India’s Ministry of Electronics and Information Technology (MeitY) has launched an investigation into the BAT-BMS mobile application after a series of viral “Tirri Control” videos showed pranksters remotely switching off moving e-rickshaws using their smartphones. The videos, widely shared across Instagram, YouTube, and X, have raised serious concerns about road safety, cybersecurity, and the security of connected electric vehicles.
What Is the BAT-BMS App?
BAT-BMS is a Battery Management System (BMS) application developed by a Chinese company to monitor and manage compatible Bluetooth-enabled lithium-ion batteries. The app is designed for legitimate battery management functions, allowing owners to check battery health, voltage, temperature, charging status, and other performance metrics. It also provides controls for charging and discharging compatible battery packs.
What Is the ‘Tirri Control’ Trend?
The viral trend involves individuals connecting their smartphones to nearby Bluetooth-enabled e-rickshaw batteries using the BAT-BMS app. Once connected, they allegedly activate the battery’s “Discharge Switch,” instantly cutting power to the vehicle.
The result is that the e-rickshaw suddenly stops, often in the middle of busy roads, leaving drivers confused and passengers stranded. Videos of these incidents have attracted millions of views, but authorities warn that the prank could lead to serious traffic accidents and financial losses for drivers who depend on their vehicles for daily income.
Why Is MeitY Investigating?
The central government is examining whether the app poses a cybersecurity and public safety risk. Officials are investigating:
- Whether BAT-BMS is being misused to interfere with public transport.
- Security vulnerabilities in Bluetooth-enabled battery management systems.
- Whether similar applications should remain available on app stores.
- If stricter cybersecurity standards are required for EV battery manufacturers.
Reports indicate that authorities have also instructed app stores to remove apps linked to this misuse while the investigation continues.
The Real Problem: Weak Battery Security
Experts say the issue is not the app alone but insecure Battery Management Systems used by some low-cost lithium-ion battery manufacturers.
Many battery packs:
- Have Bluetooth enabled by default.
- Use weak or default passwords.
- Lack proper authentication or encryption.
- Allow nearby devices within approximately 10–15 metres to connect.
This means anyone within Bluetooth range may gain access to battery controls if the battery has not been properly secured.
Safety Concerns
If an e-rickshaw loses power while moving, it can:
- Increase the risk of road accidents.
- Endanger passengers, pedestrians, and other motorists.
- Disrupt traffic.
- Affect the livelihood of e-rickshaw drivers.
Cybersecurity experts have stressed that connected vehicle systems must include stronger authentication and secure firmware to prevent unauthorized access.
What Happens Next?
MeitY and the Delhi government are continuing their investigations into the app and the underlying battery security flaws. Authorities are expected to recommend stronger cybersecurity requirements for EV battery manufacturers and may introduce additional safeguards to prevent similar incidents in the future. Meanwhile, owners of Bluetooth-enabled battery systems are advised to change default passwords, update firmware where available, and disable Bluetooth when it is not required.
