The Telecommunications (Telecom Cyber Security) Amendment Rules 2025

The Telecommunications (Telecom Cyber Security) Amendment Rules 2025 has been notified by the Department of Telecommunications (DoT) to strengthen cybersecurity in India’s telecom and digital services sector. These rules aim to address rising cyber crimes, financial frauds, and misuse of mobile numbers and devices. With over 7000 cybercrime cases reported per day in the first four months of 2024 alone, majority related to online financial fraud, the government identified the urgent need for stricter regulations. The amendment expands the scope of telecom cybersecurity to include not just operators but also digital platforms using mobile numbers, ensuring better monitoring and protection for users.

Also Read: Ozone Depleting Substances (Regulation and Control) Rules 2000

The Telecommunications (Telecom Cyber Security) Amendment Rules 2025 Changes Introduced

The list of changes introduced in the The Telecommunications (Telecom Cyber Security) Amendment Rules 2025 has been discussed below:

• Introduction of TIUEs (Telecommunication Identifier User Entities): The rules create a new category called TIUEs, covering businesses that use phone numbers to identify customers or provide services, excluding licensed telecom operators. TIUEs must follow government directives on suspending phone numbers, responding to data requests, and verifying customer identities as prescribed by authorities.
• Broad Scope of Regulation: The amendment brings all digital services using mobile numbers under telecom cybersecurity regulations. Platforms such as WhatsApp, Paytm, PhonePe, Zomato, Swiggy, Ola, and Uber are now regulated alongside traditional telecom operators like Airtel and Jio. This ensures uniform compliance and accountability across services that rely on mobile numbers.
• Mobile Number Verification (MNV) System: A government-run MNV system has been established. Before buying or selling a used mobile phone, users must verify numbers against a government database to ensure they correspond to legitimate telecom subscribers. This step helps prevent the circulation of cloned or fake numbers.
• Immediate Action and Account Suspension: The rules empower authorities to act immediately without prior notice if deemed necessary for public interest. Authorities can order the suspension of user accounts across multiple services simultaneously, covering both telecom operators and digital platforms.
• Used Phone Sales Verification: Anyone buying or selling a used phone must verify its IMEI (International Mobile Equipment Identity) number against a government database. Devices reported stolen, tampered with, or blacklisted for security reasons cannot be sold. This measure aims to disrupt the stolen phone market that enables fraud.

Government Verification Gateway: Apps and services can use the government verification platform to validate user-provided mobile numbers. Government agencies have assured access to databases maintained by telecom operators, enabling verification both voluntarily and as mandated.

‹ ›