Fake Parivahan and e-Challan pages imitate official names, colours and urgent notices to steal payments, OTPs or documents. The strongest defence is to open the official service independently, inspect the full domain and refuse remote-access or secret-credential requests.
Who this guide is for
This checklist is for anyone receiving a challan message, APK link, payment demand or “RTO support” call.
Before you start
- Do not tap the message link immediately.
- Write down the claimed challan or vehicle reference.
- Open the official portal independently.
- Warn family members who may control the vehicle or payment account.
Step-by-step process
- Inspect the sender, spelling, domain and urgency tactics.
- Verify the claim on the official portal.
- Never install an APK or screen-sharing app from a message.
- Do not reveal OTP, PIN, password or card details.
- If money or data was exposed, contact the bank and appropriate cybercrime channel promptly.
- Preserve evidence without forwarding the malicious link widely.
Documents and information to prepare
Screenshot, sender and time.
Result from the verified portal.
Bank reference if loss occurred.
Cybercrime or police acknowledgement where applicable.
Common problems and practical fixes
| Problem | What to do |
|---|---|
| Message knows vehicle number | Public or leaked data does not prove the sender is official. |
| Fake page shows a padlock | HTTPS encrypts a connection but does not prove legitimacy. |
| Caller pressures immediate payment | End the call and verify independently. |
Safety and privacy checks
Act quickly after compromise: secure financial accounts, change exposed passwords and report unauthorised transactions. Never send us sensitive evidence.
- Type or bookmark the official address instead of trusting an advertisement or unsolicited message.
- Do not share passwords, OTPs, UPI PINs or card credentials with an agent or with Parivaahan.org.
- Save the official acknowledgement or receipt, but keep personal documents out of public comments and emails.
Frequently asked questions
Are all challan SMS messages fake?
No, but every claim should be independently verified.
Can a .com site be official?
Use domains and routes confirmed by the relevant government authority.
Where can cyber fraud be reported?
Use India’s official cybercrime reporting channels and contact your bank immediately for financial loss.
Official source and related reading
Start with the official e-Challan portal and confirm the department and state shown before entering personal data. Related guides: safety guide, e-Challan guide.
Have you found an outdated step? Use our Contact page and include a public official source. Do not send private identity or payment information.