Rajkot Senior Defrauded of Rs 10.66 Lakh in Sophisticated E-Challan App Scam
In a distressing incident highlighting the perils of digital fraud, a 74-year-old resident of Rajkot was swindled out of Rs 10.66 lakh by cybercriminals who exploited a malicious mobile application masquerading as a legitimate traffic e-challan. The elaborate scam, which unfolded through a deceptive WhatsApp message, underscores the growing sophistication of online financial crimes targeting unsuspecting individuals.
Deceptive Message Leads to Malware Installation
According to an FIR lodged at the Cyber Crime police station by Chirag Dedkiya, 41, the victim, identified as Babu, received a WhatsApp message on December 30, 2025. The message appeared to originate from the phone number of a known relative, adding a layer of credibility to the communication. It contained a file named "RTO E-CHALAN.APK", which Babu, believing it to be an authentic traffic violation notice, proceeded to download onto his smartphone.
Unbeknownst to him, the file was malware designed to compromise his device. Police investigations revealed that the application granted the cybercriminals unauthorized remote access to his phone, enabling them to manipulate its functions covertly.
How the Fraudsters Executed the Theft
The cybercriminals leveraged this access to activate call and SMS forwarding on the device. This critical step allowed them to intercept one-time passwords (OTPs) sent to Babu's phone without his knowledge. Compounding the vulnerability, the phone number was linked to his wife's bank account, which became the primary target for the fraudulent activities.
Using the intercepted OTPs, the accused carried out 10 separate transactions, systematically siphoning off a total of Rs 10.66 lakh from the account. Police reports indicate that the stolen funds were predominantly utilized to settle credit card bills across various banking institutions, a method often employed to launder illicit gains quickly.
Prompt Action Leads to Partial Recovery
Upon discovering the unauthorized transactions, the victim's family acted swiftly by contacting the cybercrime helpline and registering a formal complaint on the national portal. This prompt reporting proved crucial, as it enabled authorities to freeze and reverse two of the transactions. As a result, Rs 1.86 lakh was successfully recovered, mitigating some of the financial damage inflicted by the scam.
Law enforcement has registered a case against unidentified persons under Section 318(4) of the Bharatiya Nyaya Sanhita and Section 66 of the Information Technology Act, highlighting the legal recourse available for such cyber offenses. The investigation remains ongoing as police work to trace the perpetrators and prevent similar incidents.
Key Takeaways for Public Awareness
This incident serves as a stark reminder of the importance of digital vigilance. To protect against such scams, consider the following precautions:
- Verify Unsolicited Messages: Always confirm the authenticity of files or links received via messaging apps, even if they appear from known contacts.
- Avoid Downloading Unknown APKs: Refrain from installing applications from unofficial sources, especially those shared through personal messages.
- Monitor Bank Accounts Regularly: Keep a close eye on financial transactions and report any discrepancies immediately to your bank and cybercrime authorities.
- Use Official Channels: For government-related services like e-challans, rely on verified platforms and apps from official sources only.
The Rajkot cybercrime unit continues to urge citizens to exercise caution and report suspicious activities promptly, as early intervention can significantly enhance the chances of recovering stolen funds and apprehending culprits.
