A Modernised Cyber Security Framework for a Digital India
With mobile numbers, device identifiers, and IP-linked services becoming central to banking, e-commerce, and digital governance, the updated TCS Rules seek to safeguard users against rising fraud and misuse. The amendments underline India’s broader push for secure digital transformation while ensuring privacy, transparency, and national security.
According to the DoT, these reforms intend to enhance coordination among stakeholders, improve device traceability, and introduce preventive mechanisms against identity fraud and misuse of telecom identifiers.
Mobile Number Validation (MNV): A Shield Against Identity Fraud
One of the most impactful changes is the institutionalisation of the Mobile Number Validation (MNV) platform. This privacy-compliant, decentralised system enables service providers across sectors to verify whether a mobile number genuinely belongs to the individual claiming to use it.
The MNV platform is expected to significantly reduce the creation of mule bank accounts, identity theft, and fraudulent onboarding of customers on digital platforms concerns that have surged alongside India’s booming digital economy.
By ensuring that service providers can authenticate telecom identifiers with accuracy, the framework boosts trust in digital transactions and helps advance the government’s broader cybersecurity goals.
Resale Device Scrubbing to Clean Up the Second-Hand Market
India’s second-hand and refurbished smartphone sector has grown rapidly, but this rise has also enabled circulation of stolen, cloned, or blacklisted devices. The updated TCS Rules now make it mandatory for all resale and refurbishing entities to scrub each device’s IMEI against a central database before resale.
This ensures that suspicious or blacklisted devices are flagged before entering the market, protecting buyers and supporting law enforcement. The move is expected to make the resale ecosystem more reliable, transparent, and secure.
Defining TIUEs and Strengthening Accountability
The amendments introduce a new classification Telecom Identifier User Entities (TIUEs). These include organisations across sectors that rely on identifiers such as mobile numbers, IMEIs, or IP addresses to deliver services.
Under the revised rules, TIUEs must supply telecom-identifier-related information to the government under regulated, clearly defined circumstances. This enables better tracking of telecom-linked cybercrimes while ensuring compliance with data privacy standards.
DoT emphasises that the goal is not intrusive surveillance but improved coordination among agencies to detect fraud, protect consumers, and secure digital transactions.
Clarification on Gazette Notifications: Rules Remain Fully Enforceable
The DoT’s official clarification addresses confusion caused by a technical error in October 2025. While the amendment was correctly published on 22 October via G.S.R. 771(E), it was inadvertently re-published later through G.S.R. 796(E).
This mistake has now been rectified by G.S.R. 863(E), which rescinds the repeated publication. DoT stresses that the original amendments remain in full force and have not been invalidated at any stage.
A Strong Step Towards a Safer Digital Future
The Telecommunication Cyber Security (TCS) Amendment Rules, 2025 represent a significant advancement in India’s cybersecurity approach. By tightening validation processes, securing telecom identifiers, and ensuring responsible device commerce, the updated framework supports a trusted and resilient digital ecosystem.
As cyber fraud, digital payments, and telecom-driven services continue to expand, the new rules position India to better safeguard users while enabling innovation and interoperability across sectors.
More updates can be found on the Department of Telecommunications’ official social media channels via X, Instagram, Facebook, and YouTube.
