- By Alex David
- Mon, 01 Dec 2025 12:12 AM (IST)
- Source:JND
India’s Department of Telecommunications (DoT) has issued a sweeping new directive that will change how millions use their favourite messaging apps. Soon, platforms like WhatsApp, Telegram, Signal, Snapchat, ShareChat, JioChat, Arattai and Josh will not work unless the user has an active SIM card inside the device they’re using.
Here’s the thing: the government says criminals sitting outside India have been misusing these apps because they allow logins even when the actual SIM isn’t present in the device. So this is being plugged immediately, and platforms now have 120 days to comply.
What exactly is changing?
Under the amended Telecommunication Cyber Security (TCS) Rules 2025, these apps are now legally treated as Telecommunication Identifier User Entities (TIUEs). And that means stricter responsibilities.
The biggest shift is simple —
If the SIM tied to your account isn't inside the device, the app must stop working.
The DoT says allowing app access without a SIM poses a major cyber-security risk, especially for OTP-based fraud and impersonation scams.
ALSO READ: Every Smart Way To Order Fresh Meals On Your Train Journey: Train Food Just Got Safer
Web logins will now auto-expire every six hours
Another rule:
If you log into WhatsApp Web, Telegram Web or any similar service, it will automatically log out after six hours. Every new session will require QR re-authentication.
This is meant to block long-duration remote access that scammers often exploit.
Why these rules were introduced
Government officials say the misuse of telecom identifiers (mobile numbers, IMEIs, SIM-linked access) has become a big challenge. With OTT apps now integrating deeply with banking, e-commerce, payments and governance, the risk is far bigger than just chatting.
Recommended For You
The amendments aim to tighten:
- Traceability
- Device identification
- Fraud prevention
- Cross-platform security
New security frameworks coming into force
The TCS Amendment Rules, 2025 introduce several big changes:
1. Mobile Number Validation (MNV) Platform
A system that lets companies check whether a mobile number actually belongs to the user claiming it.
This is aimed at stopping mule accounts and identity fraud.
2. Resale Device Scrubbing
If you sell refurbished or second-hand phones, you must check every IMEI against a central blacklist to prevent stolen or cloned devices from circulating.
3. Mandatory Data-Sharing Protocols
TIUEs — which now include banks, e-commerce apps, delivery apps, messaging apps and more — must share telecom-identifier data with the government in specific cases to fight fraud.
When will these rules take effect?
All messaging apps must file a compliance report within 120 days of the notice issued on November 28.
Failing to comply could bring action under:
- The Telecommunications Act, 2023
- The Telecom Cyber Security Rules
- Other relevant cyber laws
ALSO READ: Perplexity.in Redirects To Google Gemini: It All Comes Down To A Missed Domain
What this means for everyday users
Here’s the bottom line:
- You must have the SIM associated with your account in your phone to use these apps.
- Web/desktop logins will no longer remain active all day — they’ll auto-expire.
- Expect stricter device checks, identity verification and fraud-prevention layers soon.
It’s one of the biggest regulatory overhauls for communication apps in India, and affects virtually every smartphone user in the country.




