IMEI Tampering

About IMEI Tampering

• International Mobile Equipment Identity (IMEI):
  • Unique Identity: IMEI is a 15-digit number used to identify a mobile device on a mobile network. 
    • The first eight digits form the Type Allocation Code (TAC), which identifies the device model or type.
  • A dual-SIM phone generally has two IMEI numbers, one for each SIM slot.
  • Function : It helps verify a device when users make calls or use the Internet through mobile networks.
  • TAC Allocation: The global allocation of TAC is managed by the GSMA (Global System for Mobile Communications Association).
• IMEI Tampering: It involves intentionally removing, changing or altering the unique identification number of a mobile device or using equipment configured for such alteration.
• Tracking Mechanism:
  • Central Equipment Identity Register (CIER): The CIER categorises devices into white, grey and black lists based on their IMEI status.
    • White List: Devices permitted for normal network use.
    • Grey List: Devices that do not conform to standards but may connect under supervision.
    • Black List: Devices reported lost or stolen and denied network access.
  • Sanchar Saathi: Citizens can verify IMEI details, including the brand, model and manufacturer, through the Sanchar Saathi platform.
• Threat of IMEI Tampering:
  • Financial Fraud: Cloned IMEIs can mask the identity of bad actors, enabling cyber fraud, phishing and parallel banking rackets.
  • Disrupting Law Enforcement: Altered IMEIs can make it difficult for police and intelligence agencies to track stolen devices and criminal networks.
  • Enabling SIM Boxing: Criminal syndicates can use SIM boxes with tampered or configurable IMEIs to reroute international calls as local traffic.
    • This can bypass official gateways and cause revenue loss to the government.

• Telecommunications Act, 2023: Section 42(3)(c) prohibits tampering with telecommunication identifiers, including IMEI numbers.
  • Punishment: Violation may attract up to three years’ imprisonment, a fine up to ₹50 lakh, or both.
  • Such offences are cognizable and non-bailable.
• Telecom Cyber Security Rules, 2024: Manufacturers must register IMEIs of devices made in India before sale, testing, research or other use.
  • Importers: They must register IMEIs before importing devices into India.
  • Registration: The process is completed through the Device Setu–ICDR portal.
• Telecom Cyber Security Amendment Rules, 2025: The Centre can direct manufacturers not to reassign IMEIs already active in Indian telecom networks.
  • Network Blocking: Telecom operators may be directed to block devices with tampered IMEIs.
  • Second-hand Devices: Sellers must verify IMEIs through the central database of blacklisted or tampered devices.