DoT cautions manufacturers and importers on mandatory IMEI registration, warns of strict penalties for tampering
Under the Telecom Cyber Security Amendment Rules, 2025, the government may also direct manufacturers not to assign IMEIs already in use on Indian telecom networks to new devices produced or imported into India.
Telecom Cyber Security Rules mandate IMEI registration on Device Setu; violations may lead to imprisonment up to three years and fines up to ₹50 lakh
New Delhi, Nov. 17: The Department of Telecommunications (DoT) has issued an advisory to mobile manufacturers, importers, brand owners and resellers, urging strict compliance with IMEI registration norms and warning of serious legal consequences for tampering with telecommunication identifiers.
DoT said these measures are critical to securing India’s telecom networks, preventing counterfeit devices and strengthening cyber security under the Telecommunications Act, 2023 and the Telecom Cyber Security Rules, 2024.
Strict penalties under the Telecommunications Act, 2023
The Act imposes stringent penalties for tampering with identifiers such as IMEI numbers.
- Section 42(3)(c): Prohibits tampering of telecom identifiers.
- Section 42(3)(f): Criminalises wilful possession of devices—handsets, modems, modules, SIM boxes—known to use unauthorised or tampered identifiers.
- Penalties: Up to three years’ imprisonment, fines up to ₹50 lakh, or both.
- Offences are cognizable and non-bailable under Section 42(7).
- Section 42(6) stipulates the same punishment for abetment or facilitation.
Mandatory IMEI registration on Device Setu
Under the Telecom Cyber Security Rules, 2024:
Manufacturers
– Must register the IMEI of every device (phones, modules, modems, SIM boxes, dongles, laptops with cellular capability) on the Device Setu – Indian Counterfeited Device Restriction (ICDR) portal before sale, testing or R&D.
Importers
– Must register IMEI numbers with the government before importing any equipment bearing IMEI.
Portal: https://icdr.ceir.gov.in
Under the Telecom Cyber Security Amendment Rules, 2025, the government may also direct manufacturers not to assign IMEIs already in use on Indian telecom networks to new devices produced or imported into India.
Central IMEI blacklist and checks for pre-owned devices
DoT maintains a national database of blacklisted or tampered IMEIs.
Entities dealing in second-hand devices must verify each IMEI against the database on the ICDR portal, paying the applicable fee.
All devices with IMEI capability are covered, including:
smartphones, smartwatches, tablets, USB modems, modules, mobile hotspots, laptops with 4G/5G connectivity, assembled SIM boxes and other cellular-enabled hardware.
Prohibition on altering or configuring IMEI numbers
Rule 8(3) of the Telecom Cyber Security Rules, 2024 prohibits:
— removing or altering a device’s unique identifier
— using or possessing hardware/software configured for IMEI manipulation
— producing or trafficking such equipment
Use of devices with programmable or configurable IMEIs is treated as IMEI tampering and attracts legal action.
Under Rule 5, the government may issue directions to telecom entities to block devices with tampered IMEIs from accessing networks.
Why these regulations matter
DoT said the measures are essential to:
- protect India’s telecom cyber infrastructure
- curb counterfeit device circulation
- support law enforcement and national security
- enable accurate tracking and tax compliance
Non-compliance attracts stringent legal penalties, the department warned.
Registration steps
All registrations must be completed through the Device Setu – ICDR portal. The process includes:
- Company registration
- Brand registration linked to GSMA Type Allocation Code (TAC)
- Device model registration
- IMEI number registration
- Certificate generation for customs clearance
Reference documents
The Telecommunications Act, 2023, Telecom Cyber Security Rules, 2024 and Telecom Cyber Security Amendment Rules, 2025 are available at: https://dot.gov.in/act-rules-content/3296
