Pareesa Afreen 
Dec 02, 2025
A major shift is underway for millions of tech users in India as authorities end a longstanding workaround that allowed people to run WhatsApp on spare phones without a SIM card, relying only on WiFi.
Under the new enforcement, users without an active SIM digitally linked to their WhatsApp account may lose access to chats, backups, and even login privileges.
According to the Government of India, the move closes a loophole repeatedly exploited by scammers. The Department of Telecommunications (DoT) said fraud networks, many operating from abroad, had been using WhatsApp numbers tied to disconnected Indian SIMs.
While the SIMs themselves were inactive, the numbers remained functional on WhatsApp via WiFi and were being used to facilitate anonymous communication and identity fraud.
The new rule mainly affects "WiFi-only" or "spare phone" users, those who keep WhatsApp running on secondary devices for privacy or business use, or to avoid paying for additional mobile plans.
Authorities argue that WhatsApp accounts not linked to valid SIM cards are more susceptible to misuse. Rigorous verification of numbers with SIMs, they say, boosts digital identities, lowers fraud, and enhances traceability.
The change is bound to disrupt workflows for small businesses, social media managers, and users reliant on multi-device setups or public WiFi. Some may need to reactivate SIMs, migrate data, or shift entire communication systems.
Analysts say the policy could presage a broader global crackdown, especially in countries tightening up their rules on SIM registration.
The development is of particular relevance to Pakistan, which has voiced repeated concerns about anonymous messaging, digital fraud, and social media security in recent years.
Pakistan ranks 27/100 (“Not Free”) on the global internet-freedom scale and has already introduced strict verification requirements for apps and devices.
Just weeks earlier, India also directed smartphone makers to pre-install a government-approved cybersecurity app and forced apps like WhatsApp, Signal, and Telegram to refresh logins.
