A Delhi man lost over ₹4 lakh after clicking a fraudulent traffic challan link sent via WhatsApp that impersonated the mParivahan service, police said, highlighting a rising wave of sophisticated cyber scams leveraging official-sounding messages to steal money.
A resident of New Delhi was defrauded of more than ₹4.05 lakh after responding to a WhatsApp message claiming he had a pending traffic fine of ₹1,000, officials confirmed.
The message, purportedly sent from “NextGen mParivahan”, bore an official tone and referenced the transport department – a tactic that made it seem legitimate. Victims were urged to click a link to view and pay the alleged challan.
Believing the alert was genuine, the man clicked the link and downloaded an application. Nothing about his traffic record appeared in the app, but within hours, his financial accounts began showing unauthorised activity.
Around 2.59 pm, he received an email indicating the password for his Amazon e-wallet had been changed without his consent. Moments later, the email ID linked to his account was altered.
Shortly afterwards, he received multiple SMS alerts from various banks about high-value credit card transactions. The fraudsters used his saved credit card details to buy e-gift cards that were delivered digitally to an unknown email address.
By the time the man realised what had happened, he had lost over ₹4 lakh. He filed a complaint on the National Cyber Crime Reporting Portal, and police registered a case of cheating under the Bharatiya Nyaya Sanhita (BNS).
How the Scam Works: A Digital Trap
Cyber-fraud experts say this type of scam relies on phishing techniques and malware to compromise devices and financial accounts.
Scammers send traffic challan notifications via WhatsApp that look startlingly authentic. Messages use official buzzwords such as “Traffic Violation Notice”, “Challan Number”, or references to government portals to reduce suspicion.
These fraudulent texts typically include a link that, once clicked, prompts the user to download a mobile application – usually an APK file – that is not available on official app stores.
Once installed, malicious apps can request intrusive permissions like access to notifications, SMS or screen overlays. These allow scammers to intercept one-time passwords (OTPs) and other sensitive information, or even gain remote control of the device.
With such access, attackers can penetrate bank and e-commerce apps, make unauthorised purchases, and transfer funds — often by buying digital gift cards, which are hard to trace or reverse.
Cybersecurity research has also shown that such malware may harvest contact lists and forward itself to others, helping the scam propagate rapidly.
Not an Isolated Incident: A Worrying Pattern
Police and consumer safety groups believe this scam is part of a growing trend of fraudulent traffic challan schemes across India.
Earlier incidents in Delhi have seen victims lose around ₹2.5 lakh after clicking on similar fake links for smaller fines, such as ₹500, police told reporters.
In other parts of the country, similar scams involving mParivahan or traffic challan APK files have been flagged by local police and reported widely by citizens on social media, indicating how pervasive the problem has become.
Cybersecurity firms have also identified malware campaigns using fake e-challan links to infect thousands of devices, steal personal data and facilitate financial fraud.
Experts reiterate that such scams are becoming more sophisticated, using official logos, realistic-looking templates and plausible language to deceive even cautious users.
Police Advisory and Safety Measures
Delhi Police have urged citizens to be extremely cautious about unsolicited messages regarding traffic violations, fines, or legal penalties.
Officials have stressed that official challan alerts are never sent via WhatsApp messages or APK files and legitimate notifications are issued only through the Parivahan portal or state transport department websites with proper sender IDs.
A senior police officer said that many messages now include vehicle registration numbers and specific challan amounts to enhance the appearance of authenticity – but under no circumstances should unknown links be clicked.
Police have advised those who may have accidentally installed suspicious files to immediately put their phones on airplane mode, delete the file, reset the device and change all passwords from a secure device.
Users have also been urged to report cyber fraud cases to the 1930 cyber helpline or via the official cybercrime.gov.in portal.
Online Safety: What Users Can Do
Digital security experts recommend several precautions to reduce vulnerability:
- Never click on links or download apps from unknown numbers – especially via WhatsApp or SMS.
- Verify challan details only via official portals such as echallan.parivahan.gov.in or state transport sites.
- Avoid saving credit/debit card details on third-party platforms.
- Enable two-factor authentication (2FA) and banking alerts.
Public awareness remains key: experts say that educating users about phishing signs and official communication channels can dramatically reduce the success rate of such scams.
The Logical Indian’s Perspective
This incident underscores the deepening challenge of safeguarding citizens as India’s digital services expand. Fraudsters are constantly evolving their methods and exploiting public trust in government-sounding communications.
While technology brings convenience, it also demands greater digital literacy, robust safeguards and collective vigilance from individuals, authorities and service providers alike.
As users, recognising credible channels and staying alert online can protect not just personal finances but the integrity of digital governance itself.
