Starting March 1, WhatsApp, Telegram and other platforms that use mobile numbers for login will have to follow a new SIM-binding rule issued by the Department of Telecommunications (DoT). The order was originally issued on November 28 and companies were given 90 days to comply. The new rule requires messaging apps to ensure that services work only when the registered SIM card is present in the user’s primary device. The move is part of the government’s broader effort to reduce online fraud and misuse of mobile numbers. Non-compliance could attract action under telecom and cybersecurity laws.
What is SIM-binding
At present, most messaging apps verify users through a one-time password (OTP) sent to their mobile number during registration. Once verified, the app can continue to function even if the SIM is removed, changed or deactivated. Web versions, however, do not require the SIM to remain active in the device as the platform can be accessed through QR codes or OTP verification on web.Under the new SIM-binding rules, the app must remain linked to the SIM card used for the user to continue using the platform. If the registered SIM is removed from the primary device, the app will stop working. This means users will not be able to access their accounts without the active SIM inserted in their phone.
SIM-binding rules to come into effect on March 1: What changes for WhatsApp and other app users
Once efffective, messaging platforms must ensure that their services are always connected to the active SIM linked to the account under the new rules. In addition, web-based services such as WhatsApp Web must automatically log out at least every six hours. Users will need to re-authenticate periodically.However, the six-hour auto-logout rule applies only to web sessions and not to the main mobile app where the SIM is installed. The government has clarified that users who are travelling or roaming will not be affected as long as the SIM remains active in the device.
Why the SIM-binding rule has been introduced
According to DoT, cybercriminals have been misusing messaging apps by operating accounts without the original SIM present. Fraudsters have reportedly used such loopholes to carry out phishing, impersonation and other scams, sometimes from outside India.The new rule aims to ensure that every active account is linked to a verified SIM issued through Know Your Customer (KYC) norms. Officials say this will improve traceability and reduce misuse of telecom identifiers.
Industry response and concerns
Some messaging companies are testing updates to comply with the new rule. Reports suggest that WhatsApp beta versions already include prompts asking users to confirm that their registered SIM is present in the device.At the same time, a group representing major messaging platforms has challenged the rule in court, arguing that it may go beyond the government’s authority. The government, however, has maintained that SIM-binding is necessary for cybersecurity and fraud prevention.As the rule takes effect from March 1, users of WhatsApp, Telegram, Signal and other similar apps may begin noticing changes in how their accounts function, especially on web and desktop versions.
