Getting a new SIM card in India is set to become more secure.
Under the new Telecommunications (User Identification) Rules, 2026, mobile users will have to complete biometric-based identity verification for new connections and certain changes to existing mobile numbers.
The rules came into effect on August 21, 2026 and apply to major telecom operators across India.
The government says the move is aimed at preventing fake SIM cards, identity theft, cybercrime and financial fraud.
New SIM Card Will Need Biometric Verification
Anyone applying for a new mobile connection will now have to complete the required biometric verification before the SIM can be issued.
The purpose is simple: the mobile number should be linked to a properly verified person.
This is important because mobile numbers are now connected to banking accounts, UPI, social media and several other digital services. A SIM obtained using someone else’s identity can therefore be misused for serious fraud.
Existing Mobile Users May Also Need Verification
The new rules are not only for people buying new SIM cards.
Biometric verification may also be required when users request certain changes to their subscriber details or seek disconnection of a mobile number.
In such cases, telecom operators will have to verify that the request is actually being made by the genuine subscriber.
Aadhaar Users Can Use e-KYC
People choosing Aadhaar-based verification can complete the process through the existing electronic KYC system.
The rules do not create a new central biometric database containing the biometric details of every telecom user.
Instead, the verification will rely on authorised electronic and digital KYC mechanisms.
What If You Don’t Use Aadhaar?
Non-Aadhaar users will also have a verification option.
Under the digital KYC process, the telecom operator can capture a live facial image of the customer along with electronic copies of the original identity and address documents.
Additional verification may also be carried out if required.
Alternative Options for People Unable to Give a Face Scan
The rules also take into account people who may not be able to complete standard facial verification because of an injury, impairment or disfigurement.
Alternative methods of biometric verification will be available in such cases.
In certain situations, field verification or police assistance may also be used.
This provision is intended to ensure that genuine users are not automatically excluded because they cannot complete a standard face-scan process.
Users Will Get Alerts for Requests Made in Their Name
Another important change is the introduction of an alert system for subscribers.
Users will be informed when a new connection, SIM-related request, subscriber-detail update or disconnection request is made in their name.
This can help people identify requests that they did not make themselves.
It could also provide an early warning if someone attempts to misuse their identity to obtain or modify a mobile connection.
Why Is the Government Tightening SIM Verification?
The government wants to make it harder for criminals to obtain mobile connections using fake or stolen identities.
Fraudulent SIM cards can be used for phishing, impersonation, financial scams and account takeovers.
Stronger verification at the time of issuing or changing a mobile connection is expected to reduce the possibility of such misuse.
No Shared Biometric Database Under Final Rules
The final rules are different from an earlier proposal.
The government had earlier considered a central biometric verification system that could allow telecom companies to verify users across different operators.
However, this proposed shared biometric database has been dropped from the final rules.
Instead, the system will use electronic KYC and digital KYC mechanisms for verification.
Telecom Companies Get Time to Implement the Changes
Although the rules have already come into force, telecom operators have been given time to build and upgrade the required systems.
Operators have three months to implement the necessary infrastructure, with a possible extension of up to six months.
As a result, all parts of the new verification system may not become operational at every telecom company at exactly the same time.
What Happens If Biometric Verification Fails?
Telecom companies will also have to report cases where biometric identification fails.
This will help create a record of unsuccessful verification attempts and allow such cases to be monitored.
For genuine users who face technical or physical difficulties, alternative verification methods may become important.
New Rules Also Cover Mobile Number Disconnection
One notable feature of the new rules is that biometric verification can also be required for relevant mobile disconnection requests.
The aim is to ensure that an unauthorised person cannot easily deactivate someone else’s mobile number.
This adds another layer of protection around important changes to a subscriber’s mobile connection.
Existing Users Do Not Need to Replace Their SIM Immediately
Existing mobile users do not have to replace their SIM cards simply because the new rules have come into effect.
The new verification requirements will become relevant when users carry out transactions covered by the rules, such as certain subscriber-detail changes or specified requests.
Telecom companies will gradually integrate the new verification procedures into their SIM issuance and customer-service systems.
Biometric Rules Are Different From the Nine-SIM Limit
The new biometric requirement should not be confused with the existing limit on the number of mobile connections a person can have.
In most parts of India, an individual can hold up to nine mobile connections. Different limits apply in Jammu and Kashmir, Assam and certain North-Eastern areas.
The two rules serve different purposes.
The SIM limit controls how many connections a person can have, while biometric verification focuses on confirming the identity of the person using or requesting the connection.
What Will Change for Mobile Users?
For consumers, the biggest change will be at the time of getting a new SIM or making certain changes to an existing mobile connection.
Users will need to complete the required identity verification through an authorised telecom channel.
While the process may take a little more time, the government expects stronger verification to make it more difficult for criminals to obtain SIM cards using someone else’s identity.
At the same time, the decision to drop the proposed shared biometric database addresses one major concern around centralised biometric storage.
Overall, the new rules aim to make mobile connections harder to misuse while giving genuine users additional protection against unauthorised SIM-related activity.
