Why in news?
The Department of Telecommunications (DoT) has directed messaging platforms such as WhatsApp, Telegram, Signal and others to implement SIM binding technology within 90 days. The move aims to curb cyber fraud by ensuring that accounts remain tied to the original SIM card used during registration.
Background
The directive is rooted in the Telecommunication Cybersecurity (Amendment) Rules, 2025, which empower the DoT to require certain security measures from service providers. Cases of fraudsters gaining control of messaging accounts by swapping or cloning SIM cards have increased, allowing them to impersonate victims and deceive their contacts.
Under SIM binding, the app regularly checks whether the subscriber identity module (SIM) used to register the account is present in the device. If the SIM is absent or replaced, the service automatically logs out the user and blocks access until the correct SIM is reinserted.
Key provisions of the directive
- Continuous verification: Apps must verify the presence of the original SIM at regular intervals. If the SIM is missing, the user must be logged out and notifications must prompt re‑verification.
- Companion devices: For web or desktop versions, sessions must expire after six hours. Users must re‑authenticate with the original SIM to continue using the service.
- Deadlines: Service providers have been given 90 days to integrate SIM binding into their platforms. Those failing to comply could face penalties under telecom rules.
Concerns and challenges
- Impact on users abroad: Indians travelling overseas often switch to local SIM cards for connectivity. SIM binding could temporarily lock them out of their messaging accounts until they insert their Indian SIM.
- Multi‑device convenience: Many professionals use messaging services on laptops or tablets without the associated SIM. Logging out every six hours could disrupt workflows.
- Implementation complexity: End‑to‑end encryption and privacy features may complicate the integration of SIM binding. Platforms will need to ensure that security upgrades do not compromise user privacy.
Conclusion
The DoT’s SIM binding directive reflects growing concern about digital scams. While it may enhance security for many users, careful implementation and user awareness will be essential to avoid unintended inconveniences and ensure that privacy protections remain intact.
Source: ET
