Can Chinese apps like BAT-BMS remotely disable Your EV? What vehicle owners should know

The BAT-BMS app, developed by Shenzhen Grenergy Technology, is designed as a battery management system (BMS) monitoring tool primarily for e-rickshaw owners. This application allows users to oversee the charging and discharging processes of lithium batteries, which are critical for powering these vehicles. However, a significant concern has arisen as instances of individuals remotely disabling e-rickshaws through unsecured Bluetooth connections have been reported. This poses a serious risk, potentially causing the vehicle to abruptly stop, endangering passengers and other road users. In theory, apps like BAT-BMS could have the ability to remotely deactivate or manipulate certain functionalities of electric vehicles (EVs) if they are integrated with the vehicle's BMS and cloud control systems. Many modern EVs feature capabilities that allow manufacturers to manage aspects such as battery charging and diagnostics from a distance. The extent of remote control, however, is contingent on the vehicle's design and the permissions granted to the app by the manufacturer. As of now, there is no indication that all vehicles equipped with BAT-BMS are capable of being disabled remotely. To mitigate risks associated with this technology, EV owners should prioritize using the official app provided by their vehicle or battery manufacturer, ensuring it is downloaded from reputable app stores. Regular updates to both the app and vehicle firmware are crucial for maintaining security. Additionally, employing a strong, unique password and enabling two-factor authentication can further protect users from unauthorized access. It is also advisable for EV owners to refrain from sharing their login credentials and to limit permissions granted to third-party applications. Monitoring account activity and connected devices for any signs of suspicious access should be a routine practice. If possible, drivers are encouraged to disable any remote access features that they do not actively use. Opting for vehicles and battery systems from manufacturers with robust cybersecurity measures is another effective strategy to reduce potential vulnerabilities. The BAT-BMS app provides various data points for users, including battery charge levels, voltage, current, temperature, cycle life, and the condition of individual battery cells. This information is vital for owners to assess the performance and health of their e-rickshaw's power system, enabling them to make informed decisions about maintenance and usage.