Explained: Big news—rules for using WhatsApp and Telegram are set to change from January 1, 2027!

Under 'SIM binding,' any messaging account must remain linked to the specific, active SIM card that was used to verify the user's identity or register the account.

How many SIM cards do you have in your phone—perhaps one or two? And which one did you use to register for WhatsApp or other messaging apps? Well, from now on, you will need to keep using that same SIM card for as long as you wish to continue using the messaging app. This is because the Government of India is preparing to implement new 'SIM binding' rules.

The Department of Telecommunications has announced that messaging platforms like WhatsApp and Telegram must strictly comply with these new SIM-binding requirements by December 31, 2026. These new rules are expected to come into full effect starting January 1, 2027. Let’s take a detailed look at why the Indian government is introducing these rules and how they will impact everyday users.

What is SIM binding, and how will it work?

Under SIM binding, any messaging account must remain linked to the active SIM card that was used to verify the user's identity or register the account. If that specific SIM card is removed from the device or becomes inactive, the associated app should no longer function as usual on that device.

Messaging apps that use Indian mobile numbers for registration will be required to verify that the registered number is directly linked to an active SIM card or eSIM currently present in the device.

In simple terms, this means that if a user removes the SIM card—the one used to register the app—from their phone, they may no longer be able to access or use their account. This will also affect individuals who keep their SIM card in a secondary phone but use WhatsApp or Telegram on a different tablet or device. Furthermore, users with dual-SIM phones must ensure that the mobile number linked to their messaging accounts remains active at all times.

Why is the government implementing 'SIM binding'?

The Department of Telecommunications (DoT) in India is introducing these stringent regulations as part of its efforts to combat cybercrime, phishing, financial fraud, and serious scams such as 'digital arrests.'

It came to the department's attention that certain app-based communication services allowed users to continue accessing accounts registered with an Indian mobile number, even when the corresponding SIM card was not present in the device being used. According to officials, fraudsters—both within India and abroad—were exploiting this technical loophole to carry out cyber scams. By mandating that messaging accounts be linked to an active SIM card, it will become extremely difficult for criminals to misuse Indian mobile numbers.

Data shared by the Department of Telecommunications highlights the gravity of the situation. According to a DoT release from December 2025, the total financial loss resulting from cyber fraud in India during 2024 alone exceeded ₹22,800 crore. The government is taking this step to curb such digital breaches.

Can this regulation completely prevent cyber fraud?

If an account on a device cannot function without its registered and active SIM card, it becomes difficult for criminals to misuse the account once it has been decoupled from its original mobile connection.

However, this is not a singular or comprehensive solution to cybercrime. SIM binding merely strengthens the link between an account and its associated registered SIM card. This, in itself, does not guarantee that every message received is authentic, nor can it entirely prevent all forms of phishing, impersonation, social engineering scams, or other fraudulent transactions. The success of this policy will depend on how messaging platforms technically verify the presence of a SIM card, how they manage account access following a SIM change, and how they enforce these restrictions on the ground.

Which messaging apps will fall under its scope?

This new directive applies to all app-based communication services that use Indian mobile numbers to identify users or provide their services. WhatsApp and Telegram are the most prominent examples.

Under the 'Telecom Cyber ​​Security Rules, 2024' and the Department of Telecommunications (DoT) directives, several messaging apps—such as WhatsApp, Telegram, Arattai, ShareChat, Josh, JioChat, and Signal—may fall within the scope of these regulations. However, reports suggest that Snapchat is unlikely to be covered by this mandate, while the status of Signal remains unclear, as the platform has not provided a definitive response to the government's communication.

What will be the impact on ordinary users?

This does not mean that, starting January 1, 2027, WhatsApp will stop working on certain iPhone or Android models. Apps will continue to function normally on smartphones, provided that the SIM card is active within the device.

What about WhatsApp Web and multi-device users?

An initial draft of the guidelines included a provision for mandatory periodic logouts (every six hours) for web sessions, requiring users to reconnect by scanning a QR code. However, the Department of Telecommunications (DoT) later removed this six-hour interval requirement, opting instead for a more practical and flexible 'risk-based' approach.

Who will be most affected?

Those who use messaging apps solely via Wi-Fi—without a registered SIM card—will be the most impacted by these new rules. Users who removed their SIM cards after initially registering for services like WhatsApp or Telegram, and have since been accessing their accounts exclusively through Wi-Fi, will face the most significant changes to how they use these platforms, starting in 2027.