The government has told WhatsApp, Telegram and similar messenger companies that they must keep their apps constantly linked to the SIM card in a user’s phone.

For web versions of the app like WhatsApp Web, the government has asked apps to log-out people every six hours and provide a QR code to users to log back in. Companies have 90 days to make this change.

What is SIM-binding and how does it work?

SIM binding is a security procedure where the user account or digital entity is linked with a SIM card. This link ensures that the specific SIM with which it is paired is within the mobile device before the app can be used. This prevents the app from being accessed even when opened from other phones.

Why has the government done this?

According to the government, messaging and calling apps that allow accounts to work even after the removal/ deactivation of the SIM leave room for anonymous scams, remote “digital arrest” frauds and government impersonation calls.

In case of the six hour time limit, frequent log-ins force criminals to repeatedly take control of the device/SIM making it easier for legal authorities to detect suspicious activity.

However, experts have mixed responses on the effectiveness of the two measures. Some say these measures are a necessary evil, some say this will damage user experience but offer few benefits in terms of cybersecurity.

What will be the effect on individuals, businesses and other platforms?

Travellers and NRIs who rely on Wi-Fi to use Indian numbers abroad, professionals who depend on uninterrupted web-client access during an 8–10 hour workday, families and multi-SIM users and elderly or low-literacy users who struggle with repeated log-ins will be disproportionately affected.

Businesses that depend on WhatsApp as a mode of communication – there are many such businesses, big and small – will lose their seamless mode of interaction.

For the apps, this means going back to the drawing board in terms of how the app works and fitting in this new security measure retrospectively. Think of it like finishing a puzzle and then being asked to add an extra piece that did not exist before.

Is there a better trade-off between managing fraud and user convenience?

Some experts have suggested strong SIM-KYC enforcement and coordinated effort across telecom operators, financial intermediaries, and law-enforcement agencies as alternative measures.

Is the SIM-binding directive, the same as the Sanchar Saathi directive?

No, these are two different directives to two different groups of technology companies. Both are security measures but they impact users and companies in different ways.

The government has asked messaging apps to ensure SIM-binding and phone manufacturers to install the Sanchar Saathi app when making the smartphone.

The SIM-binding measure will apply to all devices that have apps like WhatsApp on them. The Sanchar Saathi directive is meant only for smartphones, it will not be pre-loaded into your tablet, smartwatch, desktop computer, etc.

Published on December 3, 2025