Delhi's electric tuktuk boom gets a hacking shock

Delhi’s electric auto rickshaws, once hailed as a cleaner alternative to traditional fuel-powered vehicles, are facing a growing threat from cyberattacks targeting their batteries. The incident has raised concerns among drivers and officials alike, as the vulnerability of these vehicles exposes a critical weakness in the city’s push toward greener transportation. The attacks, which involve remote disabling of electric rickshaws through malicious apps, have left many drivers stranded and financially vulnerable, adding another layer of uncertainty to an industry already grappling with regulatory changes. The problem emerged in July when videos surfaced online showing electric rickshaws suddenly shutting down on Delhi’s roads. According to reports, scammers used freely available battery management apps downloaded from third-party platforms. These apps exploited unsecured Bluetooth connections on the rickshaws to remotely disable their batteries. In some cases, attackers demanded payments from drivers to restore functionality, creating a form of digital extortion. The Indian government responded swiftly, instructing Google and Apple to remove certain Chinese-developed apps from their app stores. However, experts warn that the issue extends beyond the banned apps, as similar vulnerabilities remain in the system. Delhi’s shift toward electric rickshaws has been driven by environmental concerns and government mandates aimed at reducing air pollution. The city’s government announced in 2023 a plan to phase out all non-electric rickshaws by January 2027, with a broader ban on new motorcycles and scooters set for 2028. This move seeks to replace over six million small internal combustion engine vehicles registered in the region, including nearly 95,000 auto rickshaws currently operating in the Delhi National Capital Territory. The initiative aligns with national efforts to reduce vehicular emissions, particularly in a city where air pollution has long been a public health crisis. Rickshaw drivers, however, face both economic and technical challenges under the transition. Many rely on older models powered by compressed natural gas (CNG), which the Supreme Court mandated in 2001 to improve air quality. Despite this, studies suggest that CNG vehicles still contribute significantly to nitrogen oxide emissions, which exacerbate smog formation. Electric rickshaws, while promising, come with high upfront costs. A typical model can cost between 250,000 to 300,000 rupees (around $3,700–$4,400), a sum many drivers find difficult to afford. Loans to purchase these vehicles often mean years of debt, making the transition financially burdensome for many. The recent cybersecurity threats add yet another complication. Researchers at the International Council on Clean Transportation (ICCT) noted that roughly half of India’s rickshaws are already electric, a much higher proportion compared to other vehicle categories. For instance, only about 4 percent of four-wheelers in the country are electric. This rapid adoption has been fueled in part by the availability of imported components that allow local manufacturers to assemble affordable electric vehicles. Yet, the reliance on external parts and software has exposed the fleet to security risks. Industry experts emphasize that the current wave of hacking is not isolated. “These banned apps are not the only ones,” said Sandeep Kumar Shukla, director of the International Institute of Information Technology Hyderabad. “Anyone can develop such an app and distribute it.” The ease with which malicious software can be created and shared underscores a lack of standardized security protocols for electric vehicles in the country. While authorities have taken steps to block known apps, the underlying infrastructure remains vulnerable. As the situation unfolds, drivers are preparing for potential legal action against the proposed regulations. Indrajeet Sachdeva, a leader in a rickshaw drivers’ welfare organization, mentioned plans to file a legal challenge ahead of the 2027 deadline. Meanwhile, the ICCT continues to monitor the impact of the transition, balancing environmental goals with the practical realities faced by millions of workers. With the electric rickshaw revolution gaining momentum, the question remains whether the technology can evolve fast enough to protect both users and the environment.