India's Department of Telecommunications (DoT) mandated SIM binding for messaging platforms like WhatsApp, Telegram, Signal, Snapchat, and others on November 29, 2025.
Platforms must enforce continuous SIM linkage within 90 days, blocking access if the SIM is absent, under the Telecommunication Cybersecurity Amendment Rules, 2025.
Web versions, such as WhatsApp Web, require logout every six hours, with compliance reports due in four months.​
About SIM binding
SIM binding links a user's mobile device and app account to the specific SIM card used for registration, ensuring continuous verification of the SIM's presence for access.
This security measure prevents unauthorized use by requiring the original SIM to remain in the device.
It acts as hardware-based authentication, reducing risks from SIM swaps or removals.​
Purpose and Benefits
The directive targets cyber frauds, spam, and scamsoriginating outside India, where apps currently function post-initial verification even without the SIM.
Telecom groups like COAI support it for better traceability via Telecommunication Identifier User Entity (TIUE) rules.
Benefits include passwordless authentication, real-time fraud detection, and cross-platform security without extra hardware.​
Implications for Users
Users traveling abroad, using multiple devices, or relying on eSIMs/Wi-Fi-only access may face disruptions, as apps stop working without the physical SIM.
Those using web apps for reduced phone time during work will need frequent re-authentication via QR scans.
While aimed at security, critics note limited scam prevention if fraudsters use forged IDs.​