A viral social media trend showing people remotely shutting down e-rickshaws using apps like BAT-BMS has raised serious cybersecurity concerns. Experts warn that accessing or disabling someone else's vehicle without permission is illegal under the Information Technology Act and can attract up to three years in prison and a fine of ₹5 lakh.
The vulnerability stems from some e-rickshaws using Bluetooth-enabled battery management systems (BMS) with weak or no password protection. Anyone within Bluetooth range can connect using apps like BAT-BMS and disable the battery's discharge function, instantly stopping the vehicle. Following the incident, the government removed BAT-BMS and similar apps from app stores and launched an investigation. Cybersecurity experts have urged manufacturers to improve security with stronger authentication and encryption, while advising vehicle owners to disable Bluetooth when not in use, install firmware updates and use only authorised apps.
