India Mandates SIM Linking for Messaging Apps to Fight Fraud

The Indian Department of Telecommunications has issued a directive requiring popular messaging and voice-over-IP applications, including WhatsApp, Telegram, Signal, Snapchat, ShareChat, JioChat, Arattai, and Josh, to link user access exclusively to active SIM cards present in their devices. The rule, announced under the Telecommunication Cybersecurity Amendment Rules, 2025, takes effect immediately with a 90-day implementation period, aiming to curb cyber fraud by closing a security loophole that allows these apps to function without the original SIM.

The measure addresses a vulnerability where app-based communication services, which use Indian mobile numbers for user identification, can remain operational even if the SIM is removed, deactivated, or used abroad. Officials from the Department of Telecommunications stated that this feature has been exploited for cross-border cybercrimes, such as phishing, investment scams, and digital arrests, often originating from outside India. By mandating continuous SIM-to-device binding, the rules ensure that services are tied to a verified, active mobile number, enhancing traceability and accountability. For web-based versions of these...