Compulsory SIM binding for accessing the app.
Now, the central government has introduced new regulations for communication apps like WhatsApp, Telegram, Signal, and Arattai. The Department of Telecommunications (DoT) now requires the apps to work only if the device has an active SIM card. The instructions have been issued under the Telecommunication Cybersecurity Amendment Rules, 2025, which the companies must implement within 90 days.
How the New Regulation Works
According to the revised guidelines, communication applications are considered TIUEs. A user has to register their account with the SIM card inserted in the device, and the same SIM has to remain in the phone if the app is going to work. If the SIM is removed or a user changes devices, the app will automatically log out.
When it is used through a web browser, the platform has to automatically log out after six hours, and further use of the service requires the scanning of a QR code to log in. This rule ensures that the SIM and communication app remain linked continuously so that misuse is prevented.
Why the Government Introduced These Requirements
Presently, the installed apps check the SIM only at the time of installation. The services would keep operational even after a SIM is removed or deactivated. This is the gap that was utilized by cybercriminals operating from other countries. Cybersecurity experts said mandatory SIM binding will help reduce fraud and unauthorized access.
Impact on Users and Application Providers
Users who depend on apps like WhatsApp with deactivated SIM cards will henceforth lose access when these rules become operational. The providers of such apps, including WhatsApp and Telegram, are required to change their systems to implement these changes. A similar norm is already in place for UPI payment apps, which operate only when the registered SIM is present in the device.
