Stories
Keralam Police Warn of Malicious APK Scam via Fake E-Challan SMS
- •Keralam police alert vehicle owners to a scam using fake e-challan SMS messages to distribute malicious APK files and steal sensitive information.
- •Fraudsters send SMS from private numbers with seemingly genuine e-challan details and a link, directing users to a fake website resembling the official Motor Vehicles Department portal.
- •The fake website prompts users to download a malicious APK file under the guise of an "Internal Security Review" to complete verification.
- •Malicious APK files can seek various permissions, allowing fraudsters to gain control of devices and access or misuse sensitive information.
- •Police advise against installing APK files from unofficial sources, recommend checking e-challan details only through official government websites, and urge immediate reporting of suspicious activity to cyber police.
Key Questions Answered
Fraudsters send SMS messages from private mobile numbers containing genuine-looking e-challan details and links that direct users to a fake website resembling the Motor Vehicles Department portal. After prompting the user to enter their vehicle registration number, the site displays an “Internal Security Review” dialogue box and tricks them into downloading a malicious APK file that can compromise the device.
Users should immediately disconnect the device from the internet and avoid using it for banking or sensitive transactions. They should remove suspicious applications, check UPI services, linked bank accounts, and recent transactions for unauthorized activity, and report the matter to the cyber police via helpline 1930 or the cybercrime portal.
People should check e-challan details exclusively through official MVD, Parivahan, or e-challan websites and authorized government applications or portals, rather than opening direct links sent via SMS or messaging platforms.
