India implements new SIM card and e-KYC regulations

The Indian Department of Telecommunications (DoT) has implemented new regulations for SIM card issuance and customer verification (e-KYC) to combat rising cyber fraud and digital arrests. Under the Telecommunications Act, paper-based KYC is being phased out in favor of mandatory digital and biometric authentication, including live facial recognition, fingerprinting, or iris scans. To prevent the use of fraudulent photos, live captures must include geo-tagging and time-stamping.

To curb the use of fake identities, all telecom service providers must ensure mandatory police verification for their POS agents and SIM dealers. Unauthorized vendors or those issuing SIMs with forged documents face penalties of up to ₹10 lakh, blacklisting, and criminal prosecution. Additionally, the purchase of bulk SIM cards is restricted, with only corporate connections permitted.

New rules also enforce strict limits on the number of mobile connections an individual can hold. Most users are limited to nine connections, while residents in Jammu and Kashmir, Assam, and the North-East are limited to six. Telecom operators have been instructed to identify and suspend connections that exceed these limits. While the system will initially operate on a post-facto basis, real-time verification checks must be fully implemented by November 30, 2026.