To strengthen cyber security in the country, the government has imposed the strictest rules on messaging apps so far. The Department of Telecommunications has made it clear that now any app, be it WhatsApp, Telegram or any other messaging service, will not be able to run in the phone without SIM. Meaning, the number on which your app is registered, the same SIM should be present in the phone at all times, otherwise the app will automatically stop.
Why was this rule necessary?
DoT found in the investigation that most of the messaging apps verify the mobile number once installed, but after that the app continues to run normally even if the SIM is removed, changed or closed. This laxity had become a big opportunity for cyber criminals sitting abroad. They were using apps registered on Indian numbers, even though the SIM of that number was not even present in the phone in India. According to the government, this is a serious threat to digital security, because messaging apps have today become a major medium for sensitive information, OTP, banking alerts, business communication and official conversations.
Now banking-like strictness on messaging apps too
This is the first time that the government has brought messaging apps under the stringent rules, which till now were applicable only to telecom services, banking and UPI apps. Just like banking apps cannot be logged in if the SIM is not active, similarly now WhatsApp and Telegram will also have to do SIM-binding.
understand in easy language
Now it will be mandatory to have the same SIM in the phone with the number with which the app is registered. If the SIM is removed or turned off, the app will stop immediately. If SIM-less access is done from wrong location/foreign country, the account will be blocked directly. With this step, the government has ensured that the authenticity of the identity under which the app runs remains authenticated at all times. WhatsApp Web-Telegram Web will also be closely monitored. In the new order, a major change has also been made regarding the web version. Now all web-based logins—like WhatsApp Web—will auto-logout every 6 hours. The user will have to login again with the QR code, so that misuse of abandoned browser sessions can be prevented.
90 days time limit for companies
DoT has ordered all app service providers to implement SIM-binding within 90 days. After this, within 120 days the companies will have to report to the government that they have fully implemented the guidelines.
The government believes that digital communication has now become as sensitive as banking. Therefore, it is now necessary to link the identity i.e. mobile number and account with each other at all times.