Thiruvananthapuram, The Keralam police have warned vehicle owners about a scam in which fraudsters use fake e-challan SMS messages to distribute malicious K files and steal sensitive information.
Anyone who suspects a malicious K has been installed should immediately disconnect the device from the internet and avoid using it for banking or other sensitive transactions, police advised. They should remove suspicious applications where possible and seek assistance from the cyber police or a trusted technical professional, besides checking UPI and other payment services, linked bank accounts and recent transactions for any unauthorised activity. If any suspicious transactions are detected, users should immediately contact their bank or payment service provider.
People who receive such fraudulent messages or fall victim to the scam should report the matter to the cyber police through helpline 1930 or the cybercrime portal at the earliest, the statement said, adding that in cases involving financial fraud, prompt reporting can help authorities initiate measures to prevent or recover the funds.
Fraudsters send SMS messages from private mobile numbers containing seemingly genuine e-challan details and a link, making them appear to have been issued through an official government system, according to a police statement. The website then displays a dialogue box labelled “Internal Security Review”, showing the vehicle registration number, and prompts users to download an application to complete the verification. Selecting the “Yes” option downloads a malicious K file, police said. Instructions such as “Internal Review”, “Pending Verification” or “Install App to Clear Challan” appearing after a vehicle registration number is entered should be treated with suspicion, police said, adding that legitimate e-challan payment or verification services normally do not require users to download K files from external sources. People whose passwords or other credentials may have been compromised should change their banking, email and social media passwords using another secure device, police said.
