FASTag scam alert: Single QR scan at toll plaza could drain your bank account, NHAI warns users

New Delhi (The Uttam Hindu): Cyber ​​criminals are currently keeping a close eye on millions of vehicle owners across the country who use FASTag. Taking advantage of the growing popularity of digital toll payments, criminals are siphoning off people's hard-earned money through fake websites and fake QR codes. In light of this growing threat, the National Highways Authority of India (NHAI) has alerted all drivers and strictly instructed them to use only official platforms.

This is how this new nexus of fraud works

Cyber ​​criminals are using various tactics to trap vehicle drivers. Fake SMS or WhatsApp messages are sent to people's mobile phones informing them about sudden reduction in Fastag balance, account blockage, need to update KYC or offering cheap annual pass. These messages contain a link or QR code for instant recharge. When a user clicks on this link, he is redirected to a fake website that looks exactly like the real government portal. There, by asking for sensitive information like Fastag ID, vehicle number, mobile number and OTP, the fraudsters siphon off money from the bank account in a few seconds.

Fake QR codes are also being pasted on toll plaza signboards

Surprisingly, criminals are now directly targeting toll plazas. In many cases, fake QR code stickers are pasted on toll plaza signboards, and in a hurry, drivers scan them, thinking they are genuine. According to media reports, this is exactly what happened to a sales professional in Delhi in January 2026. He scanned a QR code near a toll plaza, and within minutes, ₹5,000 was deducted from his account. Such cases have seen a sharp increase since the end of 2025, posing a significant risk of financial loss and misuse of the Fastag account.

To avoid fraud, pay special attention to these things

The most effective way to avoid such fraud is to be vigilant. Always use the official bank app, government portal, or a trusted mobile app to recharge your Fastag. Always check the URL of any unknown website carefully, as fake websites often have slight variations in their domain names. Also, avoid scanning QR codes found in public places or through unknown messages. Never share your OTP, PIN, or bank details with anyone, as no official agency ever asks for this information over a message or call. Always keep your bank's SMS and email alerts turned on for safe transactions.

If you become a victim of fraud, take these steps immediately

Despite all precautions, if you believe you have become a victim of cyber fraud, immediately contact your bank and have your FASTag wallet or bank account blocked. Also, file a complaint with the National Cyber ​​Crime Portal without delay and report the matter to the local police. For immediate assistance or any FASTag-related issues, you can also contact the official helpline number 1033.