The government has ordered the removal of three mobile applications that were allegedly being misused to remotely switch off e-rickshaws and other battery-operated vehicles while they were on the road, sources told HT.
According to the sources, the three applications identified are BAT-BMS, Lossigy, and Epoch-i-ion. Authorities have also indicated that any similar applications found to be facilitating such misuse will be blocked.
The move follows growing concerns after videos surfaced online showing people approaching e-rickshaws and remotely cutting off their power supply in the middle of journeys.
One of the applications, Lossigy, reportedly allows users to detect nearby electric vehicles and disable them with a single tap. HT tested the application with the consent of an e-rickshaw driver and was able to remotely switch off the vehicle.
Drivers say the vulnerability has existed for years but has gained widespread attention in recent weeks after videos of people using the apps to stop e-rickshaws went viral on social media.
How do these apps work?
The apps function in a manner similar to Bluetooth-enabled devices but, in many cases, do not require passwords or authentication to establish a connection. This means anyone within Bluetooth range can download the application, connect to a nearby vehicle and cut its power supply with a single tap.
According to the Google Play Store listing for BAT-BMS, the application offers several battery management features, including:
- Connecting to compatible Bluetooth-enabled lithium batteries.
- Displaying real-time battery information such as charge level, voltage, current, temperature, cycle count and cell health.
- Monitoring battery charging and discharging history.
- Compatibility with Bluetooth 5.0 (BLE) smartphones.
- A wireless operating range of up to 15 metres.
- Support for monitoring multiple batteries, although only one phone can control a battery at any given time.
While applications such as BAT-BMS and Lossigy are primarily designed to monitor the health and performance of EV batteries, experts say the absence of authentication in some lithium-ion battery management systems has created a major security loophole.
The flaw effectively allows smartphones to function as remote “kill switches”, potentially putting e-rickshaw drivers, passengers and other road users at risk.
Government examining security concerns
Before sources confirmed the takedown order, officials familiar with the matter had said that the Union Ministry of Electronics and Information Technology (MeitY) was examining the issue.
A senior Delhi government official also said that many e-rickshaws use battery management systems manufactured in China that offer limited security protections, making them vulnerable to misuse through such applications.
Experts say the incident highlights the cybersecurity risks associated with low-cost connected technologies and underscores the need for stronger security standards in battery management systems used in electric vehicles.
