TAFCOP: How to Check and Block Unauthorized SIM Cards Registered in Your Name

Your mobile number has quietly become the master key to your financial life. It authenticates your bank transactions, receives your UPI OTPs, unlocks your email, and verifies your identity across government platforms. If someone else gets a SIM card issued in your name, they hold a copy of that key. They may not use it today. They may not use it for months. Then one afternoon, your bank balance disappears, and the investigation traces everything back to a connection you never knew existed.

We have seen this pattern repeat across thousands of cases. The Department of Telecommunications built TAFCOP to break it.

What Is TAFCOP?

TAFCOP stands for "Telecom Analytics for Fraud Management and Consumer Protection" in India. It is a government service developed by the Department of Telecommunications (DoT) and integrated into the Sanchar Saathi portal, which the Centre for Development of Telematics (C-DOT) built.

The service does one thing exceptionally well. It shows you every mobile connection issued against your identity, and it lets you report any connection you did not authorize.

Think of it as a mirror for your telecom footprint. You enter your mobile number, verify with an OTP, and the portal displays a masked list of all connections linked to your Aadhaar. You see the operator for each number and the last four digits. If you spot something unfamiliar, you flag it. The system passes that flag to the concerned telecom operator for re-verification. The operator then either confirms the connection is legitimate or blocks it.

The portal also works in reverse. If you have more connections than the permitted limit, TAFCOP lets you choose which ones to retain and which to surrender. The excess connections are disconnected within a defined period.

Why TAFCOP Exists and What Is the Problem It Solves?

Aadhaar-based e-KYC made SIM card issuance faster and more accessible. It also created a vulnerability. Fraudsters began obtaining SIM cards using forged documents, leaked Aadhaar details, or identity documents submitted for unrelated purposes.

The scale of the problem became clear through investigations. Criminal groups routinely acquired SIM cards (even if it's an eSIM) with stolen or forged identity documents. In some cases, a single identity was used to activate hundreds of connections. One investigation found identities linked to as many as 200 active numbers.

These connections powered phishing call centers, fake loan offers, OTP theft, digital arrest scams, and mule account networks. The person whose Aadhaar was used often had no idea until law enforcement arrived at their door asking about a crime they knew nothing about.

TAFCOP flips the surveillance model. Instead of waiting for fraud to surface and tracing it backward, the system lets citizens detect misuse of their identity at the source.

How to Check Mobile Connections Registered in Your Name

The process takes less than three minutes if you have your phone with you.

1. Open the TAFCOP portal at tafcop.sancharsaathi.gov.in. You can also reach it through the Sanchar Saathi portal at sancharsaathi.gov.in by selecting "Know Your Mobile Connections" under Citizen Centric Services.
2. Enter your 10-digit mobile number. Use a number that is active, linked to your Aadhaar, and can receive an OTP. This number becomes your authentication channel.
3. Complete the CAPTCHA and click "Request OTP" or "Send OTP."
4. Enter the OTP you receive on your phone. The system verifies your identity and logs you in.
5. Review the list of connections. The portal displays all mobile numbers issued against your identity. Each entry shows the telecom operator and partial number details for privacy.

It's that easy with TAFCOP.

How to Report an Unauthorized Connection

The reporting step is where most people hesitate. We have seen users close the page when they spot an unknown number because they are unsure which option to select. The distinction matters.

The portal gives you three reporting choices for each connection:

• This is not my number — Select this if you did not take the connection. This triggers a re-verification process with the operator. The operator will contact the person using the number and verify their identity. If verification fails, the connection is disconnected.
• Not required — Select this if the connection is yours but you no longer need it. This applies to old numbers you stopped using but never formally surrendered.
• Required — Select this to confirm you want to keep the connection active.

After you submit your report, the portal generates a ticket ID. You receive this ID on screen and via SMS. Save it. This is your tracking number for the request. If the operator does not act within a reasonable time, you can use the ticket ID to follow up.

The DoT analyses requests frequently and passes them to the concerned telecom service provider, which then verifies and blocks the number if warranted.

The SIM Card Limit: What the Rules Actually Say?

The Department of Telecommunications permits one individual to hold a maximum of nine mobile connections across all telecom operators and service areas in India. In Jammu and Kashmir, Assam, and the Northeastern states, the limit is six connections.

This limit applies across operators. Having three Airtel connections, four Jio connections, and two Vi connections puts you at the nine-connection ceiling. You cannot bypass the limit by spreading connections across different networks.

Starting August 24, 2026, telecom operators began using the DoT's Digital Intelligence Platform to verify a customer's existing connection count before issuing a new SIM. If you have reached the limit, the operator will not issue another connection until you surrender one.

What Happens If You Exceed the Limit?

Connections exceeding the permitted limit face disconnection after a 90-day notice period. The DoT sends an SMS to affected subscribers informing them of the connections in their name and asking them to choose which ones to retain.

Penalties for violations vary by severity:

• Exceeding the SIM limit: First-time offences can attract fines up to ₹50,000. Repeated violations can cost up to ₹2 lakh per offence.
• Obtaining a SIM through fraud or personation: This is a more serious offence under the telecommunications framework. It carries imprisonment of up to three years, a fine of up to ₹50 lakh, or both.
• Using a fraudulently obtained SIM in a crime: If a SIM issued in your name is linked to a criminal offence, you may face fines up to ₹50 lakh and imprisonment up to three years.

These penalties underscore why checking your connections regularly is not optional. An unauthorized connection in your name is not just a data problem. It is a legal exposure.

TAFCOP as Part of the Sanchar Saathi Ecosystem

TAFCOP does not operate in isolation. It is one module within the Sanchar Saathi platform, which the DoT launched in May 2023 as a unified citizen-facing portal for telecom security.

The platform includes:

• CEIR (Central Equipment Identity Register) — Blocks and traces lost or stolen mobile phones using their IMEI number. Once reported, a phone is blocked across all networks in India within hours. The thief cannot use it even with a new SIM.
• Chakshu — Lets citizens report suspected fraudulent communications received via calls, SMS, or WhatsApp. Reports feed into the DoT's fraud detection systems and help identify numbers used for scams.
• Digital Intelligence Platform (DIP) — The backend system that connects telecom operators, law enforcement, banks, and government agencies. DIP enables real-time information sharing about suspected fraud and helps flag connections obtained through forged documents.

The Sanchar Saathi app, available on Google Play Store and Apple App Store, brings these services to mobile devices. The app crossed 50 lakh downloads by August 2025. The DoT has also mandated pre-installation of the Sanchar Saathi app on all smartphones sold in India, making TAFCOP accessible from the moment a user sets up a new device.

The Impact of TAFCOP

The numbers tell a story of scale. By July 2026, the Department of Telecommunications had disconnected more than five crore fraudulent mobile connections over two years as part of its crackdown on telecom-enabled cybercrime. The same effort prevented cyber frauds worth more than ₹1,800 crore.

Since 2023, nearly 8.2 million fraudulent connections have been deactivated nationwide. In Karnataka alone, consumers filed close to 2.95 lakh requests through TAFCOP within a year of the service launching in that circle, with a majority of reports involving connections obtained without consent.

The Sanchar Saathi platform overall has blocked over 33.5 lakh fraudulent or lost phones, traced 20 lakh stolen devices, and returned 4.64 lakh recovered phones to their rightful owners.

These results matter because fraudulently obtained SIM cards are the infrastructure of organized cybercrime. They provide disposable, hard-to-trace communication channels for phishing attacks, impersonation schemes, investment scams, and digital payment fraud. Removing them at scale cuts off the infrastructure before a single rupee changes hands.

Step-by-Step: Checking and Reporting on the TAFCOP Portal

Here is the complete process, from opening the portal to tracking your report.

Step 1: Visit the portal. Open tafcop.sancharsaathi.gov.in on your phone or computer. The page loads in your preferred language.

Step 2: Enter your mobile number. Type the 10-digit number linked to your Aadhaar. This number receives the OTP.

Step 3: Complete verification. Fill in the CAPTCHA code and click "Request OTP." Check your SMS for the six-digit code and enter it.

Step 4: Review connections. After login, you see a masked list of all mobile connections registered under your identity. Note any number you do not recognize.

Step 5: Select reporting options. For each connection, choose "This is not my number," "Not required," or "Required." Be precise. Selecting "Not required" for a connection you never took sends the wrong signal to the system.

Step 6: Submit your report. Click the report button at the bottom of the page. The portal generates a ticket ID.

Step 7: Save your ticket ID. Screenshot the confirmation page and save the SMS containing the ticket ID. You will need this if the operator does not act.

Step 8: Follow up if needed. If the connection is not disconnected within a reasonable period, use the ticket ID to track progress. You can also write to the concerned operator's complaint centre with the ticket ID as reference.

What TAFCOP Cannot Do?

TAFCOP is a detection and reporting tool. It is not a law enforcement agency, a bank dispute mechanism, or a real-time SIM-swap prevention system. Understanding its boundaries helps you use it correctly.

If your existing number suddenly loses signal and you suspect a SIM swap, TAFCOP is not the first call. Contact your operator immediately from another phone to block the number. If money has already left your bank account, call the 1930 cybercrime helpline and file a complaint at cybercrime.gov.in the same day. A TAFCOP ticket is not a police complaint and not a bank dispute.

TAFCOP also cannot show you unmasked phone numbers for privacy reasons. You see operator names and partial digits. If a number is unfamiliar, you report it based on the information displayed. The operator handles the verification.

How Often Should You Check?

We recommend checking TAFCOP every three to six months as a baseline. Check immediately if you notice any of these signals:

• You receive an OTP for an account you did not try to access
• Your SIM stops working unexpectedly
• Your bank alerts you to a login from an unrecognized device
• You receive calls or messages from people asking why you called them when you did not
• You are applying for a new SIM and want to confirm you have room under the limit

For people who have shared Aadhaar copies for rentals, job applications, or other purposes, checking monthly is prudent. Aadhaar details can be misused months or years after they are shared.

The New SIM Rules of 2026

The regulatory environment tightened significantly in 2026. From August 24, telecom operators must verify a customer's total connection count across all networks through the Digital Intelligence Platform before issuing a new SIM or an eSIM.

Digital KYC and biometric verification are mandatory for new connections. Bulk SIM sales to ordinary consumers are banned. A 90-day waiting period applies before a deactivated number can be reissued to another subscriber.

The names and photographs of individuals exceeding the nine-SIM limit are uploaded to the Digital Intelligence Platform. Any SIM activated beyond the limit is blocked immediately.

These rules represent a shift from self-declaration to system-enforced compliance. The burden of checking your connection count now falls on you. TAFCOP is the tool that makes it manageable.

Frequently Asked Questions

Everything else you may need to know about TAFCOP:

Does TAFCOP work for all telecom operators?

Yes. TAFCOP covers connections across all licensed telecom service providers in India, including Jio, Airtel, Vi, and BSNL.

Can I use TAFCOP without an Aadhaar-linked mobile number?

You need an active mobile number that can receive an OTP. The portal verifies your identity through the OTP sent to that number. If your number is not linked to Aadhaar, you may still be able to check connections issued against your identity through other verification channels, but Aadhaar-linked numbers provide the most complete view.

What happens after I report a connection as "This is not my number"?

The request goes to the concerned telecom operator. The operator re-verifies the identity of the person using that connection. If the person cannot produce valid KYC documents matching the connection, the number is disconnected.

How long does it take for a reported connection to be blocked?

The timeline varies by operator and case complexity. The DoT analyses requests frequently and passes them to operators for action. Most verified reports result in disconnection within a few weeks.

Can I check connections for a family member?

TAFCOP requires OTP verification sent to the mobile number linked to the identity being checked. You would need access to that person's phone to complete verification. There is no proxy checking mechanism.

Is the Sanchar Saathi app mandatory on new phones?

The DoT has mandated pre-installation of the Sanchar Saathi app on smartphones sold in India. The app cannot be disabled or hidden, though it can be left unused. The mandate is intended to give every user immediate access to CEIR, TAFCOP, and Chakshu services.

Protecting Your Digital Identity Beyond TAFCOP

TAFCOP solves the detection problem. It does not prevent someone from attempting to use your identity in the first place. A few habits reduce your exposure:

• Never share OTPs with anyone, including people claiming to be from your bank or telecom operator.
• Avoid sharing Aadhaar copies unless absolutely necessary. Use masked Aadhaar or virtual IDs where accepted.
• Check your credit report periodically for accounts or inquiries you do not recognize.
• Use app-based authenticators or hardware keys for critical accounts instead of SMS-based OTPs where possible.
• Report suspicious calls and messages through the Chakshu module on Sanchar Saathi.

The combination of regular TAFCOP checks, cautious sharing of identity documents, and awareness of common fraud patterns creates a layered defense. No single tool stops identity misuse. Consistent habits do.

What This Means for You

Your mobile number is not just a contact detail. It is the authentication layer for your financial life, your digital accounts, and your government identity. TAFCOP gives you visibility into that layer. It shows you what exists, lets you remove what should not, and provides a documented trail when action is needed.

The portal is free. It takes three minutes. It requires nothing more than your phone and an OTP. The only thing standing between you and a clear picture of your telecom identity is the decision to check.

Open the portal. Look at the list. If something is unfamiliar, report it. If everything is accounted for, close the tab and go about your day with the quiet confidence that comes from knowing your digital identity is not being used against you.