SIM binding will become a requirement starting January 1, 2027, as confirmed by the Department of Telecommunications (DoT). This regulation mandates that messaging applications must verify that the mobile number associated with an account is linked to the SIM card installed in the device being used. For example, if a user accesses WhatsApp on their smartphone, the SIM linked to their WhatsApp account must be present in that phone.

The DoT issued a directive on November 28, 2025, detailing the specifications for SIM binding. This directive applies to messaging applications such as WhatsApp and Telegram that utilise Indian mobile numbers for user identification. Currently, users can log in to these applications using a one-time password (OTP) and continue to operate the app even if the SIM card is removed or switched to another device. However, this will change under the new rules.

For instance, if a user has been using WhatsApp on a tablet while the SIM for that account is in a smartphone, the app will cease to function once the regulations come into effect. It is important to note that banking and payment applications already employ SIM binding, preventing online transactions if the linked SIM is not installed in the device.

Implementation of SIM Binding

To enforce SIM binding, messaging applications will need to verify that the registered SIM card remains active and is present in the device being used. The original directive identified several messaging services, including WhatsApp, Telegram, Snapchat, Arattai, ShareChat, Josh, JioChat, and Signal, that must comply with these regulations.

Messaging applications are required to ensure that the SIM linked to a user’s account remains installed in the device. Although it is unlikely that accounts will be automatically disabled on the deadline, the enforcement will depend on how each application chooses to implement the directive. The platforms have until December 31, 2026, to ensure continuous linkage of accounts to the active, KYC-verified SIM associated with the registered mobile number.

WhatsApp has reportedly begun beta-testing SIM binding on Android devices, while Apple released an iOS update in September to help identify when an iPhone does not have a SIM card installed. The specific restrictions for each platform will vary based on their individual implementation of the new regulations.

Impact on Messaging Applications

As previously mentioned, users of WhatsApp and Telegram will need to keep their registered SIM cards in their devices to maintain access. The original rules also stipulated that web sessions, such as WhatsApp Web, would require users to log out at least once every six hours. Users would then need to re-link their devices via a QR code. However, the DoT later amended this requirement, replacing it with risk-based logouts, which may include immediate termination in cases of suspected fraud.

It is essential for users not to assume that WhatsApp Web will automatically log them out every six hours, as the updated regulations allow for more flexibility based on risk assessments. The changes are expected to affect users who primarily rely on WiFi connections without the registered SIM, including those using WiFi-only tablets.

Additionally, the rules may impact accounts accessed across multiple devices or those operated outside of India, particularly during travel. The lack of clarity regarding the treatment of eSIMs is also a concern, as the directives do not specify how these will be managed under the new regulations.

Rationale Behind the Regulation

The DoT has expressed concerns regarding the potential for cybercrime facilitated by the current system. Without SIM binding, messaging accounts can remain operational even after the associated SIM has been removed or deactivated. Prolonged web and desktop sessions may also allow accounts authenticated in India to be accessed remotely without fresh verification.

According to the DoT, this loophole has been exploited for various fraudulent activities, including phishing, impersonation, and investment scams. Cyber-fraud losses reportedly exceeded Rs 22,800 crore in 2024. The introduction of SIM and device binding aims to enhance the traceability of Indian numbers and mitigate the risk of account takeovers and misuse.

Furthermore, the DoT plans to establish a mobile number verification platform to identify legitimate phone numbers, reinforcing the security measures associated with these new regulations.

Long or Short, get news the way you like. No ads. No redirections. Download Newspin and Stay Alert, The CSR Journal Mobile app, for fast, crisp, clean updates!

App Store – https://apps.apple.com/in/app/newspin/id6746449540

Google Play Store – https://play.google.com/store/apps/details?id=com.inventifweb.newspin&pcampaignid=web_share