India’s telecommunications regulator has significantly tightened its ongoing campaign against unsolicited commercial communication, introducing sweeping regulatory amendments that require caller-ID and call-management applications to directly share user-generated spam reports with telecom operators. The ruling has immediately drawn sharp pushback from industry heavyweights, most notably Truecaller, which has denounced the mandate as anti-competitive.
On Friday, the Telecom Regulatory Authority of India (TRAI) announced amendments to the regulatory framework governing commercial communications. Under the updated rules, any caller-ID or call-management application that permits users to flag incoming calls as spam or junk is now legally mandated to route those specific reports into a centralized, blockchain-based platform. This specialized infrastructure is maintained and overseen by telecom operators to track commercial communications and enforce anti-spam compliance across the nation.
According to TRAI, the core intention behind the policy shift is to broaden the pool of actionable intelligence available in the ongoing fight against aggressive spammers and fraudulent operators. By bridging the gap between crowdsourced data collected by third-party applications and the foundational enforcement infrastructure controlled by the telecom industry, the regulator aims to streamline how spam is identified and mitigated at scale.
However, the move has ignited fierce debate over data ownership and market fairness. In statements provided to TechCrunch, Stockholm-based Truecaller argued that the requirement amounts to a "one-way exchange" that heavily favors telecom operators. The company labeled the mandate "anti-competitive," asserting that it forces call-management applications to surrender commercially valuable user insights and proprietary data assets to telecom network providers.
The stakes are exceptionally high for Truecaller, as India serves as its single largest and most critical market. The company boasts well over 350 million users in the country, contributing significantly to its broader global user base of more than 500 million monthly active users. Truecaller relies on a combination of community-driven reporting, automated pattern detection, and various contextual signals to identify, label, and block unwanted calls on behalf of consumers.
This regulatory tightening comes at a time when India continues to grapple with an unprecedented volume of spam and fraudulent communication. In an extensive transparency and threat report published in February, Truecaller revealed that its users in India encountered approximately 42 billion spam calls throughout 2025 alone. This staggering figure encompasses calls that were ultimately blocked, flagged with warning labels, or simply ignored by recipients. Furthermore, the company reported that its systems successfully intercepted and blocked nearly 12 billion spam calls within that same twelve-month period.
The recent mandate marks the latest chapter in a series of policy disagreements between Truecaller and Indian regulatory authorities regarding the appropriate methodologies for handling unwanted communications. Previously, the Swedish firm strongly objected to regulatory restrictions that prevented call-management applications from automatically applying warning labels to calls originating from certain government-designated number ranges. Truecaller argued at the time that such mandatory exemptions created dangerous loopholes that allowed unwanted promotional and commercial calls to bypass its sophisticated filtering mechanisms.
Despite these industry objections, Friday’s amendments explicitly uphold those restrictions. Call-management applications remain legally barred from implementing blanket blocking, automated filtering, or spam-tagging procedures on calls originating from designated number series officially allocated for promotional, service, and transactional communications. Nevertheless, TRAI clarified that individual users still retain the ultimate autonomy to manually block such calls on their personal devices if they choose to do so.
"While our data and user sentiment clearly show that spam has skyrocketed due to this free pass to spammers, we have been compliant with this since late last year," a Truecaller spokesperson noted in response to the finalized rules.
Industry analysts emphasize that the new regulation introduces complex structural intersections within India’s telecommunications ecosystem. Sumeysh Srivastava, a partner at New Delhi-based consulting firm The Quantum Hub who leads its telecom-regulation policy work, explained that the policy effectively bridges two distinct technological layers. On one level, traditional telecom operators provide the underlying network connectivity and manage the blockchain-based anti-spam ledger. On another level, caller-ID applications operate on top of that network layer to provide real-time identification and user-level filtering.
This architectural overlap raises notable technical and jurisdictional questions, Srivastava observed. Key uncertainties include the exact reporting standards and data formats that third-party applications will be forced to adopt, as well as how compliance will be enforced against software companies that do not hold traditional telecommunications licenses.
A preliminary draft released in March had proposed leveraging India’s broader information technology laws to enforce compliance among non-telecom entities. However, Srivastava pointed out that the official announcement of the final rules omitted explicit confirmation of whether that specific enforcement mechanism had been retained.
Lingering ambiguities also persist regarding the precise scope of information that apps will be legally obligated to transmit. Kazim Rizvi, founding director of New Delhi-based policy think tank The Dialogue, pointed out a fundamental technical distinction. He noted that requiring an application to transmit a specific, discrete spam report explicitly submitted by an individual user is materially different from compelling it to surrender broader analytical datasets, underlying reputation signals, or proprietary machine-learning systems used to detect suspicious calling patterns.
According to Rizvi, the regulatory framework will ultimately require explicit clarification regarding what specific categories of data must be shared, the exact mechanisms for securing user notification and consent, and the legal parameters governing how telecom operators can subsequently retain and utilize that transferred data. TRAI did not immediately respond to inquiries regarding the exact nature of the data-sharing obligations or whether the rules would extend to built-in spam-reporting features natively integrated into major smartphone operating systems and dialers like Android and iOS.
New Rules for AI-Powered Calls
Beyond the data-sharing mandates for caller-ID applications, TRAI’s comprehensive amendments directly target the rapidly accelerating deployment of automated software and artificial intelligence voice agents for commercial outreach. Under the updated regulations, any calls initiated automatically without direct human intervention—including robocalls and communications utilizing prerecorded or synthetic artificial voices—will now fall squarely under TRAI’s application-to-person (A2P) framework.
To comply with the updated mandates, enterprises utilizing automated dialing systems and AI voice agents are now required to formally declare their use and register all associated phone numbers with their respective telecom operators in advance. TRAI warned that any automated A2P calls launched without prior declaration will be automatically classified and treated as unlawful spam.
Analyzing the practical implementation of this rule, Srivastava noted that the core regulatory test relies on the technical method by which a call is initiated, rather than a simplistic evaluation of whether an AI-generated voice is employed. This leaves a degree of regulatory ambiguity surrounding hybrid calling scenarios, such as AI-assisted workflows that still involve a human initiating the connection.
Echoing this perspective, Satya N. Gupta, a former additional secretary at TRAI, pointed out that the new directives do not outright prohibit businesses from leveraging artificial intelligence or other advanced communication technologies. Instead, the framework establishes a mandatory transparency regime, requiring commercial entities to disclose their technological capabilities directly to the telecom operators facilitating their traffic.
To further regulate this segment, telecom operators have been granted authorization to levy a termination charge of up to 5 paise, equivalent to approximately 0.052 cents, per minute on qualifying A2P calls. However, exemptions will apply to calls routed through specific designated number ranges.
Rizvi cautioned that the breadth of the new definitions could introduce unintended regulatory consequences. He explained that the classification risks encompassing standard business communications, such as software-assisted calls originating from conventional contact centers or click-to-call digital services, even when human agents are actively participating in the conversation. Without precise statutory distinctions, Rizvi warned, the A2P regulatory category risks expanding far beyond the specific harms it was originally designed to address.
Leave a Reply