The Union government on Friday has ordered to remove three mobile phone applications allegedly being misused to remotely disable e-rickshaws and other battery-operated vehicles, sources said. As per sources, concerns grew over passenger safety and the exploitation of a critical security loophole in lithium-ion battery management systems.

Sources said the applications, namely, BAT-BMS, Lossigy and Epoch-i-ion have been directed to be taken down. Officials also indicated that any other similar apps found to be facilitating such misuse will meet the same fate.

The move comes after several videos emerged online showing people approaching moving or parked e-rickshaws and switching them off by means of the aforementioned apps, leaving drivers stranded and raising serious concerns about public safety.

Features of the apps

One of the apps, named Lossigy, reportedly enables users to identify the compatible electric vehicles in their close proximity and disable them with a single tap. In a demonstration conducted with the consent of an e-rickshaw driver, a media outlet used the app to exercise the app’s feature, highlighting the vulnerability.

Drivers of the vehicles claimed that the issue has existed for some time but has become significantly more widespread after social media videos featuring the prank gained traction online, encouraging copycat incidents.

The Centre’s decision is aimed at preventing further misuse of such apps and safeguarding thousands of battery-operated vehicles operating on Indian roads.

How do these apps work?

The apps function using Bluetooth technology and are primarily designed to monitor and manage the health of Lithium-ion batteries used in e-rickshaws. However, experts say a major weakness lies in the absence of password protection or user authentication in some battery management systems.

As a consequence of the same, anyone within Bluetooth range can download a compatible application, establish a connection with a nearby battery and, in specific cases, cut power to the vehicle almost instantly.

According to the description of the BAT-BMS application on the Google Play Store, the software can connect to the Bluetooth-enabled Lithium batteries and display real-time information, including battery charge, voltage, current, temperature, cycle count and cell health. It also records charging and discharging history, supports Bluetooth 5.0-enabled smartphones, operates within a wireless range of up to 15 metres and can monitor multiple batteries, although only one phone can control a battery at a time.

While these features are intended to assist battery monitoring and maintenance, the lack of robust security measures has laid bare a dangerous loophole which effectively allows smartphones to become remote ‘kill switches’ for vulnerable electric vehicles.

Officials flag security risks

Sources said that the Union Ministry of Electronics and Information Technology (MeitY) was examining the issue. A senior official attached to the Delhi government said that many e-rickshaws possess Chinese-manufactured battery management systems that offer limited security protections, making them particularly susceptible to misuse. The official alleged that these applications were being used frequently for malicious purposes.