WhatsApp, Telegram new rules: SIM binding to become mandatory from January 1, 2027; what users need to know

In what could be touted as a massive development, Indian users of instant messaging apps WhatsApp and Telegram may need to change how they use these apps from January 1, 2027, as the government set to make SIM binding mandatory for these services. The Department of Telecommunications (DoT) has issued guidelines requiring messaging platforms to keep user accounts continuously linked to the active SIM card associated with the mobile number used during registration. Companies have been asked to comply with the requirements by December 31, 2026.

Under the rules, messaging apps may stop working if the registered SIM card is removed, replaced or deactivated. Users may need to reinsert a valid SIM linked to their account to restore access.

The change could affect people who use WhatsApp or Telegram on a phone without the registered SIM card, including those who rely on Wi-Fi to access the apps. Users who frequently switch SIM cards or operate their accounts across multiple devices may also need to check how the requirements affect them.

Why has the government introduced SIM binding?

The government move aims to curb cyber fraud involving Indian mobile numbers. According to the DoT, some app-based communication services allowed users to continue accessing their accounts even when the SIM linked to the registered number was not present in the device.

The department said this gap could be misused by cybercriminals operating from outside India to carry out phishing, impersonation and digital arrest scams.

In November 2025, the DoT issued directions under the Telecom Cyber Security Rules, 2024, covering messaging platforms including WhatsApp, Telegram, Snapchat, Arattai, ShareChat, Josh, JioChat and Signal.

What about WhatsApp Web and other linked devices?

The government's directions also address web versions of messaging services. The original guidelines called for web sessions to be logged out periodically, no later than every six hours, with users able to reconnect by scanning a QR code.

However, subsequent reporting has indicated that the government revised the blanket logout requirement in favour of risk-based logouts. Users should therefore distinguish the continuous SIM-binding requirement from the separate rules governing web and desktop sessions.

Users should ensure that the SIM card linked to their messaging account remains active and available in the device on which they use the service. Those who use a secondary phone, access messaging apps primarily over Wi-Fi or travel frequently should check how their setup will be affected as platforms implement the requirements.

The rules are intended to strengthen the link between registered mobile numbers and messaging accounts, making it harder to misuse Indian numbers for cyber fraud. The exact user experience will depend on how individual platforms implement the requirements.