Government removes two apps from stores after e-rickshaw remote shutdown incidents

Indian authorities have taken action against two smartphone applications found in major app stores after emerging evidence showed e-rickshaws were being remotely shut down through these platforms. The removed apps, including the Chinese BAT-BMS application, were designed for battery management purposes but were being misused to disable vehicles without owner permission.

The central government identified these applications as security threats after multiple reports of e-rickshaw operators losing control of their vehicles through remote interference. The apps exploited vulnerabilities in battery systems that relied on unprotected Bluetooth connectivity, creating a direct pathway for unauthorised users to access and disable the vehicles. This discovery exposed a significant gap in the cybersecurity infrastructure protecting India's growing electric vehicle fleet, particularly the e-rickshaw segment which serves millions of daily commuters across Indian cities.

The removal process involved coordination between government agencies and major app distribution platforms to ensure these applications were no longer accessible to users. The authorities identified that the apps' original purpose—managing battery performance and diagnostics—had been compromised by inadequate security protocols. Unencrypted and unsecured Bluetooth connections allowed malicious actors to remotely trigger shutdown commands, stranding drivers and disrupting transportation services.

This issue carries significant implications for India's electric vehicle ecosystem. E-rickshaws are critical transport infrastructure in urban areas, particularly for low-income commuters and daily wage workers who depend on them for livelihood. The ability to remotely disable these vehicles created risks not only for vehicle owners but also for passenger safety and service reliability across cities.

Following the removals, the government has issued directives to app store operators—both Google Play Store and Apple App Store—to implement enhanced screening mechanisms for battery management and vehicle-related applications. Authorities are pushing for mandatory security audits and encryption standards before such applications receive approval. The move reflects growing concerns about cybersecurity vulnerabilities in India's IoT and connected vehicle infrastructure, with officials warning that similar vulnerabilities may exist in other vehicle management systems requiring urgent review and remediation.