Men hack e-rickshaws with Bluetooth-based app, then charge drivers to fix them

A suspected fraud involving the alleged hacking of e-rickshaws through a mobile application has come to light in Madhya Pradesh's Ujjain, where police have detained an 18-year-old suspect accused of targeting drivers by posing as a technical expert and charging them to restart their vehicles.

According to police, the accused and others allegedly used a mobile app or other technical means to remotely disrupt the functioning of e-rickshaws during late-night hours in isolated areas. After the vehicles suddenly stopped working, the same people allegedly approached the stranded drivers, claimed to be technical experts, and restarted the vehicles within minutes. They then allegedly collected between Rs 200 and Rs 300, and in some cases more, from the drivers for the service.

The repeated incidents drew the attention of police after several e-rickshaw drivers and the Unorganised E-rickshaw Drivers and Operators Association lodged complaints alleging that they had been cheated through this method.

The vulnerability in the Bluetooth-enabled Battery Management System (BMS) of e-rickshaws in India allowed unauthorised users to remotely disable vehicles, causing confusion and income loss for drivers. The vulnerability stemmed from a lack of password protection in the BAT-BMS app by Shenzhen Grenergy Technology. Many drivers were unaware of the BMS features or passwords, as dealers seldom informed them. The issue, widely shared as online amusement, was later fixed by requiring password authentication, highlighting the unintended consequences of tech flaws on vulnerable workers.

Following the complaints, a joint team of the Crime Branch and the concerned police station launched an investigation on the instructions of Additional SP Alok Sharma.

During the investigation, police detained 18-year-old Ritesh Bhanupa on suspicion. Police said they are questioning him and will take further legal action based on the facts established during the investigation.

Additional SP Alok Sharma said police are conducting a technical examination of claims that the e-rickshaw systems were affected through a mobile application. Investigators are also analysing CCTV footage from across the city, technical evidence and suspicious activities to identify the entire network, if any.

Meanwhile, Ujjain Police has advised e-rickshaw drivers to remain alert. Police said that if an e-rickshaw suddenly stops functioning, drivers should not pay cash or transfer money online to unknown individuals claiming to offer assistance. Instead, they should contact only an authorised service centre or the company's technician.

Police also urged drivers to record the photo, video or vehicle registration number of any suspicious person who forcibly offers help in exchange for money and immediately report the matter by calling Dial 100/112, the Cyber Helpline 1930, or the nearest police station.

- Ends

With inputs from Sundeep Kulshreshtha