Top News

The DoT has directed all these services so that no user will be able to use these apps without an active SIM card. This order is part of the Telecommunication Cybersecurity Amendment Rules, 2025, which for the first time, bring app-based communication platforms under the same regulation as telecoms.

Messaging Apps

In a major cybersecurity move, the Indian government has implemented new rules for all popular messaging and social platforms, including WhatsApp, Telegram, Signal, Snapchat, ShareChat, JioChat, Arattai, and Josh. The Department of Telecommunications (DoT) has directed all these services that no user will be able to use these apps without an active SIM card. This order is part of the Telecommunication Cybersecurity Amendment Rules, 2025, which for the first time bring app-based communication platforms under the same regulation as telecoms.

According to an India Today report, the DoT has classified these apps as Telecommunication Identifier User Entities (TIUEs) and requires them to ensure that the user's SIM remains continuously linked to these services within 90 days. An even more significant change has been implemented for users logging in via web browsers. Companies will require users to log out of the web every six hours and re-authenticate via QR code. The government says this will make it difficult for criminals to remotely use any app, as an active and verified SIM will be required for each login.

Why was this decision taken?

According to the DoT, there is a major loophole in the current system. Currently, most communication apps verify the user's mobile number only at the time of installation. After this, the app continues to function uninterrupted even if the SIM is removed or deactivated. Additionally, criminals often continue to use these apps even after changing SIM cards while outside India, making it difficult to identify them based on call records, location logs, or telecom data.

Persistent SIM-binding maintains traceability between the user, number, and device, potentially reducing spam, fraud, and financial fraud on messaging platforms.

UPI and Banking Apps Already Implemented

Similar security measures are already implemented in UPI and banking apps. Banking and payment apps continuously check SIM cards to prevent unauthorized access. SEBI has even considered security measures like linking trading accounts to SIM cards and facial recognition. The biggest question now is how platforms like WhatsApp and Telegram will implement this change to maintain user experience and privacy. For millions of users, this could mean the loss of the ability to remain permanently logged in on the web, and access to apps could be disabled as soon as the SIM is deactivated.