In an unprecedented move to enhance cybersecurity, India’s Department of Telecommunications (DoT) has implemented a groundbreaking regulation requiring popular messaging applications—including WhatsApp, Telegram, Signal, and SnapChat—to maintain continuous linkage with registered SIM cards. This mandate, described as a “first in the world regulatory measure,” aims to eliminate anonymous digital scams that have plagued Indian telecommunications networks.
The new framework requires these platforms to ensure their services remain permanently tethered to the specific SIM card used during registration. Should the SIM card be removed, deactivated, or relocated internationally, the associated applications will immediately cease functioning. Additionally, web versions of these applications must automatically log users out every six hours, requiring re-authentication via QR code scanning.
According to official statements, this measure directly addresses the growing phenomenon of ‘digital arrest’ frauds and government-impersonation schemes where criminals exploit the current system’s vulnerability. Presently, messaging applications only verify SIM cards during initial installation, allowing accounts to remain active even after SIM deactivation or removal—a loophole that has enabled widespread anonymous criminal activity.
Industry stakeholders including the Cellular Operators Association of India (COAI) have endorsed the mandate, emphasizing its potential to establish complete accountability and traceability for all digital communications. Telecom operators have committed to facilitating seamless implementation within the stipulated 90-day compliance window, with full reporting required within 120 days.
The COAI has further recommended collaboration with the Reserve Bank of India to reinforce financial transaction security, advocating that SMS OTP verification remain the primary authentication method due to its operator-verified security and guaranteed traceability features.