India to mandate Sanchar Saathi app on all smartphones by Feb

New Delhi: In a significant push to strengthen cyber security, the Government of India has ordered all mobile phone makers and importers to pre-install its fraud-reporting app, Sanchar Saathi, on every new device within 90 days.

As per the directive issued on November 28, any mobile handset manufactured in India or imported after the 90-day window must be pre-installed with the app.

The directive states: "The central government hereby directs every manufacturer and importer of mobile handsets that are intended for use in India ...from 90 days of issue of these instructions, ensure that the Sanchar Saathi mobile application, as specified by Department of Telecom, is pre-installed on all mobile handsets manufactured or imported for use in India."

For devices already produced and circulating in the market, companies will be required to add the app through software updates, reported PTI.

The notice further adds: "All manufacturers and importers of mobile handsets that are intended for use in India shall submit compliance reports to the DoT within 120 days from issue of these directions."

Sanchar Saathi helps users report suspicious activities linked to International Mobile Equipment Identity (IMEI) numbers and verify the authenticity of IMEIs on mobile devices. Under the Telecommunications Act 2023, tampering with telecom identifiers — including the 15-digit IMEI — is a non-bailable offence that can result in up to three years’ imprisonment, fines of up to ₹ 50 lakh, or both.

Users can also use the app to report fraudulent calls, stolen phones, and related issues. The Department of Telecommunications (DoT) has directed manufacturers to ensure the pre-installed app is clearly visible during initial setup and that none of its features are restricted or disabled.

The order warns that non-compliance will lead to action under the Telecommunications Act 2023, the Telecom Cyber Security Rules 2024, and other applicable laws.

India currently hosts manufacturing for major smartphone brands including Apple, Samsung, Google, Vivo, Oppo and Xiaomi.

This directive follows another recent order requiring messaging platforms such as WhatsApp, Signal and Telegram to stay linked to a user’s active SIM card. Within 90 days, these services must also auto-log out web users once every six hours, requiring them to re-authenticate using a QR code. All such service providers must submit compliance reports to the DoT within 120 days of the directive.