivahan notice, spreads through known contacts on WhatsApp.
Cybersecurity experts warn the file can access personal data and automatically forward itself to all contacts.
Users are advised to avoid installing APKs shared via WhatsApp and verify official challans only through government websites.
A new WhatsApp scam is making rounds on the internet, tricking users into downloading a malicious file disguised as an official message from India’s Regional Transport Office (RTO). The fake “RTO Challan” APK file has already spread widely, with multiple users reporting that their phones were compromised after installing it.
SurveyAs per several social media posts, the scam begins when users get a message, often from a known contact, claiming to be an RTO E-Challan or MParivahan notice. The message includes an APK file, an Android application package that can install apps outside the Play Store. Once downloaded, the app reportedly hijacks the device, accessing user data and automatically forwarding the same scam message to all contacts.
What experts say
Cybersecurity experts warn that the APK file contains malware capable of stealing sensitive information or gaining control over WhatsApp accounts. Some victims have even claimed that their WhatsApp numbers were temporarily banned after the malicious app spammed their contact list without permission.
How to be safe
Authorities and tech experts are urging users not to open or install any APK files shared through WhatsApp or SMS, especially those claiming to be from government agencies. The RTO or Ministry of Road Transport does not send challan notifications through WhatsApp, and official e-challans can only be verified via government websites or the Parivahan portal.
Also read: We want to tell India’s epics with the quality they deserve, says The Age of Bhaarat team
Users who may have accidentally installed the fake RTO Challan APK are advised to immediately disconnect from the internet, run a full device scan using a trusted antivirus app, and uninstall the suspicious file. It’s also recommended to change all important passwords and avoid forwarding such messages to others.
Follow Us
Ashish Singh
Ashish Singh is the Chief Copy Editor at Digit. He's been wrangling tech jargon since 2020 (Times Internet, Jagran English '22). When not policing commas, he's likely fueling his gadget habit with coffee, strategising his next virtual race, or plotting a road trip to test the latest in-car tech. He speaks fluent Geek. View Full Profile
