Outlook Business Desk
The government has rolled out a new rule requiring messaging apps to operate only when the SIM used during signup remains active on the device. Authorities say this step strengthens telecom security and helps stop fraud carried out from outside India.
According to the Department of Telecommunications (DoT), several communication apps still operate even when the registered SIM card is not present in the device. Officials say this gap is increasingly being exploited from abroad to commit cyber fraud using Indian mobile identifiers.
The department stated that when messaging apps function without the SIM they are tied to, it opens serious gaps in the telecom network. This ability, officials added, has repeatedly complicated cyber security investigations into fraud cases involving Indian mobile numbers.
The new directive requires apps including WhatsApp, Telegram, Signal, Arattai, Snapchat, ShareChat, and JioChat to constantly verify that the SIM used during registration is still active on the device. If the SIM is not detected, the app must instantly stop working.
The order applies to web versions as well, requiring these platforms to sign users out automatically at fixed intervals, not exceeding six hours. This ensures regular re-authentication and reduces the risk of accounts being misused remotely or without permission.
The government explained that the new requirement is necessary to stop offenders abroad from misusing Indian mobile numbers. Keeping the registered SIM physically active on the device, it said, will reduce cyber fraud and protect the reliability of telecom identifiers.
Officials said they had been in discussions with leading service providers for several months. As misuse patterns became more evident, authorities concluded that issuing formal directions was essential to close security gaps and reinforce identity verification systems used by communication apps.
The notification also cautions that any failure to follow the new SIM binding rules may trigger action under the Telecommunications Act 2023, the Telecom Cyber Security Rules and other relevant laws, emphasising the seriousness of complying with these security directives.