By February 2026, India’s telecom authority is set to implement a SIM binding policy for messaging apps like WhatsApp, compelling users to verify their registered SIM cards continuously. This initiative is designed to thwart cyber fraud by ensuring that apps do not operate on deactivated SIMs. Additionally, web versions will automatically log users out after six hours.

The Department of Telecommunications has given messaging platforms like WhatsApp, Telegram, Signal, and Snapchat 90 days to enforce “SIM binding”—a requirement that will stop these apps from working if users remove the SIM card originally used for registration. The directive, effective from February 2026, also mandates that web versions of these apps log out users every six hours, requiring fresh authentication via QR code.Officials say the measure targets cyber fraudsters who exploit the current system where apps continue functioning even after SIM cards are removed, replaced, or deactivated. The government argues that criminals operating from outside India are using this loophole to commit cyber fraud and impersonation scams.

What SIM binding means and how it will work

SIM binding requires apps to continuously verify that the registered SIM card remains active and inserted in the device. Currently, messaging apps only verify a user’s mobile number once during initial setup. After that single verification, the application works independently—even if the SIM is removed or replaced.Under the new Telecommunication Cybersecurity Amendment Rules 2025, these platforms have been classified as Telecommunication Identifier User Entities (TIUEs). This classification represents a major expansion of the DoT’s jurisdiction, extending regulatory oversight beyond traditional telecom operators to any service using mobile numbers for user identification.The Cellular Operators Association of India, representing private telecom companies, has supported the need for SIM binding, arguing that the current one-time verification creates opportunities for misuse.

Challenges for travelers and multi-device users

While the directive seeks to curb fraudlent users, it could create significant friction for legitimate users. People traveling abroad who use local SIM cards will no longer be able to continue using services like WhatsApp without additional registration. Those who rely on tablets or use messaging apps across multiple devices may face constant disruptions.The requirement to log out from web versions every six hours could disrupt workflows, especially in professional settings where employees use WhatsApp on computers without their phones nearby.For WhatsApp alone, which has over 500 million users in India, implementing this change would require significant re-engineering of the service to comply with regulations unique to India.

Meta and other firms question the proposal

Industry sources have called the instructions “problematic,” noting that no feasibility study or consultation was conducted before these directions were issued. Critics question whether SIM binding will effectively curb fraud, since many scammers already use SIM cards procured through forged or stolen identity documents.The Internet and Mobile Association of India, representing Meta and other digital firms, has characterized the amended rules as representing a “clear overreach” with broad implications for digital businesses across fintech, e-commerce, mobility, and social media.Messaging platforms now have until early 2026 to comply with the new requirements or face potential regulatory action.