
Starting March 1st, messaging apps in India will work a little differently. Under updated telecom cybersecurity rules, platforms such as WhatsApp, Telegram, Signal, Snapchat, ShareChat, JioChat, Arattai and Josh will function only when the registered SIM is active in the user’s phone. The SIM-binding move, led by the Department of Telecommunications (DoT), is aimed at curbing fraud and strengthening digital security.
The directive was issued by the DoT last year, giving companies 90 days to comply. That window closed on February 28th, with enforcement beginning the next day. Platforms have also been asked to submit compliance reports within 120 days.
To avoid disruptions, users should keep the SIM or eSIM linked to their messaging accounts active in their primary phone, as removing or deactivating it will stop the apps from working until re-verified. Web access will require more frequent logins, so keeping the phone nearby for quick QR authentication will help. Those who travel often, switch devices, or juggle multiple eSIM profiles may need to plan ahead to ensure their registered number remains active on their main device.
The idea is to keep your messaging account tied to the SIM used to register it. If that SIM is removed, swapped, or deactivated, the apps must stop working on that device until the correct SIM is reinserted and verified. The rules apply to both physical SIM cards and eSIM profiles. If your messaging account is linked to an eSIM, it will continue to work as long as that profile remains active on the device. Removing the eSIM, switching profiles, or moving the number to another phone without re-verification could trigger a logout.
For users using WhatsApp Web versions, access will also become more controlled. Services like WhatsApp Web and Telegram Web will automatically log out every six hours, requiring users to sign in again by scanning a QR code from their phone. For people who use a single phone with one SIM, the change may feel minor. But those who switch devices, rely on tablets, or use web access for work may notice the extra steps.
The government says the SIM-binding requirement is designed to reduce cybercrime, particularly SIM-swap scams and impersonation attacks. By ensuring messaging accounts remain tied to an active SIM, authorities hope to make it difficult for fraudsters to hijack accounts linked to financial services.
Communications Minister Jyotiraditya Scindia has said the deadline will not be extended, emphasising that the measure is essential for improving user safety and trust in digital services. Meanwhile, messaging platforms and industry groups have flagged potential inconvenience, especially for people who travel frequently, use multiple devices, or depend on web-based messaging for business.
For most people, the change will mean keeping their primary SIM or eSIM active in their main phone and getting used to more frequent web logins. Those planning to switch numbers, devices, or eSIM profiles may need to allow time for re-authentication. In practical terms, it’s a small trade-off if a few extra steps in daily use can translate into stronger protection against account takeovers and fraud.