Govt warns telecom device makers and sellers against IMEI tampering; mandatory registration reinforced

THEBUSINESSBYTES BUREAU

NEW DELHI, NOV 17, 2025

In a decisive push to safeguard India’s digital infrastructure, the Department of Telecommunications (DoT) has issued a strong advisory to manufacturers, importers, brand owners and resellers, reminding them of the mandatory requirement to register IMEI numbers and warning of stringent penal action for tampering under the Telecommunications Act, 2023 and the Telecom Cyber Security Rules, 2024.

The DoT underscored that telecommunication devices form the backbone of India’s fast-growing digital economy and that any compromise in device authenticity directly threatens the integrity of telecom networks. To curb counterfeit devices and bolster cyber security, the government has enforced strict provisions governing International Mobile Equipment Identity (IMEI) registration.

Reiterating the legal framework, the Ministry highlighted that Section 42(3)(c) of the Telecommunications Act prohibits tampering with telecommunication identifiers, including IMEI numbers. Further, Section 42(3)(f) makes the possession of any device — such as mobile phones, modems, modules, or SIM boxes — an offence if it is known to contain unauthorised or tampered identifiers. Violations may attract imprisonment of up to three years, fines up to ₹50 lakh, or both, with offences categorised as cognizable and non-bailable. Identical penalties apply to abetment and promotion of such activities.

The government has also tightened regulatory compliance under the Telecom Cyber Security Rules, 2024, mandating that manufacturers register the IMEI of every device produced in India on the Device Setu – Indian Counterfeited Device Restriction (ICDR) portal before sale, testing, R&D or any other use. Importers must similarly register IMEIs before bringing equipment into the country. The 2025 amendment further empowers the Centre to direct manufacturers not to assign IMEIs that are already active on Indian networks to newly manufactured or imported devices.

A centralised national database of blacklisted and tampered IMEIs is being maintained to assist law enforcement and curb the circulation of illicit devices. Entities dealing in used devices are required to verify IMEIs against this database before completing transactions. Smartphones, smartwatches, Wi-Fi hotspots, tablets, dongles, laptops with cellular connectivity, USB modems, modules, and even assembled devices such as SIM boxes must be registered on the ICDR portal.

Rule 8(3) of the Telecom Cyber Security Rules expressly bars any person from altering, removing, or manipulating equipment identifiers or possessing hardware or software that enables such alteration. Devices with programmable or configurable IMEIs fall under the category of tampered equipment and attract legal action. The government may also direct telecommunication entities to block such devices from accessing telecom networks.

The DoT stressed that these measures are crucial for national telecom cyber security, anti-counterfeiting efforts, law enforcement operations, and tax compliance. Ensuring the authenticity of devices, it said, is essential to protect consumers and uphold the integrity of the country’s telecom ecosystem.

Registration of all devices must be completed through the Device Setu–ICDR portal, which facilitates company and brand registration linked to GSMA Type Allocation Codes, followed by model registration, IMEI submission and certificate generation for customs and regulatory approvals.

The ministry urged complete adherence to these provisions, emphasising that non-compliance would invite severe legal consequences.