Government Blocks Battery Apps Amid E-Rickshaw Safety Concerns

The Indian government has ordered Apple and Google to remove several battery management apps from their stores following reports of security misuse. These applications, including BAT-BMS, Lossigy, and Epoch Li-ion, were reportedly exploited to remotely disable e-rickshaw power systems. Viral videos showed individuals using Bluetooth connectivity to immobilize moving vehicles, prompting immediate safety concerns among regulators and the public.

The issue stems from the use of low-cost, insecure Battery Management Systems (BMS) in some electric e-rickshaws. Unlike proprietary systems, these hardware units lack adequate password protection. Malicious actors standing within a 15-metre Bluetooth range could pair with the vehicle's battery controller using these legitimate diagnostic tools to cut power supply. While the apps themselves were designed for standard battery health monitoring, their broad access permissions enabled unauthorized intervention in vehicles lacking robust security configurations.

IT Secretary S Krishnan confirmed the government's intervention during the CII Cybersecurity Summit, emphasizing that such apps are no longer permitted on app stores. Authorities are now engaging with store providers to prevent the distribution of potentially harmful software. While this action addresses the immediate software vector, the incident highlights a critical need for standardized security requirements for electronic components in low-cost transport. Owners of e-rickshaws are urged to check the security settings of their specific battery hardware to prevent unauthorized access.