Pune, Pimpri-Chinchwad See Spike in Fake RTO E-Challan Scam; Cyber Police Warn Citizens
Pune, 18th December 2026: A fresh wave of cyber fraud linked to fake RTO e-challans has hit Pune and Pimpri-Chinchwad, with several residents losing lakhs of rupees after clicking malicious links sent to their mobile phones. Cyber police have warned that fraudsters are exploiting public awareness about digital traffic fines to hack phones and drain bank accounts.
According to officials, scammers are sending messages that appear to be official traffic violation notices, claiming unpaid challans for offences such as overspeeding or signal jumping. These messages typically contain a link or an attached file. Once clicked or downloaded, the malware gives cybercriminals remote access to the victim’s smartphone, allowing them to take control of banking and communication apps.
In recent incidents, a Pune resident lost Rs 5 lakh, while a man from Pimpri-Chinchwad was duped of over Rs 2 lakh using the same method, police said.
How the Fake RTO Challan Scam Works
Investigations reveal that an APK file titled “RTO Traffic Challan.apk” is being circulated through WhatsApp messages. The sender claims the file contains details of pending traffic fines and urges recipients to download it to avoid penalties or legal action. In some cases, the message specifies a fine amount to make the alert appear genuine.
Once the APK file is installed, the fraudsters gain access to the phone. They then hijack WhatsApp, forward the malicious file to other contacts, and use personal data stored on the device to carry out further fraud. Police say the attackers often request a new e-SIM, change registered mobile numbers and email IDs, and ultimately initiate unauthorised fund transfers through internet banking.
Cases Reported in Pune and PCMC
In Pune city, a resident from the Sinhagad Road area received a WhatsApp message on December 5 claiming that his vehicle had unpaid traffic fines. He later received a phone call from a person posing as an RTO official. Believing the communication to be genuine, he followed the instructions shared in the message and was subsequently cheated of Rs 5 lakh.
In a similar case in Pimpri-Chinchwad, a 45-year-old man from Chinchwad downloaded the same APK file after receiving a challan alert on WhatsApp on December 5. Soon after, he lost access to his phone, and Rs 2.49 lakh was siphoned off from his bank account.
Cyber police have observed that many such messages are sent late on Fridays or during holidays. “There is a clear pattern emerging. Fraudsters are deliberately targeting people on weekends and holidays,” said Senior Police Inspector Ravikiran Nale, in charge of the Pimpri-Chinchwad Cyber Police Station. “During these periods, it becomes difficult to immediately freeze bank transactions or trace accounts because banks operate with limited support.”
How to Stay Safe from Fake E-Challan Messages
Cyber police and transport officials have urged citizens to remain cautious and follow basic digital safety measures:
Do not download APK files received on WhatsApp or SMS. Government departments do not send application files directly to citizens.
Verify challans only through official platforms such as the Parivahan e-Challan website or by visiting the nearest RTO or traffic police office.
Remember that RTO notifications are usually sent via SMS, not WhatsApp messages with attachments.
If you have accidentally downloaded a suspicious file, immediately switch off mobile data and Wi-Fi, uninstall the app, and consider resetting the phone to factory settings.
Avoid opening links or files from unknown numbers and do not respond to such messages.
Police have appealed to residents to report suspicious messages promptly to the cyber crime helpline or the nearest cyber police station to prevent further losses and help track the fraud network.
