Chinese App BAT-BMS Lets Strangers Switch Off E-Rickshaws via Bluetooth, Netizens Raise Security Concerns
A series of viral videos claiming that people can stop moving e-rickshaws using nothing more than a smartphone has sparked fresh concerns about the security of electric vehicles in India. The clips, widely shared on X, suggest that a mobile application called BAT-BMS can connect to nearby battery-powered three-wheelers and switch them off while they are moving on the road.
The videos have left many social media users worried, but the reality is far more nuanced than the claims circulating online.
The app provides important battery information, including charge level, voltage, current, temperature, battery cycle life, and the health of individual battery cells. It also allows users to manage charging and discharging functions on compatible battery systems.
According to explanations shared by Grok with several X users, some low-cost lithium battery packs used in Indian e-rickshaws are equipped with Bluetooth-enabled Battery Management System (BMS) units that have weak or no password protection. If these batteries are left unsecured, anyone within Bluetooth range, typically around 10 to 15 metres, may be able to connect to the battery and disable its discharge function.
Since the discharge function supplies power to the vehicle's motor, turning it off can immediately bring the e-rickshaw to a halt.
In several clips shared online, e-rickshaw drivers suddenly lose power while driving in traffic. This leaves the vehicles stranded on the road and creates a potential safety risk for both the drivers and other commuters.
The videos have fuelled widespread concern, but experts say they should not be interpreted as proof that every electric vehicle can be controlled in this way.
There is no evidence that the BAT-BMS app can connect to every electric vehicle. The application only works with batteries equipped with a compatible Bluetooth-enabled Battery Management System.
Many e-rickshaws in India still use traditional lead-acid batteries, which do not support Bluetooth connectivity. Even among lithium-powered vehicles, many manufacturers rely on proprietary battery management systems that work only with their own dedicated applications instead of BAT-BMS.
In such cases, the BAT-BMS app cannot communicate with the battery at all.
For a connection to be established, the battery must support Bluetooth Low Energy (BLE), actively broadcast its presence, and be compatible with the BAT-BMS platform. Without these requirements, the app cannot access or control the battery.
This means the viral claims suggesting that anyone can instantly switch off any nearby e-rickshaw using a smartphone are misleading. Only vehicles fitted with compatible Bluetooth-enabled battery systems that lack proper security are potentially vulnerable.
The concern is not about advanced hacking techniques but about weak security settings on certain battery management systems. According to Grok's explanation, several inexpensive Bluetooth-enabled BMS units are shipped with weak authentication or no password protection at all.
As a result, someone within Bluetooth range may be able to pair with the battery and access controls that should ideally remain restricted to the owner.
The BAT-BMS app itself was created to help battery owners monitor and manage their batteries. However, if the underlying hardware does not include proper authentication, the app can potentially be misused by unauthorised users who are nearby.
Cybersecurity experts have long recommended that connected battery systems should include stronger pairing methods, encryption, and user authentication to prevent unauthorised access. As electric vehicles become increasingly connected, securing battery communication will become even more important.
The original BAT-BMS application, meanwhile, is still available on Google's Play Store, allowing compatible battery owners to monitor and manage their systems.
The videos have left many social media users worried, but the reality is far more nuanced than the claims circulating online.
What Is the BAT-BMS App?
The BAT-BMS app is a legitimate application developed by Chinese company Shenzhen Grenergy Technology. It is a Battery Management System (BMS) monitoring app designed to help users monitor Bluetooth-enabled lithium batteries.The app provides important battery information, including charge level, voltage, current, temperature, battery cycle life, and the health of individual battery cells. It also allows users to manage charging and discharging functions on compatible battery systems.
Why Has the BAT-BMS App Become Controversial?
The growing concern is not about the BAT-BMS app itself but about how it is reportedly being misused.According to explanations shared by Grok with several X users, some low-cost lithium battery packs used in Indian e-rickshaws are equipped with Bluetooth-enabled Battery Management System (BMS) units that have weak or no password protection. If these batteries are left unsecured, anyone within Bluetooth range, typically around 10 to 15 metres, may be able to connect to the battery and disable its discharge function.
Since the discharge function supplies power to the vehicle's motor, turning it off can immediately bring the e-rickshaw to a halt.
What Do the Viral Videos Show?
This weakness is exactly what many of the viral prank videos appear to demonstrate.In several clips shared online, e-rickshaw drivers suddenly lose power while driving in traffic. This leaves the vehicles stranded on the road and creates a potential safety risk for both the drivers and other commuters.
The videos have fuelled widespread concern, but experts say they should not be interpreted as proof that every electric vehicle can be controlled in this way.
Can BAT-BMS Connect to Every Electric Vehicle?
The simple answer is no.There is no evidence that the BAT-BMS app can connect to every electric vehicle. The application only works with batteries equipped with a compatible Bluetooth-enabled Battery Management System.
Many e-rickshaws in India still use traditional lead-acid batteries, which do not support Bluetooth connectivity. Even among lithium-powered vehicles, many manufacturers rely on proprietary battery management systems that work only with their own dedicated applications instead of BAT-BMS.
In such cases, the BAT-BMS app cannot communicate with the battery at all.
Why the Viral Claims Are Misleading
The BAT-BMS app also does not automatically detect or take control of every nearby electric vehicle.For a connection to be established, the battery must support Bluetooth Low Energy (BLE), actively broadcast its presence, and be compatible with the BAT-BMS platform. Without these requirements, the app cannot access or control the battery.
This means the viral claims suggesting that anyone can instantly switch off any nearby e-rickshaw using a smartphone are misleading. Only vehicles fitted with compatible Bluetooth-enabled battery systems that lack proper security are potentially vulnerable.
Cybersecurity Concerns for India's Electric Mobility Sector
Although the viral claims have been exaggerated, the incident has highlighted an important cybersecurity issue for India's rapidly growing electric mobility industry.The concern is not about advanced hacking techniques but about weak security settings on certain battery management systems. According to Grok's explanation, several inexpensive Bluetooth-enabled BMS units are shipped with weak authentication or no password protection at all.
You may also like
- Starting August, Cisco is rolling out AI agents to all its 90,000 employees; as company says: We feel like that's the most ...
- Warning issued to anyone with a power bank as important new rules announced
- Meet China's new AI humanoid robot built for homes with natural conversations and human-like expressions
- Quote of the day by Mark Cuban: "I love to compete. To me, business is the ultimate sport. It's always on. There is always someone trying to beat me" - lessons on staying competitive, why Cuban treats every deal like a match, from the billionaire behind Shark Tank
- Govt notifies new EPF Scheme with revised partial withdrawal norms
As a result, someone within Bluetooth range may be able to pair with the battery and access controls that should ideally remain restricted to the owner.
The Real Issue Lies in Weak Security
The misuse shown in the viral videos appears to exploit this lack of authentication rather than any sophisticated software vulnerability.The BAT-BMS app itself was created to help battery owners monitor and manage their batteries. However, if the underlying hardware does not include proper authentication, the app can potentially be misused by unauthorised users who are nearby.
Cybersecurity experts have long recommended that connected battery systems should include stronger pairing methods, encryption, and user authentication to prevent unauthorised access. As electric vehicles become increasingly connected, securing battery communication will become even more important.
Advice for Bluetooth-Enabled E-Rickshaw Owners
Drivers using Bluetooth-enabled lithium battery systems are advised to enable strong passwords whenever their battery management system supports the feature. They should also avoid leaving Bluetooth connections open or unrestricted, as this can reduce the risk of unauthorised access.BAT-BMS App Availability
Meanwhile, India Today Tech has reported that the BAT-BMS app is no longer available on Apple's App Store. However, similar battery management applications continue to exist for Apple users.The original BAT-BMS application, meanwhile, is still available on Google's Play Store, allowing compatible battery owners to monitor and manage their systems.
More from our partners
Loving Newspoint? Download the app now
