The Union government has issued new directives requiring messaging apps to enforce SIM card verification and automatically log out web-based sessions every six hours. This means that users will be barred from accessing their services if they do not have a physical SIM card originally used to register for the app present in their device. The directive by the Department of Telecommunications (DoT) will affect major platforms including WhatsApp, Telegram, Signal, Arattai, Snapchat, Sharechat and others, and are aimed at combating cyber fraud.According to the notice, these communication apps must ensure within 90 days that their services remain “continuously” linked to the SIM card used during registration. They must block access if the SIM is not present in the device – a technical requirement known as SIM binding. Additionally, web-based versions of these apps, such as WhatsApp Web, must log out users periodically, with sessions not exceeding six hours.“It has come to the notice of Central Government that some of the app based communication services that are utilizing mobile number for identification of its customers… allow users to consume their services without availability of the underlying SIM within the device… posing challenge to telecom cyber security as it is being misused from outside the country to commit cyber-frauds,” DoT stated in its notice.The government is invoking powers from the Telecommunication Cybersecurity Amendment Rules, 2025, notified in October, which introduced the concept of Telecommunication Identifier User Entity (TIUE) under telecom regulations.

What it means for multi-device users and travellers

WhatsApp has more than 500 million users in India, and the new regulations may hinder daily use. For example, some people use multiple devices, like phone and tablets, or two phones but link them to use one account on both the devices. They may experience disruptions due to the mandate of SIM binding.Further, people who use WhatsApp on their PCs to lessen their screen time on phone and restrict themselves to communication on messaging apps are likely to face disruption during work hours. “Presently, the binding process between a subscriber’s app-based communication services and their mobile SIM card occurs only once during the initial installation and verification phase, after which the application continues to function independently on the device even if the SIM card is later removed, replaced or deactivated,” COAI previously stated.