Government Tightens Grip on Smartphone Makers: Mandatory Cyber Security App, 90-Day Deadline Issued

Without any prior public announcement, the central government has quietly delivered one of its toughest directives to smartphone manufacturers—every new mobile device sold in India must come preloaded with the government’s cybersecurity application Sanchar Saathi. Companies have been handed a 90-day deadline to fully implement the mandate, marking a significant shift in India’s digital security framework.

Industry giants including Apple, Samsung, Vivo, Oppo, and Xiaomi are among those instructed to ensure the app is installed on all upcoming devices. The order also specifies that users will not be able to delete or disable the app. Older smartphones won’t be exempt either, as the government plans to push the app onto existing devices through mandatory software updates.

Sources say the directive was circulated privately to selected companies rather than being issued publicly. The Centre believes this move will help curb cyber fraud, fake IMEI activity, and rampant mobile theft. Officials highlight that Sanchar Saathi has already contributed to the recovery of over 7 lakh lost or stolen phones, strengthening confidence in expanding its usage. A senior official described it as an essential tool to fight fake IMEI scams and misuse of telecom networks.

What Exactly Does the Sanchar Saathi App Do?

Developed as a cybersecurity platform by the Government of India, Sanchar Saathi was officially launched on 17 January 2025.

The app is currently available voluntarily on both the Apple App Store and Google Play Store, but the new policy elevates it to a compulsory feature in every smartphone sold in the country.

Key functions include:

Allowing users to report suspicious calls, SMS, or WhatsApp messages directly through the app.

Enabling authorities and users to check IMEI details and block phones that are stolen or missing.

The government believes that widespread adoption of these tools can sharply reduce online scams and assist enforcement agencies in identifying compromised devices more quickly.

Rising Cybercrime Linked to Duplicate IMEI Numbers

India, now home to over 1.2 billion mobile users, has become the world’s largest smartphone market. But this scale also brings vulnerabilities. Criminal networks frequently exploit fake or duplicate IMEI numbers, which disguise stolen phones and help offenders evade tracking.

An IMEI—a 15-digit unique identifier—is typically the device’s digital fingerprint. When cloned, criminals can carry out scams, hide stolen phones, or sell them through illegal channels without detection. Government data shows that as of September, the Department of Telecommunications (DoT) had already traced 22.76 lakh devices using its tracking systems, strengthening the case for making the app mandatory.

Apple Faces Particular Challenges

The directive has stirred discomfort within the smartphone industry, particularly because several companies say they were not consulted beforehand.

Among them, Apple faces the toughest roadblock. The company’s long-standing policy prohibits pre-installing any third-party or government app on its devices at the time of sale. This is not the first friction point either—Apple previously locked horns with TRAI over a similar anti-spam application.

Industry experts speculate that Apple may request additional discussions with the government or look for alternatives, such as offering users a compulsory installation prompt during device setup. Until now, no manufacturer has issued an official statement regarding the order.

How Will Users Benefit?

Despite the concerns, the government argues that consumers stand to gain significantly:

Stolen or lost phones can be instantly blocked via IMEI, reducing misuse.

Fraudulent calls and messages can be reported with a single tap, helping reduce scam incidents.

Future updates could introduce AI-powered fraud detection, smarter tracking, and additional safety features.

Privacy advocates, however, may question the decision to make the app undeletable, as this limits user control. The DoT maintains that the initiative is a major step toward bolstering India’s telecom and cybersecurity infrastructure.