Viral video: Helpless e-rickshaw driver in tears after miscreants cut power, disable vehicle using mobile app

Viral Incident Sparks Concerns Over E-Rickshaw Security

Theindiapostdaily.com – A recent surge in online activity has highlighted the growing concerns surrounding e-rickshaw disruptions. Pranksters disabling vehicles mid-journey via mobile apps have become a trending topic on social media. One clip circulating online captures a driver in emotional distress after miscreants remotely shut down his e-rickshaw, causing hours of delays and financial loss.

The driver, who rented the vehicle, revealed it was his sole means of supporting household expenses and repaying the rental cost. The incident underscores how such actions not only affect individual livelihoods but also create chaos on urban roads. Passengers and other vehicles face the consequences of these brief digital pranks.

“Today an e-rickshaw is not just an e-rickshaw—it’s a computer system and therefore, if it’s operating in the digital format, it’s got some memory functions,” explained Pawan Duggal, Chairman of the International Commission on Cyber Security Law, during an ANI interview. He emphasized that the offense falls under section 66 combined with section 43 of the Information Technology Act 2000, carrying a penalty of three years imprisonment and a ₹5 lakh fine.

Identifying the Culprits Behind E-Rickshaw Disruptions

According to HT reports, the apps responsible for the incident have been identified as BAT-BMS and Lossigy, both available on Google Play. These tools allegedly allow users to disable e-rickshaws without the owner’s consent, requiring reversal through the app instead of the vehicle’s physical key.

The problem stems from a security flaw in unsecured lithium-ion battery packs commonly sold in India. Battery Management Systems (BMS) that connect via Bluetooth without password protection can be manipulated by nearby smartphones. However, older models with lead-acid batteries and some lithium-powered vehicles using proprietary software remain unaffected by these hacks.

How the Apps Work

These apps exploit vulnerabilities in BMS systems by leveraging Bluetooth connectivity. Without password safeguards, they can remotely cut power and lock the vehicle, disrupting its operation. Real-time monitoring features—such as tracking voltage and temperature—are being misused for malicious purposes.

Manufacturer’s Response to Security Gap

Balvinder Singh Sahni, an Uttar Pradesh-based e-rickshaw operator managing over 15,000 vehicles in Delhi, noted that password protection was not included in the battery systems. “They were designed for service engineers to access during maintenance and diagnostics,” HT quoted him as saying. “No one anticipated the scale of disruption caused by this oversight.”

Watch viral video here: