A new scam is circulating on WhatsApp in the form of a fake “RTO E-Challan” APK file, tricking users into believing it’s an official message from India’s Regional Transport Office (RTO).
Cyber experts warn that clicking and installing this file can allow hackers to take control of your phone, steal personal data, and even get your WhatsApp number banned.
How the Scam Works
The message usually appears to come from a known contact, using names like “RTO E-Challan” or “MParivahan.” It contains an APK (Android Package Kit) file — the format used to install Android apps. Once you tap the file, it installs malicious software that automatically forwards the same message and file to all your contacts, spreading the scam further.
Risks Involved
The fake APK may contain malware that steals your personal data.
Your WhatsApp account may get banned if it’s used to spread the file.
The malware can manipulate your phone’s settings and send messages without your consent.
How to Stay Safe
Do not open or download any APK files received via WhatsApp or SMS, even from known contacts.
Delete the message immediately and avoid forwarding it.
Remember: RTO or other government agencies never send APK files or official messages via WhatsApp.
If you have already installed the file, turn off the internet, run an antivirus scan, and uninstall the malicious app.
Also, change all important passwords for added security.
Staying alert and avoiding unknown links or attachments is the best defense against such scams.