Fake E Challan SMS Is Spreading Again, and the Real Portals Are Easy to Find

Islamabad Traffic Police put out a warning on 1 August about fraudulent e challan messages moving through SMS and WhatsApp. It is the third such alert in Pakistan this year. Punjab Safe Cities Authority issued one in March, Karachi Traffic Police in July, and now the capital.

The message is always some version of the same thing: your vehicle has been fined, pay immediately, here is the link. The link is the scam. Everything else is decoration.

What the police actually said

Islamabad Traffic Police told citizens to stay alert to fraudulent e challan messages circulating on SMS and WhatsApp, and never to trust unverified messages or suspicious links. Their instruction was specific: check your e challan status only through the official government website, not through a link sent in a text or a messaging app.

Anyone who receives one should report it to the police or to the Cyber Crime Wing of the Federal Investigation Agency.

The Punjab Safe Cities Authority made the same point in March, and Karachi Traffic Police repeated it in July. Across all three, one line is constant and worth memorising: traffic police in Pakistan do not send payment links by SMS. If a link arrives asking you to pay a fine, the sender is not the police, whatever the message says.

How the fake message works

The mechanics are simple and they rely on timing rather than technical skill.

You get a text claiming a violation. It names a fine, usually somewhere between Rs 1,000 and Rs 5,000, low enough that paying is less annoying than arguing. It sets a deadline, often twenty four hours, and hints at legal consequences. Then it gives you a link or a QR code.

Tap it and you land on a page built to look like a government portal. It asks for your card number, or your wallet PIN, or it simply installs something. Either way the money that leaves your account is not a fine.

The deadline is doing the work. A real challan sits in a database until you deal with it. Nothing about a genuine traffic fine expires in a day, and no official process depends on you acting before you have had time to check.

The official ways to check a challan

There are two real portals, and which one applies depends on where you were driving, not where you live.

Both were open and working when this article was written. Type the address into your browser yourself rather than searching for it, because the search results are part of the problem, which is the next section.

If you would rather speak to someone, the Islamabad Police list a traffic helpline on 1915, an emergency number on 15, and an IGP complaint cell on 1715.

The lookalike websites are the bigger trap

Search for how to check a challan in Pakistan and most of what comes back is not the government. It is a crowd of sites with names built to sound official, several of them ending in .pk, all of them promising to check your challan for you.

Some are harmless traffic farms. Some are not. The problem is that you cannot tell which from the search result, and every one of them is asking for a number plate or a CNIC.

One detail makes this concrete. Several of those guides list islamabadtrafficpolice.gov.pk as the official Islamabad portal. That domain does not resolve at all. We tried it, twice, from a normal browser agent, and got nothing. The working address is traffic.islamabadpolice.gov.pk, on the main Islamabad Police domain. A single wrong subdomain repeated across a dozen sites is exactly the gap a phishing page is built to fill.

The rule that survives all of this: a real Pakistani government service sits on a gov.pk or gop.pk address. Anything else asking for your vehicle details is somebody's website, not the state's.

What to do if you already clicked

Clicking a link is not the same as losing money, and the useful window is the next few minutes.

1. Do not enter anything else. Close the page. If it asked for a card number or a PIN and you stopped before submitting, you are probably fine.
2. If you entered card details, call your bank now. Block the card from the bank's app or helpline. Every major Pakistani bank can freeze a card in under a minute.
3. If you entered a wallet PIN, change it immediately and check your transaction history. Our guides on resetting a JazzCash MPIN and recovering a blocked account cover the steps.
4. If something installed itself, uninstall it, then change the passwords for anything you use banking on from a different device.
5. Report it. The FIA takes cybercrime complaints online at complaint.fia.gov.pk. Several outlets also give 1991 as the FIA cyber helpline, though we could not confirm that number from the FIA's own site.

Report it even if you lost nothing. A complaint with the number the message came from is what eventually gets that number blocked, and it costs you five minutes.

Why this scam works in Pakistan specifically

Three things line up.

E challan is genuinely new to most drivers. Camera enforcement expanded quickly across Punjab and Islamabad, and plenty of people have received a real automated challan for something they did not notice doing. When the fake one arrives, it is plausible.

Second, official communication here really does arrive by SMS. Tax notices, bank alerts, utility bills, digital ID confirmations. We have been trained to treat a text from a short code as official, and the scam borrows that training.

Third, mobile payment is frictionless. Wallet transfers clear instantly and are hard to reverse, which is exactly what a fraudster needs. The same convenience that makes paying a real fine easy makes paying a fake one irreversible.

None of that is a reason to avoid digital services. It is a reason to open them yourself instead of through a link, which is the entire defence and takes about ten seconds.

The short version

Assume every fine notification that arrives with a link is fake, because the ones that are real do not need one. Look the challan up yourself on the two addresses above. Pay inside the portal or through a bank or wallet app you already had installed.

If you want the wider picture on what else is circulating, our roundup of the most common online scams in Pakistan covers the same tactic in its other costumes, and the SIM registration rules explain why the number that texted you is traceable at all.

Questions readers are asking

Do traffic police in Pakistan ever send payment links by SMS?

No. Islamabad Traffic Police, Karachi Traffic Police and the Punjab Safe Cities Authority have all said the same thing in separate warnings this year. A payment link in a challan message means the message is fake, regardless of how official it looks.

Where do I check an Islamabad challan?

At traffic.islamabadpolice.gov.pk/Echallan, which is the Islamabad Police traffic portal. Note the address carefully: islamabadtrafficpolice.gov.pk, which several guides quote, does not exist.

Where do I check a Lahore or Rawalpindi challan?

At echallan.psca.gop.pk, the Punjab Safe Cities Authority system. It accepts a plate number, or a CNIC or chassis number, and covers Punjab cities rather than Islamabad.

What happens if I ignore a real challan?

An unpaid challan stays attached to the vehicle and typically surfaces at transfer or token tax time, which is when it becomes expensive to have ignored. That is also why no genuine fine needs a twenty four hour deadline: the system is patient, the scammer is not.

Can I be fined for a car I already sold?

You can, if the transfer was never completed, because the challan follows the registration rather than the driver. Punjab now requires registration before delivery on new vehicles, which closes part of that gap, but a private sale still needs the transfer done properly.

Is it safe to pay a challan through JazzCash or Easypaisa?

Yes, when you start from inside the app or from the official portal. It is not safe when you arrive at the payment screen by tapping a link somebody sent you, which is the difference the scam depends on.