New Delhi: Starting March 1, messaging platforms such as WhatsApp, Telegram and other apps that rely on mobile number-based login must comply with a new SIM-binding rule issued by India’s Department of Telecommunications (DoT). The directive, originally issued on November 28, gave companies 90 days to implement the required changes.

The new telecom regulation mandates that messaging apps function only when the registered SIM card is physically present in the user’s primary device. The move is part of the Centre’s wider crackdown on online fraud, phishing and misuse of telecom identifiers. Non-compliance could attract action under applicable telecom and cybersecurity laws.

What is the SIM-binding rule?

Currently, most messaging apps verify users through a one-time password (OTP) sent to their registered mobile number during account creation. Once verification is complete, the app typically continues to function even if the SIM card is removed, replaced or deactivated.

Web-based versions, such as WhatsApp Web, do not require the SIM to remain active in the device after initial verification. Users can access their accounts via QR code scanning or OTP authentication.

Under the new SIM-binding regulation, however, messaging platforms must ensure that the account remains directly linked to the active SIM used for registration. If the registered SIM is removed from the primary device, the app will cease to function.

In practical terms, users will not be able to access their accounts without the active SIM inserted in their phone.

Changes for WhatsApp Web and desktop users

In addition to SIM verification on mobile devices, the new rules require messaging platforms to introduce periodic re-authentication for web-based sessions.

Web versions such as WhatsApp Web must automatically log out at least once every six hours. Users will need to log in again to continue using the service. The six-hour auto-logout requirement applies only to web and desktop sessions, not to the main mobile application where the SIM is installed.

The government has clarified that users travelling domestically or internationally will not face disruptions, provided their SIM card remains active in the device.

Also Read| OpenAI strikes Pentagon deal as Trump blacklists Anthropic over AI military use

Why did the government introduce SIM-binding

According to the Department of Telecommunications, cybercriminals have exploited gaps in existing verification systems by operating messaging accounts without the original SIM card present. Authorities say such loopholes have enabled phishing scams, impersonation fraud and other cybercrimes, in some cases operated from outside India.

The SIM-binding rule is intended to ensure that every active messaging account remains linked to a verified SIM issued under Know Your Customer (KYC) norms. Officials argue that this will enhance traceability, strengthen digital security and curb misuse of mobile numbers.

Industry response and legal challenge

Several messaging companies are reportedly testing software updates to align with the new compliance requirements. Reports indicate that beta versions of some apps, including WhatsApp, have begun prompting users to confirm that their registered SIM is present in the device.

However, an industry body representing major messaging platforms has challenged the SIM-binding directive in court, arguing that it may exceed regulatory authority. The government has defended the measure as necessary for cybersecurity and fraud prevention.

As the SIM-binding rule comes into effect on March 1, users of WhatsApp, Telegram, Signal and similar messaging apps in India may notice changes, particularly in how web and desktop versions operate. The regulation marks a significant shift in India’s digital security framework, with a sharper focus on telecom-based authentication and online fraud control.