A few viral videos have exposed a problem few people knew existed. Some e-rickshaws could reportedly be stopped remotely using ordinary smartphone apps. The demonstrations quickly spread across social media, showing users connecting to nearby e-rickshaws through Bluetooth and switching off their batteries mid-ride. The incidents have now prompted government action. India’s Ministry of Electronics and Information Technology (MeitY) has blocked two battery management applications after reports suggested they could exploit insecure battery management systems (BMS) used in certain electric rickshaws. According to officials, the affected apps have been removed from app stores while authorities continue investigating the issue.
A security loophole hiding in plain sight
The concern is not about electric vehicles as a whole.
It centres on some budget e-rickshaws using Bluetooth-enabled lithium battery management systems without adequate authentication.
Reports suggest these systems allowed nearby users to discover batteries through Bluetooth and access controls that could disable power delivery.
If true, this turns a maintenance feature into a security vulnerability.
Instead of helping technicians monitor batteries, the same connection could allegedly interrupt a working vehicle.
While the viral demonstrations gained widespread attention, the functionality shown has not been independently verified across all affected systems.
Also read: The Viral E-Rickshaw Trend That Isn’t Funny
Drivers are paying the price
For e-rickshaw drivers, the issue goes beyond technology.
Every unexpected shutdown means lost income.
Drivers have reported pushing stranded vehicles for kilometres in extreme summer temperatures before reaching service centres.
Long repair queues have added to the disruption as more owners seek software fixes or battery replacements.
For passengers, an interrupted ride creates inconvenience.
For drivers, it directly affects daily earnings.
Why only some vehicles are affected
Not every e-rickshaw faces this risk.
Reports indicate the issue primarily affects vehicles using Bluetooth-enabled lithium battery packs with unsecured battery management systems.
Rickshaws powered by traditional lead-acid batteries are not believed to be vulnerable in the same way.
That distinction highlights a growing challenge for India’s expanding EV ecosystem.
Connected features improve diagnostics and maintenance, but they also create new cybersecurity risks when security receives less attention than affordability.
A bigger question for India’s EV future
India has rapidly embraced electric mobility.
E-rickshaws now form a critical part of urban transport across several cities.
However, the latest incident shows that software security is becoming just as important as battery range or charging infrastructure.
Manufacturers increasingly add Bluetooth connectivity, mobile applications and smart diagnostics to reduce servicing costs.
Without stronger authentication, encryption and access controls, those conveniences could introduce unintended vulnerabilities.
More than an app problem
Blocking two applications addresses immediate concerns.
It does not necessarily eliminate the underlying weakness if insecure battery management systems remain in circulation.
The bigger challenge lies in strengthening cybersecurity standards across connected electric vehicles before similar vulnerabilities appear elsewhere.
As India’s mobility ecosystem becomes increasingly software-driven, battery management may soon become as much a cybersecurity issue as an engineering one.