The DoT has mandated continuous SIM-binding for all major OTT communication apps, including WhatsApp and Telegram, to bolster user traceability and prevent digital fraud. Accounts must remain linked to an active SIM, and web-based sessions will require periodic log-outs and re-authentication. The move strengthens regulatory oversight and aims to curb cybercrime.
The Department of Telecommunications (DoT) has issued a sweeping directive requiring all major over-the-top (OTT) communication apps to bind user accounts continuously to an active SIM card on a specific device. The regulation comes under the amended telecom cyber-security rules, aiming to address rising concerns of fraud and untraceable digital crime.
Key highlights
-
Sim-Binding Made Mandatory: OTT platforms such as WhatsApp, Telegram, Signal, and others including regional apps have been told to ensure that the registered mobile number remains linked with an actual SIM card in the user’s device at all times — no more SIM-less access.
-
Digital Traceability & Security: The shift aims to curb frauds by ensuring traceability — if a SIM is removed, apps must stop working, thus blocking misuse from detached or cloned devices. This step adds a layer of accountability between user, number and device.
-
Periodic Relogin for Web Access: For users accessing these services via web apps or browsers, the platforms will now enforce periodic logouts (at most every six hours), with re-linking permitted only via secure QR-code authentication.
-
Broader Regulatory Integration: This directive follows earlier pushes by the Cellular Operators Association of India (COAI) calling for persistent SIM-binding to bring OTT platforms under the same compliance and interception guidelines as traditional telecom providers.
-
Impact on Fraud Prevention: By linking accounts to active physical SIMs, authorities hope to reduce scams that rely on anonymity — including spam, phishing and identity-based fraud — and give law-enforcement better tools to trace wrongdoing.
What it means for users & platforms
Users will no longer be able to operate communication apps without a valid SIM in the device — logging in on a different phone or after removing a SIM will trigger re-authentication. For platforms, this means investing in compliance infrastructure and building mechanisms to enforce periodic re-validation. The directive signals a shift toward stricter regulatory oversight of OTT services, blurring the lines between telecom operators and internet-based apps in terms of accountability.
Sources: Economic Times, MediaNama