A fake e-challan SMS scam in Pakistan starts with a message that looks official: you have broken a traffic rule, a fine is due, and you must pay now through a link before the amount increases or your vehicle is flagged. The message may mention a camera-recorded violation, a vehicle number and a deadline. But it is not from the traffic police or the Punjab Safe Cities Authority (PSCA) at all. It is a trap built to steal your money or your personal and banking details through a fake payment page.
These scams work because e-challans are real. Cameras in Lahore, Karachi, Islamabad and other cities do record violations such as running a red light, speeding or riding without a helmet, and genuine fines are issued against the registered vehicle. Because most drivers know this, a message about a fine feels believable — and the payment link is where the scam happens.
How the scam works
The scam usually follows one pattern, with small variations:
- The fake fine message. You receive an SMS or WhatsApp message claiming you owe a traffic fine. It may name a violation, a date and a vehicle number, and it warns of a deadline — pay today or the fine doubles, or your vehicle registration will be blocked. It includes a link to pay.
- The cloned portal. The link opens a website designed to look like the official e-challan portal. It may copy the PSCA’s colours, logo and layout so closely that it is hard to tell apart from the real page at a glance.
- The payment or the details. The fake page asks you to pay the fine through a card, a bank transfer or a mobile wallet, or it asks for your CNIC number, card details or a one-time password (OTP) to “verify” the payment. The money or the details go to the criminals, not to the government.
In some cases the scammers do not even need a real vehicle. In a case reported by Dawn, people living outside Punjab received these messages, including a Karachi resident who neither owned a vehicle nor held a driving licence. The messages were sent in bulk to random numbers, and anyone who clicked the link and paid was a victim.
What the authorities are saying
The Punjab Safe Cities Authority has warned the public repeatedly about fake e-challan messages. The PSCA says genuine e-challan SMS come only from the short code 8070, and the official website uses the .gov.pk domain. Any message from a different number, or any link that does not lead to a .gov.pk address, should be treated as suspicious. The PSCA has also said it never asks citizens for cash, account numbers or bank information through SMS.
After receiving a growing number of complaints about a cloned website, the PSCA asked the National Cyber Crime Investigation Agency (NCCIA) to trace the people behind it and take legal action, and wrote to Punjab Police to track the mobile numbers used to circulate the fake link. The PSCA’s managing director, Ahsan Younas, said fraudsters were increasingly exploiting digital channels for financial gain.
Karachi Traffic Police issued a similar warning in September 2025, calling the messages fake, misleading and fraudulent, and saying the department has no connection with them. The warning came ahead of the launch of Karachi’s faceless e-challan system on 1 October 2025, under which automated challans are issued on the basis of camera evidence and notices are delivered to the registered addresses of vehicle owners through postal services — not through payment links sent by SMS.
Real vs fake: how to tell the difference
| Real e-challan | Fake e-challan message | |
|---|---|---|
| Sender | PSCA short code 8070 only | An ordinary mobile number, WhatsApp number or unknown sender |
| Payment link | None — you check and pay on the official portal yourself | A link inside the message, often to a lookalike site |
| Details included | Time, location and nature of the violation | Vague or generic details, or a fine for a vehicle you do not own |
| Payment method | A 17-digit PSID paid through your bank, JazzCash, Easypaisa or an ATM | A personal JazzCash, Easypaisa or bank account, or card details typed into a linked page |
| Website | Ends in .gov.pk | A lookalike address that does not end in .gov.pk |
Any one row that does not match is reason to stop and check through the official channel.
How to check and pay a real challan safely
If you want to know whether you actually have a fine, never use the link in a message. Type the official address into your browser yourself:
- Punjab: echallan.psca.gop.pk — the PSCA e-challan portal.
- Sindh: tracs.sindhpolice.gov.pk — the Sindh traffic police portal.
- Islamabad: traffic.islamabadpolice.gov.pk — the Islamabad Traffic Police portal.
Enter your vehicle number and the owner’s CNIC on the official portal. If a fine exists, the portal gives you a 17-digit PSID (Payment Slip ID). Pay that PSID only through official channels — your bank’s app or internet banking, JazzCash or Easypaisa under government or bill payments, a 1Link ATM, or a bank branch. Never pay a challan into a person’s own wallet or account, and never share your CNIC photo, OTP or wallet PIN with anyone claiming to be traffic police. No agent can cancel or reduce a fine for you.
Red flags to watch for
- An SMS or WhatsApp message about a traffic fine that contains a payment link.
- A message from a private mobile number instead of the 8070 short code.
- A link that does not end in .gov.pk, or a page that looks like the PSCA portal but has a different address.
- A fine for a vehicle you do not own, or a violation at a time and place you were not driving.
- Pressure to pay within hours, or a threat that the fine will double or your registration will be blocked.
- A demand to pay into a personal JazzCash, Easypaisa or bank account.
- A request for your CNIC photo, card number, OTP or wallet PIN to “verify” or “clear” the challan.
- A message that arrives just as a new e-challan system launches in your city, when confusion is highest.
What to do if you already paid or shared details
Act fast. Call your bank or wallet provider at once and ask them to block or reverse the transaction, and change any passwords or PINs you shared. If you entered card details on a fake page, ask your bank to block the card. Report the message and the number to the NCCIA helpline 1799 or at complaint.nccia.gov.pk, and forward fraud SMS to the PTA by sending the message to 9000 with the sender’s number at the start. You can also report the incident to police helpline 15. Keep screenshots of the message and the fake page, and the transaction record, as evidence.
Frequently asked questions
Is every e-challan SMS a scam?
No. Real e-challans exist, and genuine PSCA messages come from the short code 8070. But a real message never contains a payment link and never asks for your bank details. If the message has a link, treat it as fake until you have checked the official portal yourself.
How do I check if I really have a challan?
Go to the official portal for your province — echallan.psca.gop.pk for Punjab, tracs.sindhpolice.gov.pk for Sindh, or traffic.islamabadpolice.gov.pk for Islamabad — and enter your vehicle number and the owner’s CNIC. Never check through a link sent to you by SMS or WhatsApp.
Can a fake e-challan website steal my money without me paying?
Yes. A cloned page can ask for your card details or an OTP, which the criminals can use to take money from your account. It can also install malicious scripts through the link. Never enter banking details on a page you reached from a message.
I received a challan message but I do not own a car. What should I do?
Ignore it and do not click the link. Scammers send these messages in bulk to random numbers, and people without vehicles have received them. If you want to be sure, check the official portal with your own details — never through the message’s link.
Who do I report a fake e-challan message to?
Report it to the NCCIA helpline 1799 or complaint.nccia.gov.pk, forward the SMS to PTA at 9000, and report the incident to police helpline 15. Reporting helps the authorities trace the numbers and websites behind the scam.
How to protect yourself
- Never click a payment link in a challan message. A real e-challan SMS never contains one. Delete the message and check the official portal yourself.
- Check the sender first. Genuine PSCA messages come only from 8070. A message from a private number about a fine is fake.
- Type the portal address yourself. Use echallan.psca.gop.pk for Punjab, tracs.sindhpolice.gov.pk for Sindh, or traffic.islamabadpolice.gov.pk for Islamabad. A real government site ends in .gov.pk.
- Pay only through a PSID. A real fine is paid with a 17-digit PSID through your bank, JazzCash, Easypaisa or an ATM. Never pay into a personal wallet or bank account.
- Never share your CNIC photo, OTP or wallet PIN. Traffic police never need these to clear a challan. Anyone asking for them is a scammer.
- Check the details, not the deadline. A real challan lists the time, location and nature of the violation. If the message is vague, or the vehicle is not yours, it is fake — no matter how urgent it sounds.
- Warn your family. Explain the 8070 rule to older relatives and to anyone who drives, so a fine message does not panic them into paying. Agree that no fine is ever paid from a message link.
- Report every fake message. Forward it to PTA at 9000 and report it to the NCCIA at 1799. Each report helps shut down the numbers and cloned websites behind the scam.
The same urgency trick appears in other government impersonation scams. A fake tax message demanding payment by SMS uses the same “pay now or lose access” script, fake delivery messages with payment links push you to a cloned tracking page, fake disconnection threats from your electricity supplier use the same deadline pressure, and callers pretending to be FIA officers threaten arrest to force an immediate payment. In every case, the check is the same: stop, verify through the official channel yourself, and never pay from a link in a message.