If you have received an SMS or WhatsApp message claiming your vehicle was caught overspeeding and you owe a pending traffic fine, pause before you click anything. The Press Information Bureau’s Fact Check unit has warned that cybercriminals are actively circulating fake traffic challan messages designed to look like genuine e-challan notifications, and real people have lost real money to this scam, in some cases over Rs 2 lakh from what started as a supposed Rs 500 fine. Here is exactly how this scam works, and how to protect yourself.
How Does This Scam Actually Work?
The pattern is fairly consistent across reported cases. You receive an SMS or WhatsApp message claiming your vehicle was caught by a traffic camera for an offence like overspeeding, along with a small pending fine, often quoted around Rs 500. The message includes a shortened link and urges you to pay immediately, sometimes threatening consequences like license suspension or legal action if you delay.
Clicking the link takes you to a fraudulent website built to closely resemble the genuine government e-challan portal, complete with a search option by challan number, vehicle number, or license number, and a “Pay Now” button. The giveaway is usually in the web address itself. Instead of the official echallan.parivahan.gov.in, scammers use lookalike domains with a single letter changed, something like echallan.pasvahan.icu, which is easy to miss at a glance, especially since the SMS often hides the real link behind a shortened URL. Some versions of this scam also push a malicious app file, or APK, instead of a fake website, which can compromise your device and lead to unauthorized bank or UPI transactions if installed.
What Are the Red Flags?
A few consistent signs can help you identify a fake challan message before you click anything:
- The message comes from a regular mobile number, not an official government sender ID, which typically uses a recognisable short code or verified business name
- No specific challan number, vehicle registration number, or details of the offence and location are mentioned. Genuine challans always include this specific information
- Urgent, threatening language, such as warnings about arrest, an immediate court summons, or your license being cancelled that same day. Real traffic authorities do not threaten arrest or immediate legal action through an SMS
- The payment page only accepts card details, with no option for UPI or net banking, which is unusual for a genuine government payment portal and is designed specifically to capture your card information
- A web address that does not end in an official government domain, such as .gov.in, even if it looks similar to the real one at first glance
How Do You Check If You Actually Have a Pending Challan?
The safest approach is to never trust a link sent to you directly, and instead verify independently:
- Open your browser and manually type the official government portal address yourself, such as the Parivahan Sewa e-challan website, rather than tapping any link from a message
- Search using your vehicle registration number or challan number directly on this official portal
- If the portal shows no pending challan, the message you received was fake, and you can safely ignore or delete it
- If you are unsure which is the correct official website, check your specific state’s RTO website directly rather than guessing based on a search result or a message link
What Should You Do If You Already Clicked?
If you have already clicked a suspicious link, entered any details, or downloaded a file from one of these messages, acting quickly matters. Security experts often refer to the first 60 minutes after such an incident as a critical window to limit potential damage:
- Do not enter any further information if you have not already done so
- Contact your bank immediately and consider blocking your card if you shared any card details
- Call 1930, the National Cyber Crime Helpline, to report the incident
- File a formal report on the official cybercrime reporting portal, cybercrime.gov.in
How Do You Report a Suspicious Message, Even If You Did Not Fall for It?
Reporting these messages, even when you were not fooled by them, helps authorities track and act on this kind of fraud faster. You can report suspicious messages impersonating government departments to the PIB Fact Check team, and file a report through the official cybercrime portal for phishing attempts more broadly. If you know friends or family members who may be less familiar with checking a link carefully, sharing this warning with them is a genuinely useful thing to do, since these scams specifically rely on catching people off guard.
The Bottom Line
This scam works because it combines something plausible, a small fine most people would just want to pay and move on from, with urgency and mild fear. The single most reliable habit that protects you here is simple: never click a link in an unsolicited traffic fine message, no matter how official it looks. Always navigate to the official government portal yourself and check directly. That one habit alone would stop this entire scam from working.
This same pattern shows up in other government-impersonation scams too, including fake income tax demand messages circulating this year. We have covered that one separately here: Fake income tax notice scam explained
Frequently Asked Questions
How do I know if a traffic challan SMS is fake?
Warning signs include the message coming from a regular mobile number rather than an official sender ID, missing details like the challan number or vehicle registration, threatening language about arrest or immediate legal action, a payment page that only accepts card details, and a web address that does not end in an official government domain.
How can I check if I actually have a pending traffic challan?
Manually type the official Parivahan Sewa e-challan website address into your browser, or visit your state’s official RTO website directly, and search using your vehicle registration number or challan number. Never use a link sent to you through SMS or WhatsApp to check this.
What should I do if I already clicked a fake challan link?
Avoid entering any further information, contact your bank immediately to report the incident and consider blocking your card if you shared card details, call the National Cyber Crime Helpline at 1930, and file a report on the official cybercrime.gov.in portal.
Can clicking a fake challan link actually steal my money?
Yes. Some versions of this scam use fraudulent payment pages designed to capture your card details, while others push malicious app files that can compromise your device and lead to unauthorized bank or UPI transactions. Real financial losses from this scam have been reported.
Do genuine traffic challan messages threaten arrest or legal action?
No. Genuine traffic authorities do not threaten arrest, court summons, or immediate legal action through an SMS. This kind of urgent, threatening language is a strong indicator of a scam.
Where can I report a fake traffic challan message?
You can report suspicious messages impersonating government departments to the PIB Fact Check team, and report the incident more formally through the official cybercrime.gov.in portal, especially if you shared any personal or financial information.
