Centre Enforces New SIM-Binding Rules, Apps Like WhatsApp Web and Telegram to Auto-Logout Every Six Hours

New Delhi, November 30, 2025— The Union government has introduced strict SIM-binding rules that will significantly change how users access messaging platforms such as WhatsApp Web, Telegram, Signal, Arattai and Snapchat. Under the new mandate, these apps must stay linked to a physical SIM card inserted in the device, preventing them from functioning if the SIM is removed or inactive. The move is being seen as one of the most assertive cybersecurity actions taken by the Centre in recent years.

The Department of Telecommunications (DoT) said the tightened measures are designed to counter rising cyber fraud, particularly scams originating outside India by exploiting gaps in app-based communication systems. Officials noted that fraudsters often use these platforms on devices without a SIM card, creating major telecom security vulnerabilities. Growing concerns over such misuse led to months of consultations between the government and major service providers.

To enforce the rules, the DoT has directed all Telecom Identifier Using Entities (TIUEs) — platforms that verify users through mobile numbers — to comply fully with the new norms and submit detailed reports within 120 days. Non-compliance may attract action under the Telecommunications Act, 2023, the Telecom Cyber Security Rules, 2024, and other relevant laws.

One of the most impactful changes concerns web-based access. Ninety days from the issuance of the directive, messaging platforms will be required to automatically log out users from their web sessions every six hours. After each auto-logout, users must re-verify their identity by scanning a QR code with their phone.

The directive, issued on November 28, 2025, has already come into force. The DoT clarified that the rules apply to platforms including WhatsApp, Telegram, Signal, Arattai, Snapchat, ShareChat, JioChat and Josh, all of which rely on telecom identifiers for user authentication.

The government said the new measures are part of a broader effort to strengthen India’s digital security landscape, protect telecom identifiers from misuse and ensure safer communication networks amid rising online threats.