India's Digital Ecosystem Scale and IMEI Security Concerns

India's active wireless mobile subscriber base reached 1,204.01 million in July 2026, reflecting the massive scale of the country's connected digital ecosystem that supports digital payments, online services, and citizen-centric governance. This expansion brings security challenges, particularly regarding International Mobile Equipment Identity (IMEI) number tampering, which can facilitate device identity alteration and complicate law enforcement, consumer protection, and network security efforts.

Legal Framework and Penalties

The Telecommunications Act, 2023 establishes stringent provisions against IMEI tampering. Section 42(3)(c) prohibits tampering with telecommunication identifiers, while Section 42(3)(e) prohibits obtaining SIMs or telecommunication identifiers through fraud, cheating, or impersonation. Violations may attract imprisonment for up to three years, a fine of up to ₹50 lakh, or both, with such offences being cognizable and non-bailable under Section 42(7). Persons who abet or promote these offences are also liable to the same punishment under Section 42(6).

Stakeholder Responsibilities

Manufacturers must register IMEI numbers of all applicable telecom devices manufactured in India with the Government before first sale, testing, research, or other use through the Device Setu–Indian Counterfeited Device Restriction (ICDR) portal. Importers must complete IMEI registration before importing applicable telecom equipment into India through the same portal. Resellers and retailers must ensure devices have valid and untampered IMEI numbers, with used device dealers required to verify IMEI against the Government's central database of tampered and blacklisted devices by paying certain fees per IMEI verification. Brand owners must ensure devices comply with IMEI registration requirements and have their brands appropriately registered through the Device Setu–ICDR portal linked to relevant GSMA Type Allocation Codes.

Citizen Guidelines and Protections

The Department of Telecommunications advises citizens to avoid using, procuring, or assembling devices with configurable or tampered IMEIs, procuring SIM cards through fake documents or fraud, transferring SIM cards to others, and using applications to modify Calling Line Identity. Citizens should purchase devices only from authorized sellers, use strong authentication methods, and get repairs only at authorized service centers. For lost or stolen devices, citizens must file a police report, obtain a duplicate SIM card (noting that SMS services are restricted for the first 24 hours under TRAI regulations), register the blocking request on Sanchar Saathi portal with police report and ID proof to receive a Request ID, and use this ID to unblock recovered devices after reporting to police.

Verification Mechanisms

The Sanchar Saathi platform enables users to validate device IMEI details including brand, model, and manufacturer. Users can dial *#06# to display IMEI, visit Sanchar Saathi portal or mobile app, or send KYM <15-digit IMEI number> by SMS to 14422 for verification. The IMEI is a unique 15-digit number where the first eight digits form the Type Allocation Code (TAC) identifying device model, allocated globally by GSMA to manufacturers who then assign unique IMEIs to individual devices.