India Mandates Messaging Apps to Function Only with Active SIM Cards for User Access

The Indian government has directed that messaging apps such as WhatsApp must be linked to an active SIM card. Compliance reports are required within 120 days, affecting user access to these services.

The Indian government has mandated that app-based communication services like WhatsApp, Signal, and Telegram must remain linked to a user's active SIM card. Providers of these services in India are required to submit compliance reports to the Department of Telecommunications (DoT) within 120 days of the directive's issuance. Non-compliance will result in action under the Telecommunications Act, 2023, and other relevant laws.

On November 28, the telecom department highlighted that some apps allow users to access services without an active SIM card in their device. This feature poses a cyber security risk as it can be exploited for cyber-frauds from outside the country. The DoT stressed the need for these directions to prevent misuse of telecommunication identifiers and protect the telecom ecosystem's integrity and security.

Impact on Messaging Services

The new directive affects how users access messaging apps such as WhatsApp, Telegram, Signal, Arattai, Snapchat, Sharechat, Jiochat, and Josh in India. These services will only function if the SIM card is present and active in the user's device. This change aims to enhance security by ensuring that app usage is tied to a verified mobile number.

The DoT has instructed Telecommunication Identifier User Entities (TIUEs) providing app-based communication services using mobile numbers for customer identification or service delivery to comply with these rules. Within 90 days of the directive's issuance, these services must ensure continuous linkage to the associated SIM card.

Web Version Restrictions

For web versions of these apps, users must be automatically logged out at least once every six hours. They can re-link their device using a QR code for continued access. This measure is intended to further secure user accounts by requiring periodic re-authentication.

The directions are effective immediately and will remain so until amended or withdrawn by the DoT. This move underscores the government's commitment to strengthening cyber security measures within India's telecommunications sector.

By enforcing these regulations, the government aims to curb cyber-fraud activities and ensure that app-based communication services operate securely within India. The focus remains on safeguarding user data and maintaining a robust telecom infrastructure.

With inputs from PTI