Mumbai Man Alleges ‘Massive Security Loophole’ In FASTag System After Transport Driver Activates New Tag
Mumbai Man Alleges ‘Massive Security Loophole’ In FASTag System After Transport Driver Activates New Tag
The incident has sparked fresh concerns over FASTag security and vehicle-owner protection after a Mumbai man claimed his existing FASTag was deactivated without his consent while his car was being transported to Delhi.
A Mumbai-based man has alleged a major security flaw in the FASTag system after his active FASTag was reportedly replaced by another one allegedly activated by a transporter’s driver without his permission.
The issue came to light after X user Rushil shared his experience online, claiming the incident happened while his car was being transported from Mumbai to Delhi.
“FASTag has a MASSIVE security loophole & nobody is talking about it,” he wrote in a viral social media post.
According to Rushil, the transporter’s driver casually asked him whether there was balance available in the FASTag before taking the vehicle for transport.
🚨 FASTag has a MASSIVE security loophole & nobody is talking about it.
— Rushil (@RushilM_) May 18, 2026
Today, literally anyone with access to your car & RC can get a NEW FASTag issued on your vehicle in THEIR name & mobile number.
No OTP.
No owner authorization.
No consent from the actual vehicle owner.
The… pic.twitter.com/6XzPmBqLy8
The next morning, he reportedly received a message from ICICI Bank informing him that a new FASTag had been activated for his vehicle under the “One Vehicle One FASTag” policy. His existing FASTag was then automatically blacklisted and deactivated.
Rushil alleged that the new FASTag had been issued through Airtel Payments Bank using the transporter driver’s mobile number and details.
He claimed the activation happened without any OTP verification, owner consent or authorisation from the registered vehicle owner.
The Mumbai resident further alleged that despite being the actual owner of the vehicle, he could not immediately deactivate the newly issued FASTag.
According to him, customer support informed him that only the person who activated the FASTag could request its closure.
“The actual vehicle owner has ZERO control over the FASTag but the person who fraudulently activated it does,” he wrote.
He also criticised the lack of emergency fraud-handling systems, claiming there was no quick mechanism through the NHAI helpline to block or reverse the activation.
After the post went viral, ICICI Bank responded publicly on X, stating that it was looking into the matter and requested the user to share contact details through direct message.
The bank also reminded users not to share sensitive information like OTPs, Aadhaar details or banking credentials online.
The incident has reignited concerns about digital verification systems and vehicle-owner protection within India’s FASTag network.
Authorities have recently tightened FASTag verification norms following complaints related to incorrect vehicle registration details and misuse of tags. The National Highways Authority of India (NHAI) has already introduced stricter vehicle validation procedures before FASTag activation.
However, the latest case has led many motorists to demand stronger safeguards, including mandatory OTP verification from registered vehicle owners before any FASTag changes or replacements are approved.
Users on social media have also called for faster grievance redressal systems and emergency blocking facilities to prevent misuse in similar cases.
