The Ministry of Electronics and Information Technology (MeitY) has stepped in after concerns emerged over mobile applications that were allegedly capable of remotely disabling e-rickshaws. MeitY Secretary S Krishnan confirmed at the CII Cybersecurity Summit that two applications linked to e-rickshaws have been removed following the controversy. The development has brought renewed attention to cybersecurity vulnerabilities in electric vehicles, particularly in how connected battery systems communicate with third-party apps.
The incident has also raised broader questions about the safety of Bluetooth-enabled technology in the growing electric mobility sector.
What Triggered The Alarm Over The BAT-BMS App?
The controversy centres on an app called BAT-BMS, which was designed to monitor battery parameters such as voltage, temperature, and current in electric vehicles. However, concerns arose after videos began circulating on social media showing users pairing with nearby e-rickshaw batteries over Bluetooth and disabling the discharge function.
ALSO READ: Waiting For Apple's Foldable iPhone? Here's When It's Actually Landing
The footage triggered alarm among e-rickshaw drivers and dealers in Delhi, who feared being left stranded mid-route if someone remotely cut power to their vehicles. It is important to note that there is currently no verified evidence that the app can disable all nearby electric vehicles or that the videos reflect a universal vulnerability across vehicles. The app is built to communicate with compatible Bluetooth-enabled Battery Management Systems, not vehicles in general.
Why This Points To A Larger Cybersecurity Problem
Experts say the episode has highlighted a growing concern around connected mobility and smart battery systems. As electric vehicles become more common on Indian roads, the reliance on Bluetooth and internet-connected components also increases, creating potential entry points for misuse.
ALSO READ: iPhone 18 Pro Max Coming With Big Battery Bump? This Leak Might Make You Happy
The BAT-BMS controversy has made it clear that stronger cybersecurity standards are needed for EV-related applications, especially those with access to core vehicle functions. The removal of two such apps by MeitY signals that regulators are beginning to take these concerns seriously, though industry experts say more systemic measures will be needed going forward.