India’s Department of Telecommunications has enforced stricter cybersecurity norms for messaging platforms, making it mandatory for services like WhatsApp, Telegram, Signal, Arattai and Josh to function only when the registered SIM card is present and active.
The directive, issued on November 28 under the Telecom Cyber Security (TCS) Rules, 2024, comes into force on March 1. Firms were given 90 days to comply and must submit compliance reports within 120 days.
If you enjoyed reading this article, you can help support our journalism by adding OHeraldo as a preferred source.
If the registered SIM is removed, swapped or deactivated, the apps must suspend operations until re-authentication. Web and desktop versions will also auto-logout every six hours.
The government says the measure aims to enhance identity verification and prevent rising cyber fraud cases. Communications Minister Jyotiraditya Scindia reiterated that the deadline will not be extended, underlining its importance for digital safety.
