Draft telecom cybersecurity rules may raise compliance costs for firms, impact digital adoption

ET Telecom, July 29, 2025

The draft telecom cybersecurity amendment rules, proposed by the Department of Telecommunications (DoT), may significantly raise compliance costs for non-telecom licensed entities such as fintech applications, OTT services, ecommerce businesses, and propose a new category of entities, Telecommunication Identifier User Entities (TIUEs), which may potentially include entities in the abovementioned categories.

The telecom department, under the proposed cybersecurity rules, can direct telecom carriers and other entities such as banks, financial institutions, e-commerce players, etc., to verify mobile numbers or identities of users through a centralised platform to curb online fraud and spoofing.

If a TIUE is directed by the Central or state government, or an authorised agency, to seek mobile number validation, a fee of ₹1.50 per request will be levied, while for private TIUEs making voluntary requests for mobile number validation, the fee will be ₹3 per request.

CUTS estimated potential impact on one key platform each from three of India’s fastest-growing digital consumer sectors – digital payments, food delivery, and mobility.

PhonePe, which processes nearly 282 million daily transactions, may face over ₹1,500 crore if merely 10% of its users are subjected to mobile number validation, while Zomato, with 30.7 million weekly active users, may face validation costs of over ₹24 crore annually, in a similar situation. Likewise, ride-hailing application Uber India, with 1.12 million daily users, may incur ₹6.13 crore annually.

CUTS said that voluntary validations at ₹3 per request would “double these figures”, making compliance economically unviable, especially for smaller platforms and sensitive digital services.

At the same time, it estimated that the total costs passed onto consumers may add up to ₹540 crore per month–or over ₹6,480 crore annually.

‘Overall, increased costs and exclusion risks may reduce digital adoption, hinder competition, and result in an estimated ₹2.5 lakh crore loss to the digital economy even at a 10% compliance, potentially excluding 4,000– 5,000 potential startups from the market, and risking a loss of nearly 150,000–200,000 direct jobs,’ it added.

This news item can also be viewed at:
https://telecom.economictimes.indiatimes.com/