Ministry of Heavy Industries
CYBERSECURITY VULNERABILITIES IN E-RICKSHAW BMS AND ROLE OF CERTIFICATION AGENCIES
प्रविष्टि तिथि:
21 JUL 2026 5:03PM by PIB Delhi
The Indian Computer Emergency Response Team (CERT-In) has received reports of safety concern involving electric three-wheelers (e-rickshaws). It has been reported that it is possible for unauthorized individuals to abruptly power off moving e-rickshaws by using a publicly available BMS mobile application. The issue lies in the Bluetooth module of the Battery Management System (BMS) chip, which is embedded in the battery module. The BMS commonly found in the low-cost e-rickshaws, have default or no credentials, which allows unauthorised users to connect and modify the settings and/or cut off the battery’s discharge, causing sudden vehicle shutdowns. CERT-In has identified the mobile apps which can be used to abruptly power-off batteries of erickshaws and reported to MeitY to remove the apps from application play stores.
MHI has issued advisory for addressing Bluetooth BMS vulnerabilities in e-rickshaws to SIAM, ACMA Industry bodies and testing agencies.
As per the information received from Ministry of Road Transport and Highways (MoRTH) cyber security regulations have not been framed in respect of E-rickshaw and E-kart. However, the Battery Safety Requirements for L-category EVs shall meet the standards prescribed in AIS 156 and Electric Power Train Safety shall comply with AIS 038 Rev. (2). The Government in the Ministry of Road Transport and Highways vide G.S.R. 503(E) dated 17th June, 2026 has published draft rules for approval of vehicles about cyber security in respect of vehicles of category L, M and N as per AIS- 189 and AIS- 190. Further, Rule 126 of the CMVR, 1989 mandates that every manufacturer or importer of a motor vehicle, including electric vehicles, shall submit the prototype to a testing agency notified under Rule 126. The testing agency issues a Type Approval Certificate certifying compliance with the provisions of the Motor Vehicles Act, 1988 and the CMVR, 1989.
This information was given by the Minister of State for Heavy Industries, Shri Bhupathiraju Srinivasa Varma in a written reply in the Lok Sabha today.
*****
TPJ
(रिलीज़ आईडी: 2287127)
आगंतुक पटल : 131