No WhatsApp without active SIM: New Government Rules Bring 6-Hour Auto Logout & Mandatory SIM Binding

No WhatsApp without active SIM will soon become a mandatory requirement in India as the government introduces new cyber security rules aimed at preventing rising cases of online fraud, identity misuse and impersonation. Under the updated Telecom Cybersecurity (Amendment) Rules, 2025, the Department of Telecommunications (DoT) has directed WhatsApp and other messaging services to ensure continuous SIM verification for every registered account.

According to the notification issued on November 28, 2025, WhatsApp users will no longer be able to operate their account without the original active SIM card inserted in the device. The rules also introduce a major change for the web version of WhatsApp, requiring automatic logout every six hours, after which users will need to re-authenticate using a QR-based login.

What the new rules mean

The DoT has classified WhatsApp, Telegram, Signal, Snapchat and other similar platforms as Telecommunication Identifier User Entities (TIUEs), placing them under a stricter compliance framework similar to mobile operators. The regulation aims to prevent cybercriminals from using inactive or foreign SIM cards to commit phishing attacks and financial fraud.

The directive mandates:

• Continuous linking of the app to the active SIM card installed in the device.
• Auto-logout from WhatsApp Web every six hours.
• Re-verification through QR code on every reconnection.
• Mandatory compliance within 90 days and submission of reports within 120 days.

All messaging platforms must follow these rules immediately, or face action under the Telecommunications Act 2023 and related cyber laws.

Why the rule was introduced

Officials say the move was necessary due to an increasing number of cybercrime incidents originating from outside India. Fraudsters frequently exploit inactive or disconnected SIMs to bypass security and execute financial scams.

The DoT stated that misuse of SIM-independent messaging was posing a threat to telecom cyber safety and required urgent corrective action to protect digital communication networks and user identity integrity.

The Cellular Operators Association of India (COAI) also supported the regulation, stating that the binding process between communication apps and SIM cards must remain active to prevent loopholes used for illegal activities.

Impact on users in India

For more than 500 million WhatsApp users in India, the policy may create some operational challenges, especially for those who:

• Use Wi-Fi-only tablets without SIM cards,
• Switch devices frequently,
• Prefer using WhatsApp Web for long durations.

Users will now need to keep the primary SIM card active and physically present in the phone for WhatsApp to continue functioning.

Also read: How To Do E-KYC In Ladki Bahin Yojana: Complete Online And Offline Process Explained

Cybersecurity experts say the rule could improve traceability and accountability, although some caution that SIM binding alone cannot eliminate fraud, as fake IDs can still be used to purchase SIM cards.

What happens next?

WhatsApp and other messaging platforms have 90 days to implement the changes. Once live, users may experience more frequent logins and interruptions if their registered SIM is removed or deactivated.

For now, messaging apps will need to redesign their architecture to comply with India’s strictest security overhaul in recent years—an update that could redefine how millions of Indians use digital communication services.

The new SIM-binding rules mark a major shift in India’s digital security approach. While they promise stronger protection against cybercrime, they may also change the everyday experience of using messaging apps like WhatsApp. More updates are expected in the coming weeks as compliance deadlines approach.