Relevance: GS-3 (Cybersecurity, Digital Governance) | Source: The Hindu

The Department of Telecommunications (DoT) has directed messaging platforms — WhatsApp, Telegram, Signal — to ensure that their services work only when the registered SIM is physically present in the device. Apps must also auto-logout web sessions every six hours. The directive, effective from February 2026, expands DoT’s jurisdiction over internet-based messaging services.

What is SIM Binding & Why Needed?

SIM binding means an app can operate only if the SIM linked to that account is inserted in the phone.

• To stop cyber-fraudsters who use WhatsApp on devices without the registered SIM.
• Prevent misuse of Indian mobile numbers from outside the country.
• Improve traceability in cases of online scams and identity spoofing.
• Aligns with recent cybersecurity changes under the Telecommunication Identifier User Entities (TIUE) rules.

Implications of the Order

• Security gains: Helps curb SIM-swap frauds, impersonation, and misuse of Indian numbers.
• Operational challenges: May create friction for users with dual-SIM phones or those who frequently switch devices.
• Regulatory expansion: Shows DoT’s shift from regulating only telecom networks to influencing internet-based messaging ecosystems.
• Digital sector concerns: Tech firms warn it may affect fintech, mobility, social media, and e-commerce services relying on mobile-based identifiers.

MCQ

Q. With reference to the Government’s SIM-binding directive, consider the following:
1. SIM binding requires an app to function only when the device contains the SIM registered with that account.
2. The DoT has issued the instruction under its powers to regulate Telecommunication Identifier User Entities.
3. SIM binding prevents the use of messaging apps from web browsers.

Which of the above is/are correct?

(a) 1 only
(b) 1 and 2 only
(c) 2 and 3 only
(d) 1, 2 and 3

Answer: (b)