New Delhi, Nov 30: The Indian government has issued a new directive that will change how millions use messaging apps like WhatsApp, Telegram, Signal, Snapchat, ShareChat, JioChat, Arattai and Josh.
The Department of Telecommunications has asked these apps to ensure that users cannot access their services unless they have an active SIM card in their device. This guideline is part of the Telecommunication Cybersecurity Amendment Rules, 2025, which bring messaging apps under regulations similar to telecom services for the first time.
Under the new rules, these platforms, termed Telecommunication Identifier User Entities, must ensure that a user’s SIM card stays linked to the app for at least 90 days.
For people who use these apps on web browsers, additional checks will be introduced. Users will be automatically logged out every six hours and will need to sign in again using a QR code.
Officials say this measure will stop criminals from using these apps remotely, as every login session will now be tied to a working and verified SIM card.
The rule aims to fix a major gap. Currently, most apps verify a phone number only once during installation. After that, the app continues to work even if the SIM is removed or becomes inactive. This loophole has been used by cybercriminals, including those operating from outside the country.
According to industry groups, this makes it difficult for authorities to trace fraud using call records or telecom data. The Cellular Operators Association of India has said that binding apps to an active SIM will keep a secure link between the user, the number and the device, reducing spam, scam calls and online fraud.
Similar security checks already exist in banking and UPI apps. Even the market regulator SEBI has proposed linking SIM cards to trading accounts and using facial recognition for added safety.
Experts are divided on the new rules. Some cybersecurity analysts believe scammers could still misuse forged or borrowed IDs to get SIM cards. Others argue that mobile numbers remain India’s strongest digital identifier and that the new rules could improve security and accountability.
