Click here to join Express Pune WhatsApp channel and get a curated list of our stories
Victims are prompted to enter personal details, card information, or OTPs. Once this information is submitted, scammers use it to carry out unauthorised transactions, drain bank accounts, or misuse credit cards. (Source: File Photo) An Indian Army colonel in Pune has fallen victim to a cyber fraud involving a fake traffic challan after clicking on a link that falsely claimed there were pending dues in his name. The incident resulted in an unauthorised payment of over 32,000 Hong Kong dollars—Rs 3.81 lakh—from his credit card to a hotel in Hong Kong.
According to the First Information Report (FIR) registered at the Chatushrungi police station on Wednesday, the colonel, who is in his late 40s and posted with a defence establishment in Pune, received a message late on Monday night and opened it on Tuesday morning.
When he opened the link in the message, it redirected him to a message stating that a Rs 590 payment for a traffic violation challan for his vehicle was pending. The colonel proceeded to furnish financial details on an online form. He then clicked the option to generate a one-time password (OTP). Moments later, 32,939 Hong Kong Dollars were deducted from his credit card as a payment to a hotel in Hong Kong. He immediately approached the police, and the FIR was registered.
Investigators have said that fake traffic challan frauds use the same modus operandi as scams involving fake gas bills or fraudulent power bill scams. They have appealed to people to exercise caution while making online payments.
These scams typically begin with cyber criminals sending SMS, emails, or WhatsApp messages that appear to come from government departments, gas agencies, traffic police, or transport authorities. These messages claim that there are pending bills, challans or fines and include a link to check details or make payment. When victims click the link, they are redirected to a fake website that closely resembles an official government portal.
Victims are prompted to enter personal details, card information, or OTPs. Once this information is submitted, scammers use it to carry out unauthorised transactions, drain bank accounts, or misuse credit cards.
In another variant of the scam, clicking on malicious links installs spyware or remote-access software on the victim’s phone or device. This gives cyber fraudsters unauthorised control over the device, allowing them to monitor activity, capture passwords or OTPs, and access online payment applications. The criminals then exploit this access to carry out unauthorised fund transfers, often without the victim’s immediate knowledge.