The Central Government on Thursday made it clear that the February 28 deadline for implementation of new SIM-binding regulations will not be extended, mandating compliance by messaging platforms operating in India from March 1.
Under the revised framework, widely used messaging applications such as WhatsApp, Telegram, Signal, Snapchat, ShareChat, JioChat, Arattai and Josh will function only when the registered mobile SIM card is physically present in the user’s handset.
The measure forms part of the government’s broader effort to strengthen cyber security architecture and curb digital fraud.
What SIM binding means
SIM binding is a security mechanism that links a messaging application directly to a user’s physical SIM card. Once activated, the application will operate only if the registered SIM remains inserted in the same device.
According to the government, this will prevent unauthorised access by hackers or cyber fraudsters attempting to operate accounts remotely using cloned numbers or secondary devices.
Six-hour logout rule
The policy also introduces a six-hour logout provision. Messaging accounts logged in on secondary devices such as desktops or laptops will automatically be logged out within six hours if the registered SIM card is not detected in the primary smartphone.
Also read: Social media driving 77% retail discovery: Report
Beyond this window, access will require the SIM to be reinserted and verified.
Union Communications Minister Jyotiraditya Scindia said there is no proposal under consideration to extend the deadline.
He stressed that the rules are aimed at protecting national security and preventing cybercrime, adding that the government would not dilute security-related safeguards.
Companies have been directed to submit compliance reports within 120 days. Non-adherence may attract action under the Telecommunications Act, 2023, the Telecom Cyber Security Rules, and other applicable laws.
The Internet and Mobile Association of India has flagged concerns over the six-hour logout rule, cautioning that it may disrupt professionals who rely on multi-device access and create complications for shared-device users.
On a related note, Scindia said Starlink has yet to complete mandatory demonstrations before Indian security agencies. The company must show its ability to shut down connectivity beyond Indian borders and enable government control over its network before receiving operational clearance.
The new regime will come into force from March 1, marking a significant tightening of digital communication norms in the country.