WhatsApp SIM binding in India, explained

WhatsApp SIM binding, ordered by India's Department of Telecommunications (DoT) on 28 November 2025, requires WhatsApp to work only while your number's SIM is active in the phone. As of early October 2026 it isn't enforced: the compliance deadline is 31 December 2026, and WhatsApp Web logouts are to be risk-based, not every six hours.

This explainer separates what the government has put in writing from what has only been reported, then sets out what the rule would mean for your phone, for WhatsApp Web and linked devices, and for businesses that run numbers on them. Details can still change, so each fact below carries its date and its source.

What did the DoT order?

The directions were issued under the Telecommunications (Telecom Cyber Security) Rules, 2024, as amended on 22 October 2025. The amendment created a category called the telecommunication identifier user entity: anyone other than a licensed telecom provider that uses telecom identifiers, such as phone numbers, to identify its users. On 28 November 2025 DoT sent directions to messaging apps including WhatsApp, Telegram, Signal, Snapchat, Arattai, ShareChat, JioChat and Josh. According to the text published by MediaNama and the government's press release of 1 December 2025, each app had to:

• Stay continuously linked to the SIM card of the registered number installed in the device, "making it impossible to use the app without that specific, active SIM".
• Log out the web version of the app periodically, no later than every six hours, and let users link it again with a QR code.
• Do both within 90 days, and report compliance within 120 days.

The stated reason is fraud. The press release says accounts keep working after the SIM is removed, deactivated or taken abroad, which lets scammers run "digital arrest" and impersonation frauds from outside India on Indian numbers, and that a web session authenticated once in India can then be operated from abroad. It put India's cyber-fraud losses in 2024 at over ₹22,800 crore, and said the rule does not affect people roaming with their SIM in the phone.

What has changed since?

The 90-day deadline passed at the end of February 2026 without any of the apps switching SIM binding on, MediaNama reported. The timeline since:

The Parliament answer is the latest word in writing. Replying to an unstarred question in the Rajya Sabha on 2 April 2026, Minister of State for Communications Pemmasani Chandra Sekhar said the timeframe for linking the apps to the SIM is 31 December 2026, and that web sessions "are required to be logged out on the basis of risk-based analysis. No specific time period has been stipulated for such logging out." In other words, the six-hour logout was replaced by risk-based logouts with no fixed period. As of 5 October 2026 we found no report of any further change.

What is confirmed, and what is only reported

• Confirmed in government documents: the directions and their two requirements, the apps named, the 31 December 2026 deadline, and risk-based web logouts with no fixed period.
• Confirmed by Meta, to MediaNama: WhatsApp is testing SIM binding with Indian users.
• Reported, not confirmed: that Android will comply before iOS, which faces technical limits Apple is working on (an unnamed DoT source speaking to the Hindustan Times), and how WhatsApp's check will work (WABetaInfo, from beta code).
• Not yet known: what risk-based means in practice, whether the Windows and Mac apps and companion phones count as web sessions, and how often a phone will be asked to prove its SIM.

What SIM binding means on your phone

The directive is short: the app must not work without the specific, active SIM of the number it is registered to, in the same device. For most people nothing changes, because WhatsApp already runs on the phone that holds its SIM. It bites where the two are apart:

• WhatsApp on a phone or tablet with no SIM, or a different SIM, running on Wi-Fi.
• A number whose SIM sits in a second, basic phone while WhatsApp runs on a smartphone.
• Indians abroad who keep an Indian number on WhatsApp but use a local SIM. Roaming with the Indian SIM in the phone is not affected, the government says.
• A second WhatsApp account whose SIM isn't in the phone. On the directive's wording, each number's SIM would need to be in the device; see multiple WhatsApp accounts.

How WhatsApp will check is not public. WABetaInfo, which reads WhatsApp's beta code, reported in February 2026, from a check still under development, that WhatsApp would confirm in the background that the registered SIM is still present and active, and would periodically ask Indian (+91) users to verify again with a six-digit code, possibly without accepting a passkey instead. An account that failed would have restricted access until it passed, without losing chats. Treat that as a description of work in progress.

Experts have questioned whether true SIM binding is technically possible. Telecom specialist Parag Kar told MediaNama that iOS doesn't expose SIM identifiers to apps and modern Android restricts them, so an app can bind to a device or send one-time codes, but can't continuously verify a SIM without help from Apple and Google.

What it means for WhatsApp Web and linked devices

The original directive targeted "the web service instance" of each app: log it out within six hours and let the user link it again by QR code. The press release added that the six-hour logout applied to the web version, not the app. The April 2026 answer in Parliament replaced the fixed six hours with logouts "on the basis of risk-based analysis", with no time set.

What that means for the Windows and Mac apps, tablets and companion phones hasn't been spelt out; WABetaInfo noted in December 2025 that it wasn't clear whether linked phones would be covered. Until WhatsApp says how it will comply, assume linked devices on Indian numbers may be logged out more often than today, with the existing rules on top: the phone must open WhatsApp every 14 days, and a linked device unused for 30 days is disconnected. If web sessions in India start ending on a schedule, why WhatsApp Web keeps logging out helps rule out the other causes first.

What it means for businesses running numbers on linked devices

Businesses feel it twice. Each number's SIM has to live in the phone that runs WhatsApp for it, so SIMs swapped between handsets, or numbers kept on phones without their SIMs, stop working. And every computer, colleague's phone or tool linked to that number may need linking again more often, which on a busy number means someone who can reach the phone and scan a code.

Tools that link a number the way WhatsApp Web does are in the same position. WavesFlo links each number by QR code from Linked devices; if a session ends, you are told, the number leaves rotation, and you reconnect it from the dashboard, while developers can listen for the account.disconnected and account.qr_required webhook events. Connecting a number with Linked devices shows the scan.

What to do now

1. 1Keep each WhatsApp number's SIM in the phone that runs WhatsApp for it, and keep that SIM active and recharged.
2. 2Register WhatsApp only on numbers whose SIMs you hold. A number whose SIM you can't put in a phone is the first that would fail.
3. 3If you run two accounts in one app, keep both numbers' SIMs in that phone. A dual-SIM or eSIM phone makes that possible.
4. 4When travelling, keep your Indian SIM in the phone and roam on it.
5. 5For a business, write down which phone holds which number and who can reach it, so a re-link or a new SIM check doesn't wait on one person.
6. 6Keep WhatsApp updated on every phone, and turn on two-step verification.
7. 7Check again before 31 December 2026. The deadline, the logout rules and WhatsApp's own method may all still change.