Imagine you are abroad, your Indian SIM is switched off to avoid roaming charges, and your messaging app suddenly stops working. Now imagine a small shop owner whose entire customer service runs on one WhatsApp number across three devices.
That is the everyday reality behind a policy debate. A new report from the Esya Centre examines how the Department of Telecommunications’ SIM binding directive could affect consumers and small businesses, while also weighing its goal of reducing cyberfraud. Here are the findings in plain language.
SIM Report : Overview
| Detail | Info |
|---|---|
| Report title | Rethinking India’s SIM Binding Directive: An Empirical Assessment |
| Published by | Esya Centre, a New Delhi-based technology policy think tank |
| Date | October 14, 2026 |
| Consumer sample | 2,033 consumers across 18 Indian cities |
| Business sample | 353 businesses across 17 cities |
| Survey period | February to April 2026 |
| Focus | Messaging use, anticipated difficulties and views on security benefits |
Background: What Is the Directive?
In November 2025, the Department of Telecommunications directed internet messaging apps to keep users’ accounts linked to their registered SIM cards. It initially required automatic logout from web sessions every six hours, a rule later replaced with risk-based logouts.
An important caveat: the surveys were conducted before that change. The findings capture what respondents expected to face, not the observed effects of the revised framework. For background on the technology itself, see SIM card.
Findings for Consumers
| Finding | Share of Respondents |
|---|---|
| Losing messaging access while travelling (primary SIM inactive) would be inconvenient | 98.8% |
| Losing internet calling in an emergency (primary SIM unavailable) would be inconvenient | 98.8% |
| Forced logouts from companion devices would be inconvenient (among multi-device users) | 97.7% |
| Re-authenticating through an Indian SIM while travelling would be inconvenient | 97% |
The report also looked at international travellers. Among the 73 respondents who travel abroad at least once a year, only about one third use an Indian SIM with an active roaming plan. The rest rely on local SIM cards, Wi-Fi or a secondary SIM, setups that SIM-linked access could affect.
Although the six-hour logout has been withdrawn, the report notes that users may still face interruptions when asked to authenticate again under the revised approach.
Findings for Businesses
Messaging apps are a workhorse for small firms, used for customer communication, employee coordination and daily operations.
| Finding | Share of Businesses |
|---|---|
| Use companion devices (laptops, desktops, tablets) | About 92% |
| Use the same business number across multiple devices | 86% |
| Expect substantial disruption if limited to a single handset | About 78% |
| Expect delays or errors in that scenario | 83.5% |
| Say forced logouts would disrupt operations | 82% |
| Expect a very or extremely significant financial impact | 76.3% |
Costs Businesses Anticipate
| Expected Cost | Share |
|---|---|
| Higher rental or workplace expenses | 60.6% |
| More spending on devices and equipment | 58.6% |
| Increased staffing requirements | 55% |
The report notes that smaller firms may feel this most, since they rely on messaging apps as affordable tools for customer service, order management and coordination.
For more tech policy coverage, browse our technology news on Technosports.
Does SIM Binding Improve Security? What Respondents Think
The report recognises the importance of tackling cyberfraud, including phishing, stolen credentials, malware and session hijacking. It argues that complementary safeguards are needed, since vulnerabilities can remain even when an account is linked to a verified SIM.
| Perception | Share |
|---|---|
| Businesses concerned about SIM-related fraud | 87.2% |
| Businesses who doubt SIM binding would meaningfully improve security | About 81% |
| Consumers who doubt it would make platforms safer | About 59% |
| Consumers who would consider getting another SIM | About 41% |
These are stakeholder perceptions, not a direct measure of fraud prevention. The report also suggests that people buying extra SIM cards could affect costs, digital identity management and security outcomes.
What the Esya Centre Recommends?
- Target the roots of fraud: Focus on credential theft, compromised devices and social engineering, alongside rules on communication access.
- Protect continuity: Preserve access across multiple devices for daily life, emergencies and business coordination.
- Strengthen the wider ecosystem: Improve Know Your Customer processes, tighten safeguards at SIM issuance, upgrade fraud detection and act against mule account networks.
- Assess before implementing: Weigh the likely security benefits against effects on consumers, business operations, communication resilience and costs.
What This Means for You?
- Frequent travellers: Keep an eye on how authentication rules work when your Indian SIM is inactive.
- Multi-device users: Be prepared for possible re-authentication prompts.
- Small business owners: Plan for how you would operate if access were limited to one handset.
- Everyone: Stay alert to phishing and social engineering, which the report highlights as key fraud routes.
Want to stay safer online? Check our cybersecurity tips and latest tech news for more.
A Balanced Reading
The report is a think tank’s analysis, built on survey responses. It acknowledges the directive’s fraud-prevention goals and calls for measures that match the sources of cybercrime. Readers should weigh it alongside official statements and other research on the topic.
Frequently Asked Questions
Q1. What is SIM binding in India?
It is a Department of Telecommunications directive from November 2025 asking messaging apps to keep user accounts linked to their registered SIM cards, with logout rules later changed to a risk-based approach.
Q2. What did the Esya Centre survey find?
Large majorities of consumers and businesses expected inconvenience or disruption from SIM-linked access restrictions, and many doubted it would meaningfully improve security.
