The Indian government acknowledged security risks linked to mobile apps managing e-rickshaw batteries and ordered the removal of three specific apps from digital stores. Despite this directive, several such applications continue to be accessible on major platforms, raising ongoing safety and enforcement questions.
- Three e-rickshaw battery apps ordered removed by Indian government
- Apps exploit insecure Bluetooth-enabled battery systems with no authentication
- Removal orders not fully effective—multiple apps remain available
What happened
Videos surfaced on social platforms demonstrating how certain mobile applications connected via Bluetooth to battery management systems (BMS) in e-rickshaws could remotely disable the vehicles’ batteries, essentially cutting their power supply. This security gap was linked to the widespread use of aftermarket lithium-ion battery packs lacking proper password protection or authentication controls.
In response, India’s Ministry of Electronics and IT issued government orders on July 3, 2026, instructing app stores to remove three identified apps—BAT-BMS, Epoch-i-ion, and Lossigy—due to their potential misuse in disabling e-rickshaws. However, further verification revealed that these apps and others providing similar features remained accessible both on Google Play and Apple App Store.
Why it matters
The vulnerability exposes critical cybersecurity weaknesses in the rapidly expanding electric urban mobility sector in India. Unauthorized remote control over e-rickshaw batteries poses risks to vehicle owners’ safety and security, potentially enabling theft, disruption of transportation services, and other malicious activities.
Moreover, the continuing availability of such apps despite government removal orders raises questions about app store compliance, the effectiveness of current regulatory enforcement mechanisms, and the need for comprehensive cybersecurity mandates tailored specifically for BMS and related mobility technologies.
What to watch next
Observers and stakeholders will be looking for further government action on identifying those responsible for insecure applications and whether there will be mandatory cybersecurity and authentication standards introduced for e-rickshaw battery management systems and apps.
Additionally, monitoring app store responses and any cooperation between Indian regulators and global platforms like Google and Apple will be key to understanding improvements in enforcement and marketplace security for electric vehicle management technologies.