India’s Department of Telecommunications has introduced strict new cybersecurity rules that will significantly change how messaging apps like WhatsApp, Signal and Telegram operate in the country. The biggest shift WhatsApp Web sessions will now be automatically logged out every six hours impacting millions who use the service on their desktops for work.
What’s Changing for WhatsApp and Other Messaging Apps
Under the new directive all messaging platforms that rely on mobile numbers must bind their services directly to the SIM card used during registration. Within 90 days users will be unable to access these apps unless the original SIM remains inserted in the device.
This change forces platforms to verify not just a user’s phone number but also the IMSI which is the International Mobile Subscriber Identity stored on the SIM.
How Will This Impact WhatsApp Web
The most disruptive change is the requirement for WhatsApp Web to log out users every six hours.
Because the service must consistently verify that the SIM is active inside the registered phone long lasting web sessions are no longer allowed. This means users who keep WhatsApp Web open throughout the workday will now have to reconnect multiple times daily.
The Department of Telecommunications says the rule will help reduce cyber fraud but it removes one of WhatsApp’s biggest conveniences which is seamless multi device usage.
Why Is the Government Enforcing SIM Binding
These rules come from the Telecommunication Cybersecurity Amendment Rules 2025 which introduce a new category called the Telecommunication Identifier User Entity.
The goal is to ensure platforms can trace activity to a physical SIM subscriber preventing fraudsters often operating remotely without the SIM from exploiting messaging apps.
Officials say stricter SIM verification will help combat scams spoofing and impersonation attempts.
Impact on Current OTP Based Verification
Currently messaging apps authenticate users using OTPs. Under the new regulation platforms must also verify the IMSI from the user’s SIM card.
For global services like WhatsApp this requires building India specific technical infrastructure a significant challenge given the platform’s very large user base in the country.
Who Has Received the Department of Telecommunications Directive
The compliance order has been issued to
- WhatsApp
- Telegram
- Signal
- Arattai
- Snapchat
- ShareChat
- Other messaging platforms
Each company must submit a compliance report within four months.
Also Read: Apple May Partner with Intel for M Series Chips in MacBooks and iPads
Why Is the Tech Industry Concerned
Tech companies argue that mandatory SIM checks will
- Undermine user privacy
- Break multi device support
- Complicate use during travel especially for non resident Indians and international visitors
- Create a compliance system that no other country currently enforces
Telecom operators however support the move saying it strengthens accountability.
When Do the Rules Take Effect
Messaging platforms have 90 days to implement SIM binding.
The six hour auto logout rule for WhatsApp Web and similar companion apps will begin as soon as platforms roll out compliance updates.