The Indian government has taken action against mobile applications that were allegedly being misused to remotely stop e-rickshaws. The Ministry of Electronics and Information Technology (MeitY) has directed the removal of three battery management apps—BAT-BMS, Lossigy, and Epoch Li-ion—from major app stores after reports emerged that they could be exploited to interfere with certain e-rickshaw battery systems.

The move follows viral social media videos showing e-rickshaws coming to a halt after being controlled remotely through mobile apps. Authorities have responded by removing the apps from the Google Play Store and Apple App Store while exploring additional technical measures to prevent further misuse.

Why Were These Apps Removed?

The three applications were originally developed as Battery Management System (BMS) tools. Their primary purpose was to help battery owners monitor information such as battery voltage, temperature, charging status, and overall health.

However, some battery systems also allowed users to switch the battery on or off through the app. According to reports, this feature was exploited by unauthorized individuals who connected to nearby e-rickshaw batteries using Bluetooth and remotely disabled power, causing vehicles to stop unexpectedly.

The reported incidents involved certain low-cost battery systems with inadequate Bluetooth security rather than a flaw affecting all electric vehicles.

How the Misuse Reportedly Worked

Investigations suggest that some affordable battery management systems left Bluetooth connections unsecured or protected with weak default settings.

An individual with one of the apps could reportedly:

• Come within Bluetooth range of the vehicle.
• Detect an unsecured battery connection.
• Pair with the battery management system.
• Use the control function to disconnect battery power.

This allegedly resulted in some e-rickshaws stopping suddenly, creating inconvenience for drivers.

How E-Rickshaw Owners Can Improve Security

Drivers and fleet operators using compatible battery systems can take several precautions to reduce the risk of unauthorized access.

Recommended safety measures include:

• Set a strong Bluetooth password or PIN if the battery management app supports it.
• Replace factory default credentials immediately.
• Keep Bluetooth disabled whenever it is not required.
• Consult an authorized battery technician about securing or reconfiguring the battery management system.
• Install a physical override or bypass switch where supported.
• Upgrade to a battery system that uses encrypted communication and stronger authentication.

These steps can make unauthorized Bluetooth access significantly more difficult.

How to Set a Bluetooth Password

If the battery manufacturer's official application provides this option, users can generally follow these steps:

1. Install or open the official battery management app.
2. Connect to the battery system.
3. Open the Settings menu.
4. Locate the Bluetooth Password or PIN option.
5. Create a new strong password.
6. Save the changes and reconnect using the new credentials.

The exact menu names may vary depending on the battery manufacturer and software version.

Will the Apps Stop Working on Existing Phones?

Removing an application from the Google Play Store or Apple App Store prevents new downloads, but it does not automatically uninstall the app from devices where it has already been installed.

As a result, previously downloaded copies may continue to function unless additional technical restrictions are introduced or the app becomes unusable due to other changes. Authorities are reportedly evaluating further measures to address the issue.

Users who have these apps installed should avoid using them in ways that interfere with or access devices without authorization.

Are Electric Cars and Electric Scooters Also Affected?

Current reports indicate that this issue is largely limited to certain low-cost or unbranded e-rickshaw battery systems with weak Bluetooth security.

Electric vehicles from established manufacturers such as Ather, Ola, TVS, Bajaj, Tata Motors, MG Motor, and Mahindra generally use more advanced battery management systems with encrypted communication and multiple security layers. These systems are not designed to be controlled through unsecured Bluetooth connections in the same way.

As a result, mainstream electric cars and branded electric two-wheelers are not believed to face the same vulnerability described in these reports.

Government Monitoring the Situation

The removal of the BAT-BMS, Lossigy, and Epoch Li-ion apps is part of the government's effort to reduce the risk of misuse involving vulnerable battery systems. E-rickshaw owners are encouraged to secure their battery settings, use only official software, and consult authorized service providers if they are unsure whether their battery system requires additional protection.