SIM-binding rules could change how WhatsApp and Telegram users access their accounts in India from January 1, 2027. The Department of Telecommunications (DoT) has set December 31, 2026, as the compliance deadline. The measures aim to curb cybercrime and prevent the misuse of Indian mobile numbers.
The new requirements could affect people who use messaging apps across multiple devices. However, the impact will depend on how each platform implements the rules.
What are India’s SIM-binding rules?
India’s SIM-binding rules require covered messaging platforms to maintain a link between accounts and their registered mobile numbers. The DoT introduced these measures under its telecom cybersecurity framework in November 2025.
The government wants to prevent criminals from operating messaging accounts without access to the associated SIM card. Fraudsters can otherwise exploit messaging services to impersonate officials, distribute phishing links and target victims with scams.
How could SIM-binding rules affect WhatsApp and Telegram?
SIM-binding rules could affect users who access messaging accounts on devices without their registered SIM cards. People who keep their registered SIM in their primary smartphone may notice little change.
For example, someone might register WhatsApp with an Indian mobile number and then use the account on another device. If that device lacks the registered SIM, the new requirements could affect access.
People who rely on Wi-Fi-only devices should pay attention to further announcements. The same applies to users who travel internationally or regularly switch between phones.
The exact impact will depend on how WhatsApp and Telegram implement the requirements. Users should wait for official instructions before changing their current setups.
Will WhatsApp Web log users out every six hours?
The original DoT directions included a requirement for web sessions to log out at least every six hours. Users would then need to reconnect by scanning a QR code.
However, subsequent reporting indicated that the government replaced this blanket requirement with a risk-based approach. Users should not assume that every web session will face automatic six-hour logouts under the revised framework.
The web-session policy differs from the separate SIM-binding requirements. Users should follow official announcements for the latest implementation details
