India Imposes New Nationwide Telecom Cyber Rules

India Enforces New Telecom Cybersecurity Regulations Nationwide

Why in the News?

The Government of India has enforced the Telecommunications (Telecom Cyber Security) Amendment Rules, 2025, extending cybersecurity oversight to all digital services using mobile numbers like WhatsApp, Paytm, and Zomato. These measures aim to combat cyber fraud, mobile cloning, and strengthen digital infrastructure security, aligning with broader efforts in global governance and international law.

India Imposes New Nationwide Telecom Cyber Rules

Expansion of Telecom Cybersecurity Regulations:

  • The new rules bring all mobile-number-based platforms—from messaging and payment apps to delivery services—under telecom cybersecurity supervision, reflecting a shift in global governance mechanisms for digital security.
  • If a number is flagged for fraud or security risk, the government can order its suspension across all linked services, demonstrating a commitment to collective action in cybercrime prevention.
  • A centralized IMEI database will list devices that are stolen, tampered, or blacklisted to prevent their reuse, enhancing international cooperation in combating mobile device theft.
  • Authorities can act immediately in public interest, even without prior notice, to curb emerging cyber threats, showcasing India’s proactive approach to global governance challenges in the digital realm.
  • The move aims to ensure that digital identity and telecom integrity remain protected against misuse, contributing to the broader discourse on UN reform and the role of UN agencies in cybersecurity.

Mobile Number Validation and Cybercrime Control:

  • The centerpiece of the rules is the Mobile Number Validation (MNV) system, which verifies whether a user’s number is authentic and active, aligning with international standards for digital identity verification.
  • Apps like Zomato, Swiggy, Paytm, PhonePe, Ola, and Uber will now follow the same cybersecurity standards as telecom operators like Jio, Airtel, and Vi, fostering a unified approach to digital security across sectors.
  • The rules target a surge in online financial fraud, which rose from ₹7,465 crore in 2023 to ₹22,845 crore in 2024, as per I4C data, highlighting the need for robust global governance institutions to address transnational cybercrime.
  • Over 7.4 lakh cybercrime cases were reported in early 2024, with 85% linked to digital payment and identity scams, underscoring the importance of international cooperation in tackling cyber threats.
  • Fraud through fake WhatsApp or Telegram groups alone caused over 83,000 investment and trading scam cases in 2024, emphasizing the need for multilateral governance approaches to combat digital fraud.

Regulatory and Institutional Framework:
● The rules introduce Telecommunication Identifier User Entities (TIUEs) — covering all businesses using mobile numbers for service access, excluding licensed telecom operators.
● Compliance is mandatory under the Telecommunications Act and Digital Personal Data Protection Act, 2023, ensuring privacy and accountability in line with evolving international law standards.
● The Central Equipment Identity Register (CEIR) will block stolen or cloned phones through mandatory IMEI verification, contributing to global efforts in combating mobile device theft.
● Used phone sales now require official IMEI checks before transfer, curbing the black market in stolen devices and supporting international initiatives against technology-enabled crime.
● These measures align with India’s National Cybersecurity Strategy, strengthening the nation’s digital sovereignty and consumer protection while contributing to the broader framework of global governance institutions.