The Department of Telecommunications (DoT) has made biometric verification mandatory for purchasing new mobile SIM cards, updating user details, handling disconnections, and conducting re-verifications. The mandate is established under the Telecommunication Act, 2023.
According to a gazette notification dated August 21, 2026, these regulations are designated as the Telecommunications (User Identification) Rules, 2026. The notification specifies that the rules apply to the verifiable biometric-based identification of users for notified services by any authorised entity.
This regulatory development follows a previous DoT notification from September 2025, which invited objections and suggestions from affected stakeholders. The proposed mandatory Aadhaar-linked biometric verification for digital and electronic Know Your Customer (D-KYC or e-KYC) processes is aimed at addressing the rise of digital arrest scams and online fraud across the country.
Consequently, all telecom service providers (TSPs) must implement a biometric identity verification system (BIVS) for issuing SIM cards through their authorised channels. The rules require every authorised entity to clearly and explicitly explain to users the necessity of providing correct information for identity establishment during the biometric process. Entities must also ensure full compliance with the Act, prohibiting the submission of false, incorrect, or forged documents, the suppression of material information, or impersonation.
The notification outlines procedures for handling alerts. If a user's response to an alert is negative, the authorised entity must act promptly to ascertain relevant facts and take appropriate action for closure. Furthermore, the telecom service connection must be suspended until biometric details are successfully matched and verified.
Authorised entities are granted a period of three months from the date the rules come into force to implement appropriate technical and organisational measures, as well as to establish the necessary infrastructure for effective compliance. The government retains the option to extend this implementation period by up to an additional three months if it determines that entities are not yet fully prepared, acting in the public interest.
"The mandate for biometric verification under the new telecom rules marks a significant regulatory shift toward enhancing digital security and consumer protection. For businesses, particularly telecom operators and authorised channels, this requires immediate operational adjustments and infrastructure deployment within the stipulated three-month window. While compliance overheads will rise in the short term, tightening verification protocols is a crucial step in mitigating widespread online fraud and safeguarding digital transactions across the ecosystem." — Dr. Shishir Gupta, Founder & CEO, StartupLanes
