[Update] Smartphone Makers Asked To Preload Sanchar Saathi App For Cyber Security

Updated | December 2, 14:25 IST

Telecom minister Jyotiraditya Scindia clarified that the Sanchar Saathi app is not compulsory for users, and smartphone users will have an option to delete the app.

“If you don’t wish to register, you shouldn’t register and can remove it anytime,” Scindia said.

Original | December 1, 20:04 IST

The telecom ministry has directed smartphone companies to preload government-backed cyber safety app, Sanchar Saathi, on all new devices sold in India. The app will be locked on the phone and users will not be allowed to remove it.

The order, dated November 28, has been sent privately to major manufacturers, including Apple, Samsung, Vivo, Oppo and Xiaomi, Reuters reported. 

The companies have 90 days to comply with the notification. Phones already in the supply chain must receive the app via a software update.

The ministry said that the app will help fight rising cybercrime and phone fraud by blocking stolen devices, tracking lost phones and spotting fake or duplicate IMEI numbers. 

The mandate came days after the Ministry of Electronics and Information Technology notified the final Digital Personal Data Protection (DPDP) Rules, 2025, which operationalise the DPDP Act, 2023. Together, the two measures expand the government’s oversight over digital devices and personal data handling.

Separately, the Department of Telecommunications (DoT) has ordered online messaging platforms like WhatsApp, Telegram, Signal, ShareChat, Snapchat, JioChat, Josh and Zoho’s Arattai to enforce mandatory SIM binding, meaning users can only access these services on the device that contains the SIM used during registration.

The directive is part of the Telecommunication Cybersecurity Amendment Rules, 2025, effective since October. Platforms have 90 days to make technical changes and must submit compliance reports within four months. 

In its notice, the DoT said some communication apps allow users to operate accounts without the physical SIM present in the device, creating vulnerabilities that are being exploited from outside India for cyber fraud.

These policy moves land in a year marked by a sharp rise in volume as well as severity of cyber incidents. India experienced repeated credential leaks, ransomware attacks and breaches across government, finance, healthcare and public-sector systems through 2025.

According to CERT-In data, reported cybersecurity incidents rose from 10.29 Lakh in 2022 to 22.68 Lakh in 2024, with 2025 tracking at the same or higher level. Multiple industry reports rank India among the world’s most targeted countries, with ransomware, phishing and supply-chain compromises dominating the threat landscape.

According to the government’s estimate, Indians lost INR 22,845.73 Cr to cyber frauds in 2024.