New Delhi, Nov 29 (NationPress) The Indian government has enacted a significant regulation that may revolutionize the usage of popular messaging platforms including WhatsApp, Telegram, Signal, Snapchat, ShareChat, JioChat, Arattai, and Josh.

As per reports, the Department of Telecommunications (DoT) has instructed these services to ensure that users can only access them if they possess an active SIM card in their device.

This initiative falls under the new Telecommunication Cybersecurity Amendment Rules, 2025, marking the first time that app-based communication services are subjected to telecom-like regulations.

According to the new guidelines, these applications -- officially designated as Telecommunication Identifier User Entities (TIUEs) -- are required to maintain a continuous link between the user’s SIM card and the app for a period of 90 days.

For individuals accessing these apps via web browsers, an additional security measure has been introduced.

Now, apps are obligated to log users out automatically every six hours, requiring them to log in again using a QR code.

The DoT believes this system will complicate efforts for criminals to misuse these services remotely, as every session must be connected to a verified and active SIM, according to reports.

Officials assert that the regulation aims to close a critical loophole in how communication apps authenticate users. Currently, most applications only verify a mobile number once, at the time of installation.

Subsequently, the app continues to function even if the SIM is removed or becomes inactive. Reports indicate that the Cellular Operators Association of India (COAI) has pointed out that this practice permits apps to operate independently of SIM cards, creating avenues for misuse.

Cybercriminals, including those operating internationally, are known to exploit this vulnerability.

Even after altering or deactivating their SIM cards, they can continue using these applications, making it exceptionally challenging for authorities to trace fraudulent activities through call logs, location data, or telecom records.

The COAI has stated that enforcing SIM binding would establish a dependable connection between the user, the mobile number, and the device, potentially aiding in the reduction of spam, scam calls, and financial fraud.

Similar security protocols are already implemented in various sectors. Banking and UPI applications mandate stringent SIM verification to prevent unauthorized access, while the SEBI has proposed linking SIM cards to trading accounts and utilizing facial recognition for enhanced security.

Experts, however, hold differing views on the matter. Some cybersecurity specialists informed MediaNama that this measure may have limited effectiveness since scammers can still utilize forged or borrowed identification to obtain new SIM cards.

Conversely, telecom industry representatives contend that mobile numbers represent India’s strongest digital identity and believe the new regulations could enhance cybersecurity and accountability.