India has significantly tightened its regulatory grip on unsolicited communications by mandating that caller-identification and call-management applications must share user-generated spam reports with telecom operators. This new directive, implemented by the Telecom Regulatory Authority of India (TRAI), aims to bolster the nation’s anti-spam infrastructure by integrating third-party data into the official enforcement framework. However, the move has immediately drawn sharp criticism from leading app providers, who argue it is anti-competitive and could undermine user privacy.
The core of the amendment, enacted on Friday, compels applications that allow users to flag unwanted calls as spam or junk to transmit these reports to a blockchain-based platform managed by telecom operators. This platform is central to India’s efforts to track commercial communications and enforce its anti-spam regulations. TRAI’s stated objective is to broaden the scope and accuracy of spam reporting, thereby enhancing the effectiveness of actions taken against persistent spammers. By linking the vast datasets collected by popular caller-ID apps with the telecom industry’s enforcement mechanisms, the regulator seeks to create a more robust defense against the deluge of unwanted calls plaguing Indian subscribers.
Truecaller, a prominent player in the caller-identification and spam-blocking market, has been one of the most vocal critics. The Stockholm-based company, which boasts India as its largest market with over 350 million of its global 500 million monthly active users residing there, decried the new rules as a "one-way exchange" that is fundamentally "anti-competitive." Their concern stems from the perceived transfer of commercially valuable user data – insights gleaned from millions of spam reports – from app developers to telecom operators, who are positioned as both infrastructure providers and enforcers. Truecaller, like many similar applications, relies on a combination of community-driven reports, automated detection algorithms, and other proprietary signals to identify and block spam calls.
The regulatory action comes at a time when India is grappling with an unprecedented scale of spam and fraudulent communications. A February report by Truecaller itself highlighted the magnitude of the problem, revealing that its users in India encountered approximately 42 billion spam calls in 2025 alone. This figure encompasses calls that were blocked, labeled as spam, or simply ignored by users. The company further reported blocking nearly 12 billion such calls during the same period. The sheer volume underscores the urgent need for effective solutions, and TRAI’s latest move is an attempt to harness the collective intelligence of app users to combat this menace.
This is not the first instance of friction between Truecaller and the Indian telecom regulator. In the past, the company has raised objections to restrictions that prevented call-management apps from automatically flagging calls originating from certain government-designated number ranges as spam. Truecaller argued that such exemptions could allow a significant volume of unwanted calls to bypass their filtering mechanisms, effectively creating loopholes in spam protection. While the recent amendments maintain this restriction, barring call-management apps from blanket blocking, filtering, or spam-tagging calls from designated number series used for promotional, service, and transactional communications, individual users retain the autonomy to block these calls on their personal devices. A Truecaller spokesperson acknowledged this ongoing restriction, stating, "While our data and user sentiment clearly show that spam has skyrocketed due to this free pass to spammers, we have been compliant with this since late last year."
The new regulatory framework attempts to bridge two distinct layers of the telecommunications ecosystem: the underlying network infrastructure and enforcement systems managed by telecom operators, and the top-layer applications that provide user-facing call management and identification services. Sumeysh Srivastava, a partner at The Quantum Hub, a New Delhi-based consulting firm specializing in telecom regulation, explained that the amendments seek to integrate these layers. However, he also highlighted potential technical and jurisdictional challenges. These include the need for standardized reporting protocols for apps and the enforcement mechanisms applicable to companies that are not themselves licensed telecom operators. A draft proposal from March indicated the potential use of India’s IT laws for enforcement, but the final rules’ specific approach to this remains unclear.
Further ambiguity surrounds the precise nature and extent of data that apps will be compelled to share. Kazim Rizvi, founding director of The Dialogue, a New Delhi-based policy think tank, pointed out a critical distinction between requiring the transmission of specific user-reported spam flags and demanding the sharing of broader datasets, reputation signals, or analytical systems used by apps to identify suspicious calls. Rizvi emphasized the need for clarity on what specific information must be transmitted, how users will be informed and provide consent, and how this data will be subsequently retained and utilized. TRAI, however, has not yet responded to queries regarding the specific data requirements for apps, nor whether the new rules will extend to spam-reporting features integrated into smartphone operating systems like Android and iOS.
Evolving Landscape: AI-Powered Calls Under New Scrutiny
Beyond user-reported spam, the amendments also address the burgeoning use of software and artificial intelligence (AI) voice agents in making calls. A significant development is the classification of calls initiated automatically, without direct human dialing, under TRAI’s application-to-person (A2P) framework. This broad category now encompasses robocalls and calls utilizing prerecorded or artificial voices.
Companies employing such automated calling systems will be required to disclose their usage and the associated phone numbers to their respective telecom operators in advance. TRAI has stipulated that any undeclared A2P calls will be treated as spam. Srivastava clarified that the determining factor for classification under this new rule is the initiation of the call, rather than solely the use of AI-generated voices. This distinction leaves some ambiguity regarding AI-assisted calls that involve human intervention in their initiation.
Satya N. Gupta, a former additional secretary at TRAI, noted that the new regulations do not aim to restrict businesses from leveraging AI or other automated calling technologies. Instead, the focus is on ensuring transparency and accountability by mandating disclosure to telecom operators. Telecom operators will also gain the authority to levy a termination charge of up to five paise (approximately 0.052 cents) per minute on A2P calls. However, specific designated number ranges will be exempt from this charge. Rizvi expressed concern that this broad definition of A2P could inadvertently encompass calls made using software even when a human is involved, such as those from contact centers and click-to-call services. He cautioned that without a clearer distinction, the A2P category might extend beyond the intended regulatory scope and addressable harm.
The timeline leading up to these amendments indicates a phased approach to tackling unsolicited communications. TRAI has been actively engaged in developing and refining its anti-spam framework over several years, with public consultations and draft proposals serving as precursors to final regulations. The initial focus was on establishing a robust system for tracking commercial communications, which led to the development of the blockchain-based platform. Subsequent steps have involved integrating various data sources and addressing new technological challenges, such as the rise of AI in telecommunications. The current amendments represent a significant escalation in the regulatory approach, moving from infrastructure-level controls to demanding data integration from third-party application providers.
The implications of these new rules are far-reaching. For telecom operators, it presents an opportunity to enhance their network security and customer experience, potentially leading to increased subscriber loyalty. They will be tasked with managing a more complex data stream and integrating it into their existing enforcement mechanisms. For app developers like Truecaller, the challenge lies in adapting to new data-sharing obligations while safeguarding their proprietary technologies and user trust. The "anti-competitive" claims suggest a concern that telecom operators could leverage this data to develop their own competing services or gain an unfair advantage in the market.
Furthermore, the broader impact on the Indian digital ecosystem warrants consideration. Clarity on data privacy, user consent, and the specific nature of shared information will be crucial for ensuring that the regulatory goals are met without infringing on user rights or stifling innovation. The success of these new rules will ultimately depend on their effective implementation, the transparency of the enforcement process, and the ability of all stakeholders to collaborate towards a spam-free communication environment. As India continues to navigate the complexities of digital communication, these regulatory adjustments signal a determined effort to bring order to a rapidly evolving landscape.
About the Author
