The DoT has ordered WhatsApp and Telegram to implement "SIM binding," requiring an active SIM card in the device to use the app, aiming to curb digital arrest scams.
Brajesh Mishra
The Department of Telecommunications (DoT) has issued a directive ordering OTT communication apps like [WhatsApp], [Telegram], and [Signal] to implement mandatory "SIM binding" within 90 days. The new rule, aimed at curbing the rampant "digital arrest" scams, requires these apps to function only if the SIM card linked to the account is physically present and active in the device. This move targets fraudsters who use virtual numbers on Wi-Fi-only phones to impersonate officials while evading telecom location tracking.
The directive follows a staggering Rs 1,935 crore loss by Indian citizens to cyber scams in 2024 alone. Scammers often use discarded or virtual numbers to create WhatsApp accounts, then discard the SIM while continuing to use the app over Wi-Fi, making them untraceable to law enforcement. The new mandate, rooted in the Telecom Cyber Security Rules notified in October, seeks to close this loophole by treating messaging apps more like banking apps—tying access strictly to the hardware identity of the SIM card.
While the headlines focus on "safety," the deeper story is the "Privacy Clash with Apple." The DoT's demand for apps to "continuously check" for a SIM card hits a technical wall: Apple's iOS. The iPhone's privacy architecture ("sandbox") specifically prevents third-party apps like WhatsApp from reading SIM status in the background to stop user tracking. For WhatsApp to comply, Apple would have to rewrite its operating system for India—a precedent it has fought globally. This sets the stage for a massive showdown: will the Indian government force Apple to break its own privacy model, or will the mandate fail on 10 million Indian iPhones?
For the average user, the convenience of "multi-device" features is at risk. The proposed rule to limit Web sessions to 6 hours means you may need to re-scan your QR code four times a day, killing seamless desktop usage. For the "Jamtara" scammers, it forces a return to traditional calls, which are easier to track. But for the tech ecosystem, it signals the end of the "software-only" identity era; in India, your digital identity is now legally welded to your physical SIM card.
If your WhatsApp account is now hard-wired to your physical SIM card, does losing your phone mean losing your digital identity entirely?
What is SIM binding in WhatsApp? SIM binding is a security feature where the app is cryptographically linked to the physical SIM card in the device. If the SIM is removed or inactive, the app will stop functioning, preventing the use of the account on devices without the registered number.
Will WhatsApp Web stop working after the new rules? No, WhatsApp Web will continue to work, but the convenience may be reduced. The DoT has proposed a session limit of 6 hours, meaning users might have to re-authenticate (scan the QR code) multiple times a day to ensure the primary device is present.
Why is the government mandating SIM binding? The primary goal is to stop "digital arrest" and other cyber scams where fraudsters use accounts linked to discarded or virtual numbers on Wi-Fi devices, making them difficult for law enforcement to trace via telecom towers.
When will the new WhatsApp rules come into effect? The Department of Telecommunications has given platforms a compliance window of 90 days, meaning the changes are expected to be implemented by late February 2026.
News Coverage
Research & Analysis
Sign up for the Daily newsletter to get your biggest stories, handpicked for you each day.
Trending Now! in last 24hrs