How new SIM binding rule could log users out of WhatsApp Web, Pg16

Key Highlights:

• The DoT directive mandates online messaging platforms like WhatsApp, Signal, and Telegram to link services to registered SIM cards.
• Users will lose access to these apps without their registered SIM, impacting services like WhatsApp Web.
• WhatsApp Web and similar services will face automatic logouts every six hours due to the new rule.
• The government aims to combat digital fraud, while industry stakeholders raise concerns about user privacy and international travel.
• The directive stems from the Telecommunication Cybersecurity Amendment Rules, 2025, introducing the concept of TIUE.
• Platforms must ensure continuous linkage to the SIM card within 90 days and submit compliance reports to the DoT in four months.

Detailed Insights:

• The DoT aims to tackle cyber fraud by ensuring that messaging services are tied to the user's SIM card, preventing access without it.
• The new rules require platforms to access the IMSI of SIM cards, a unique identifier, to verify user identity, moving beyond the current OTP system.
• Telecom companies support the move, while tech companies worry about eroding user privacy, especially for international travelers using foreign SIM cards.
• The directive may create friction for users who rely on companion web services like WhatsApp Web for professional use, due to frequent logouts.
• Concerns exist regarding the effectiveness of the directive, as fraudsters often use illegally obtained SIM cards, undermining the security measure.
• The TIUE framework expands telecom regulations to include entities using telecommunication identifiers like mobile numbers to identify users.
• Implementing this directive requires significant re-engineering for global platforms like WhatsApp, as the SIM linkage level differs from other countries' regulations.

Key Concepts Involved:

• SIM Binding: Linking a user's access to an online service with their registered SIM card.
• TIUE (Telecommunication Identifier User Entity): An entity using telecom identifiers to identify its users.
• IMSI (International Mobile Subscriber Identity): A unique number stored on the SIM card identifying mobile subscribers globally.