India's New SIM Card Rule: WhatsApp, Signal Must Link to Active Mobile Numbers
India's New SIM Rule: WhatsApp Must Link to Active Numbers

In a significant move that could transform how Indians use popular messaging applications, the Department of Telecommunications (DoT) has issued new directives requiring platforms like WhatsApp, Signal, and Telegram to maintain constant linkage with active SIM cards. The decision, announced on November 28, 2025, aims to address growing concerns about cyberfraud and telecommunications security.

What Do the New DoT Directions Mandate?

The telecommunications department has specifically instructed companies operating messaging applications including WhatsApp, Telegram, Signal, Arattai, Snapchat, Sharechat, Jiochat, and Josh to ensure their services remain connected to users' SIM cards and phone numbers at all times. This means users without an active SIM card in their device will no longer be able to access these messaging platforms, closing a significant loophole that authorities believe facilitates cybercrime.

Additionally, the DoT has mandated that web versions of these applications must automatically log users out every six hours. To regain access, users will need to re-authenticate their devices by scanning QR codes, creating an additional layer of security verification.

These regulations have been established under the Telecommunications (Telecom Cyber Security) Rules, 2024, which underwent amendments in October 2025. The directions take immediate effect, though companies have been given until February 28, 2026 to implement the necessary changes. They must also submit compliance reports to the DoT within 120 days from the issuance of the directions.

Why Has the Government Taken This Step?

The government's primary concern revolves around the current functionality that allows users to continue accessing messaging services even after removing their SIM cards. This feature, according to officials, enables both domestic and international actors to exploit these platforms for cyberfraud activities.

This feature is posing a challenge to telecom cybersecurity, the DoT stated in its official directions. The department emphasized that preventing such misuse is essential for safeguarding the integrity and security of India's telecom ecosystem.

Currently, first-time users must verify their phone numbers through calls or messages to activate messaging services. However, once verified, users can continue using these applications for messages and Wi-Fi calls indefinitely, even without the original SIM card installed in their device.

The DoT clarified that telecommunication identifiers - which include mobile numbers, SIM information, International Mobile Equipment Identity (IMEI) numbers, and IP addresses - require stronger protection measures to prevent unauthorized use.

Industry Reactions and Potential Impact

The Cellular Operators Association of India (COAI), representing major telecom service providers, had previously advocated for such measures. In August, the association stated that requiring over-the-top (OTT) communication apps to bind with verified mobile SIM cards would significantly reduce spam, fraud communications, and financial crimes.

COAI believes this will help mitigate financial frauds by acting as a deterrent against misuse of app-based communication platforms, said S.P. Kochhar, Director General of COAI, in an earlier statement.

However, technology companies face substantial compliance challenges. Industry executives note that platforms will need to update their authentication systems, user-validation mechanisms, and potentially their data-handling processes to align with DoT requirements. Concerns have been raised about the lack of prior consultation before introducing these new rules.

Whenever the government introduces major changes or new regulations, public consultation is essential, emphasized Dhruv Garg, partner at the Indian Governance and Policy Project. He added that automatically logging users out of desktop applications could negatively impact user experience, while mandatory SIM linkage might raise privacy concerns regarding user profiling and tracking.

Tech industry representatives, including the Broadband India Forum (BIF), have previously expressed concerns about expanding the Telecom Act's scope to include non-telecom entities and OTT platforms. They view this move as an attempt to bring messaging applications under telecom regulations through indirect means, despite previous assurances that these platforms would be governed by the Information Technology Act, 2000.

Satya N. Gupta, former principal advisor at the Telecom Regulatory Authority of India (Trai), noted that while tech companies might resist the added compliance burden, the new rules should ultimately enhance user protection and strengthen national security.

As India continues to lead global WhatsApp usage statistics according to eMarketer data, these regulatory changes could significantly impact how millions of Indians communicate digitally while attempting to create a more secure telecommunications environment.