India Extends Telecom Cyber Security Rules to Digital Apps, Mandates Mobile Number Verification
SDG 9: Industry, Innovation and Infrastructure | SDG 16: Peace, Justice and Strong Institutions
Institutions: Ministry of Communications (Department of Telecommunications)
The Central Government has notified the Telecommunications (Telecom Cyber Security) Amendment Rules, 2025 (G.S.R. 771(E)) on October 22, 2025, to significantly strengthen India’s defense against telecom-enabled cyber fraud and device tampering. The rules introduce a new class of regulated entities called Telecommunication Identifier User Entities (TIUEs), which includes all digital platforms such as payment, e-commerce, and delivery apps that use mobile numbers for user identification or service delivery. These entities are now subject to government directives on cyber security compliance.
The amendments mandate the establishment of a centralized Mobile Number Validation (MNV) platform, which will be run by the Central Government or an authorized agency. This system is designed to allow TIUEs and other authorized entities to check if a user’s mobile number legitimately corresponds to the registered user details held by the telecom operator, a measure intended to curb fraud like SIM swapping and identity spoofing. Furthermore, the rules require mandatory IMEI verification for all sales and purchases of used mobile phones against a central database of tampered or restricted devices. The government is also empowered to order the immediate and simultaneous suspension of a flagged mobile number across all associated telecom and TIUE services in the public interest.
This regulatory overhaul marks a major institutional strengthening of India’s digital security architecture, extending the cybersecurity framework from licensed network operators to the application layer. By creating a unified verification system (MNV) and regulating the secondary device market (IMEI registry), the Department of Telecommunications is proactively ensuring the integrity of digital identity, which is critical for the stability and trustworthiness of the nation’s fast-growing digital economy and for consumer protection.
What is a Telecommunication Identifier User Entity (TIUE)? → A TIUE is any person or entity, other than a licensed telecom operator, that uses a telecommunication identifier (like a mobile number) for customer identification, user authentication, or service delivery. This definition brings platforms such as fintech apps, e-commerce giants, and ride-hailing services under the purview of telecom cyber security regulations.
Follow the full news here: Telecommunications (Telecom Cyber Security) Amendment Rules, 2025 Gazette Notification (G.S.R. 771(E))