Vehicle Owners Beware: New Scam Involving NHAI FASTag ‘Annual Pass’ Appears on Google Search
The Indian Cybercrime Coordination Centre (I4C) has issued a nationwide high alert regarding a sophisticated phishing scam targeting highway commuters across India. Fraudsters are currently impersonating the National Highways Authority of India (NHAI) FASTag Annual Pass service, using deceptive websites to siphon funds from unsuspecting vehicle owners.
According to the National Cybercrime Threat Analysis Unit (NCTAU), the scam is particularly dangerous because it leverages advanced Search Engine Optimization (SEO) and Google Ads to appear at the very top of search results.
The Trap: How the Scam Operates
Criminals have created highly convincing clones of the official NHAI portal, mimicking the branding, layout, and logos perfectly.
- Top Search Rankings: When users search for keywords like “FASTag annual pass” or “FASTag recharge,” these fraudulent sites often appear at Rank 1 or as “Sponsored” advertisements.
- Deceptive Payment QR: Once a user attempts to purchase or renew a pass, the site prompts them to pay via a QR code. These funds are immediately diverted to “mule” bank accounts rather than the NHAI.
- Evading Detection: To hinder financial tracing and delay law enforcement action, the scammers periodically rotate these bank accounts and UPI IDs.
Essential Safety Guidelines for Commuters
The Ministry of Home Affairs and the I4C emphasize that a high ranking on a search engine does not guarantee a website’s legitimacy.
To avoid falling victim to this nationwide scam, citizens are advised to:
- Use Official Channels: Only access FASTag annual pass services through the official NHAI website or the ‘Rajmarg Yatra’ app (available on Google Play and Apple App Store).
- Verify the URL: Carefully check the website address (URL) before entering any personal or financial information.
- Be Skeptical of Ads: Avoid clicking on “Sponsored” links at the top of search results for government services.
- Independent Validation: Always validate links received through emails, messages, or search results through official government portals.
Reporting Cybercrime
If you have been affected by an unauthorized transaction or have encountered a suspected phishing website, take immediate action:
- Call 1930: The National Cybercrime Helpline for immediate assistance.
- Report Online: Visit the official portal at cybercrime.gov.in to lodge a formal complaint.
