Government Rules Mandate Active SIM Linkage for WhatsApp, Telegram

In a major push to combat cyber fraud, the central government has introduced strict new rules for app-based communication services like WhatsApp, Telegram, and Signal, mandating that they remain continuously linked to a user’s active SIM card. The new directives, issued by the Department of Telecommunications (DoT), aim to safeguard the country's telecom ecosystem by eliminating a loophole exploited by fraudsters.

The order will apply to all "Telecommunication Identifier User Entities" (TIUEs), including popular platforms like WhatsApp, Telegram, Signal, Snapchat, and others.

No Service Without an Active SIM

The most significant change is the requirement for Continuous SIM Linkage. Currently, many messaging apps allow users to access their service even if the SIM card linked to the registered number is not present in the device, or is inactive. The DoT has noted that this feature is being misused from outside the country to commit sophisticated cyber-frauds.

Under the new mandate, these messaging services will only function if the specific, active SIM card associated with the registered number is physically installed in the user's device. This makes it impossible to use messaging apps with dormant or fraudulent accounts, and ties the identity directly to the operational telecom network.

Web Users Must Re-Login Every Six Hours

In addition to the SIM linkage, the DoT has also targeted the web versions of these applications. All app-based communication services offering a web portal (such as WhatsApp Web or Telegram Web) must implement an automatic logout feature that forces users to sign out at least once every six hours. Users will then be required to re-authenticate their session, typically by re-linking the device via a QR code. This measure is intended to prevent prolonged unauthorized access or misuse of a user’s account through a linked web session.

Compliance Deadline Set

The new directions came into force immediately, with the DoT instructing all affected companies to ensure full compliance with both the Continuous SIM Linkage and the six-hour web logout requirements within 90 days.

Companies have been asked to submit their compliance reports within 120 days. The DoT warned that any failure to adhere to these norms will result in strict action under the Telecommunications Act, 2023, and other applicable laws. The government asserts that these directions are a necessary step to secure digital communications and protect citizens from financial and cyber threats.