Esya Centre study warns SIM-binding mandate may disrupt MSMEs without improving security

Consumer and business concerns

The Esya Centre study, Rethinking India's SIM Binding Mandate: An Empirical Assessment, surveyed 2,033 consumers across 18 cities and 353 businesses in 17 cities. It found that 98.88% of consumers consider losing messaging access due to an inactive SIM a significant inconvenience, particularly during emergencies or travel.

For international travellers, 67.1% rely on alternative connectivity modes like local SIMs or Wi-Fi, compared to 33% who use Indian SIMs with roaming. This raises questions about the mandate’s practicality for frequent travellers.

MSMEs anticipate operational challenges, with 76.3% expecting higher costs due to the mandate. These include expenses for additional devices (58.6%), workplace adjustments (60.6%), and staffing (55%). Additionally, 83.5% foresee delays and errors in operations, while 82% say forced logouts from messaging apps would disrupt workflows.

Effectiveness and workarounds

While 87.2% of businesses are concerned about SIM fraud, 81% doubt the mandate will improve security. The study argues that cybercriminals often use methods like phishing, malware, and stolen credentials, which SIM binding may not effectively counter.

Consumer skepticism is also high: 59% do not believe the mandate will make messaging platforms safer. Instead, 41% may acquire a second SIM card, and 30.3% may buy another device to bypass restrictions, potentially creating new vulnerabilities.

The report concludes that a risk-based approach—such as enhanced KYC procedures, stricter SIM issuance controls, and improved fraud detection—would be more effective than blanket restrictions on messaging access.

What this means

Lazyfounder analysis — our interpretation, not reported fact.

The Esya Centre study highlights a critical tension between regulatory measures and real-world usability. For Indian MSMEs, the SIM-binding mandate introduces operational risks—such as delays, forced logouts, and higher costs—without addressing the root causes of cyber fraud like phishing or malware. This could push businesses and consumers toward workarounds, such as secondary SIMs or devices, which may ultimately weaken the policy’s effectiveness.

Key takeaways

• The mandate’s potential disruptions—such as operational delays for MSMEs and inconvenience for travellers—could outweigh its cybersecurity benefits, particularly if fraudsters exploit alternative methods like phishing or credential theft.
• Businesses and consumers may adopt workarounds (e.g., secondary SIMs or devices) to bypass restrictions, undermining the policy’s intent and creating new vulnerabilities.
• The study’s call for a risk-based approach, including stricter KYC and fraud detection, suggests regulators may need to rethink blanket measures in favor of targeted solutions.
• Skepticism from 81% of businesses and 59% of consumers signals a need for clearer evidence of the mandate’s effectiveness before enforcement.

Related on Lazyfounder

• More technology news