Installed an “RTO Challan.apk”, “RTO E Challan.apk” or fake “MParivahan.apk” received on WhatsApp? Treat the phone as potentially compromised. CERT-In’s 17 March 2026 alert documented an RTO/e-Challan Android malware campaign capable of seeking SMS and phone permissions, running in the background, requesting a VPN connection, displaying fake financial screens and sending intercepted OTP messages to attacker infrastructure. This guide explains immediate device isolation, banking protection, password and UPI-PIN changes, session revocation, 1930/NCRP reporting, malware indicators and the correct
{ "@context": "https://schema.org", "@type": "Article", "headline": "I Installed an RTO or e-Challan APK From WhatsApp: Can It Steal Bank OTPs? Immediate Cyber-Safety, Banking and Evidence Guide 2026", "description": "A detailed India guide on CERT-In's March 2026 RTO/e-Challan Android malware campaign, OTP theft, APK sideloading, bank protection, 1930/NCRP…