India’s rapid digital transformation has made telecommunications integral to everyday life, commerce and governance. The country’s active wireless mobile subscriber base stood at 1,204.01 million in July 2026, underscoring the scale of its connected digital ecosystem.
As mobile networks and devices increasingly support digital payments, online services and citizen-centric governance, the security and integrity of telecom networks and devices have assumed greater importance.
One of the emerging concerns is the misuse of the International Mobile Equipment Identity (IMEI), a unique identifier associated with mobile devices. Tampering with or misusing IMEI numbers can enable devices with altered identities to operate on telecom networks, making device identification more difficult and creating challenges for law enforcement, consumer protection and network security.
What constitutes unlawful IMEI tampering
Tampering with an IMEI is unlawful when a person intentionally removes, obliterates, changes or alters a unique mobile device equipment identification number.
It is also unlawful to intentionally use, produce, traffic in, control, possess or have custody of hardware or software while knowing that it has been configured to remove, alter or change such an identifier.
Understanding IMEI
An IMEI is a unique 15-digit number used to identify a mobile device on a telecom network. The first eight digits constitute the Type Allocation Code (TAC), which identifies the device model or type.
The Global System for Mobile Communications Association (GSMA) oversees the global allocation of TACs. TACs are allocated to manufacturers and brand owners, who then assign unique IMEIs to individual devices.
A dual-SIM handset generally has two IMEI numbers, one for each SIM slot. Users can check their device’s IMEI by dialling *#06#.
IMEI details can also be verified through the Sanchar Saathi portal or mobile application. Users can alternatively send KYM <15-digit IMEI number> by SMS to 14422 to check device details.
Responsibilities across the telecom ecosystem
Maintaining the integrity of device identifiers requires responsibility from manufacturers, importers, brand owners, retailers and consumers.
Manufacturers are required to register the IMEI numbers of applicable telecom devices manufactured in India with the government before their first sale, testing, research or other use. Registration is carried out through the Device Setu-Indian Counterfeited Device Restriction (ICDR) portal. Manufacturers must ensure that devices carry valid, unique and untampered IMEI numbers.
Importers must register IMEI numbers with the Central Government before importing applicable telecom equipment into India for sale, testing, research and development or other purposes. The registration is also carried out through the Device Setu-ICDR portal, and importers must ensure that devices carry valid and authorised IMEI numbers.
Resellers and retailers must ensure that devices offered for sale have valid and untampered IMEI numbers. Those dealing in used devices should verify IMEIs against the government’s central database of tampered and blacklisted devices before completing transactions, subject to applicable verification fees. Dealing in devices with tampered or configurable IMEIs can attract legal action.
Brand owners must ensure that devices sold under their brands comply with applicable IMEI registration and cybersecurity requirements. Their brands are required to be registered through the Device Setu-ICDR portal and linked to the relevant GSMA TAC. Devices placed on the market should carry authentic and authorised IMEIs.
Activities citizens should avoid
The Department of Telecommunications (DoT) advises citizens against activities involving the tampering or misuse of telecom identifiers and resources.
Citizens should not use, procure or assemble modems, modules, SIM boxes or other equipment with configurable or tampered IMEIs. They should also avoid obtaining SIM cards through fake documents, fraud, cheating or impersonation, or transferring SIM cards issued in their name to others who could misuse them.
The DoT also advises against using mobile applications, websites or other means to modify the Calling Line Identity (CLI) or other telecommunications identifiers.
Using Sanchar Saathi to verify devices
The Sanchar Saathi platform enables citizens to verify and secure their mobile handsets. Users can check IMEI details, including the device’s brand, model and manufacturer, helping them verify device authenticity.
Steps to take if a mobile phone is lost or stolen
Consumers should purchase mobile devices from authorised sellers and verify their IMEI details. They should also use strong passwords, PINs or biometric authentication and get devices repaired through authorised service centres to reduce the risk of tampering or other malicious activity.
In case of loss or theft, users should first report the incident to the local police and keep a copy of the complaint.
They should then obtain a duplicate SIM card for the lost mobile number from their telecom operator. Under TRAI regulations, SMS services are restricted for the first 24 hours after activation of a reissued SIM. Since Sanchar Saathi requires mobile OTP verification, users need to wait 24 hours after activation before submitting a blocking request.
The blocking request can then be registered through the Sanchar Saathi CEIR portal or mobile application by uploading the police report and valid identity proof. Users receive a unique Request ID for the application.
If the handset is subsequently recovered, the recovery should first be reported to the local police. The device can then be unblocked through the portal using the Request ID.
Legal safeguards against IMEI tampering
The Telecommunications Act, 2023 provides for action against tampering with telecommunications identifiers, including IMEI numbers of mobile handsets and other telecom devices.
Under Section 42(3)(c), tampering with telecommunications identifiers is prohibited. Section 42(3)(e) prohibits obtaining Subscriber Identity Modules (SIMs) or telecommunications identifiers through fraud, cheating or impersonation.
Violations can attract imprisonment of up to three years, a fine of up to ₹50 lakh, or both. Under Section 42(7), such offences are cognizable and non-bailable. Section 42(6) also provides for the same punishment for those who abet or promote the commission of such offences.
These provisions are intended to deter the tampering and misuse of telecom identifiers and resources.
Securing India’s digital ecosystem
India’s expanding digital and telecommunications infrastructure has increased the importance of maintaining the security and integrity of connected devices. Strong regulatory safeguards, device-verification mechanisms and responsible consumer practices can help prevent fraud and strengthen the reliability of telecom networks.
Maintaining a secure telecom ecosystem is a shared responsibility involving government authorities, manufacturers, importers, retailers, service providers and individual users. Awareness and compliance across the device lifecycle can help protect consumers and support the security of India’s digital infrastructure.
(PIB Inputs)
