New Delhi: The Centre is changing the way WhatsApp, Signal, and Telegram work. A latest directive from the Department of Telecommunications will soon require users to access these applications only with their registered SIM card. It will also affect the companion services like WhatsApp Web, which will now log the users out automatically every six hours. Messaging applications must continuously verify that the SIM used to register the account is active in the user’s device. If the users remove the SIM, replace it, or deactivate it, the application will stop working. Web versions like WhatsApp Web will log out automatically every six hours, and users will have to re-authenticate through QR code.
These changes must be implemented within 90 days, with the compliance report submitted to the DoT in four months. The directive applies to the messaging application, which includes:
- Signal
- Telegram
- Arattai
- Snapchat
- JioChat
- Josh
For India’s 500+ million WhatsApp users, this could make the application slightly less convenient. People who switch devices often, use Wi-Fi only tablets, or rely on multiple device logins will be most affected. The government stated that the move is aimed at reducing digital fraud. It has come to the notice of the Central Government that some of the application-based communication services that are utilising mobile numbers for the identification of their customers enable the users to consume their service without the availability of the underlying SIM within the device, posing a challenge to telecom cybersecurity, as it is being misused from outside the country to commit cyber frauds.
Currently, the application only verifies users’ numbers using an OTP The latest rules will require the application to check the IMSI stored on the user’s SIM card. IMSI is a unique number that identifies each mobile subscriber globally. The Cellular Operators Association of India, the binding process between subscribers’ application-based communication service and their SIM card occurs only once during installation, after which the application continues to function independently. This creates opportunities for misuse; persistent SIM verification will close this loophole.
SIM binding is a process where the messaging application verifies that the registered SIM card remains active in the user’s device. If the SIM is removed, replaced or deactivated, the application will stop functioning. The most significant change for web users is that WhatsApp Web will log out automatically every six hours. Users will need to re-scan the QR code to continue using the service.
