Moneycontrol PRO
Black Friday Sale
Black Friday Sale
HomeTechnologyExplained: How the fake RTO challan scam on WhatsApp can hack your phone and steal your bank details

Explained: How the fake RTO challan scam on WhatsApp can hack your phone and steal your bank details

A new WhatsApp scam is tricking users with fake RTO challan messages. The message contains an APK file named RTO E-Challan.apk or MParivahan.apk that can hack your phone and steal personal and banking details. Here’s what you need to know and how to stay safe.

November 04, 2025 / 12:36 IST
whatsapp

A new scam is making the rounds on WhatsApp, and it’s catching many unsuspecting users off guard. Several people have reported receiving fake “RTO challan” messages from unknown numbers, claiming that a traffic fine has been issued against their vehicle. The message looks official, complete with a file attachment — but it’s actually a dangerous trap.

According to cybersecurity tipster Abhishek Yadav (@yabhishekhd), opening the attached file can instantly compromise your phone. The message usually contains a file named RTO E Challan.apk or Mparivahan.apk, and once you install it, the malware hidden inside gives hackers remote access to your device. This means cybercriminals can steal your personal data, bank details, and even use your number to send the same scam message to your WhatsApp contacts.

In some cases, users have reported that their WhatsApp accounts were banned after the malware spread through their device. The scam is particularly dangerous because it appears authentic — many people assume the challan is real and click without thinking twice.

Experts warn that any message containing an APK file — especially from an unknown number — should be treated as suspicious. APK files are Android installation packages, and installing them outside official app stores can expose your phone to serious risks like spyware, ransomware, or data theft.

To stay safe, users should remember that the Ministry of Road Transport and Highways or the mParivahan app never sends challan alerts via WhatsApp or SMS links. The only legitimate way to check if you have a pending traffic challan is through the official Parivahan website or your state’s RTO portal.

Cybersecurity experts are urging users to spread awareness about this scam, as many victims unknowingly forward the message, helping it spread faster. If you’ve received such a message, do not open the file, and immediately report or block the sender.

As scams on messaging platforms grow more sophisticated, this incident serves as a reminder that not every “official-looking” message is real. A moment of caution could be the difference between keeping your data safe and falling prey to a cyberattack.

Invite your friends and family to sign up for MC Tech 3, our daily newsletter that breaks down the biggest tech and startup stories of the day

MC Tech Desk Read the latest and trending tech news—stay updated on AI, gadgets, cybersecurity, software updates, smartphones, blockchain, space tech, and the future of innovation.
first published: Nov 4, 2025 12:10 pm

Discover the latest Business News, Sensex, and Nifty updates. Obtain Personal Finance insights, tax queries, and expert opinions on Moneycontrol or download the Moneycontrol App to stay updated!

Subscribe to Tech Newsletters

  • On Saturdays

    Find the best of Al News in one place, specially curated for you every weekend.

  • Daily-Weekdays

    Stay on top of the latest tech trends and biggest startup news.

Advisory Alert: It has come to our attention that certain individuals are representing themselves as affiliates of Moneycontrol and soliciting funds on the false promise of assured returns on their investments. We wish to reiterate that Moneycontrol does not solicit funds from investors and neither does it promise any assured returns. In case you are approached by anyone making such claims, please write to us at grievanceofficer@nw18.com or call on 02268882347