India telecom rules require caller-ID apps to share spam reports with operators
India is tightening its anti-spam framework by bringing caller-ID and call-management apps into the telecom sector’s enforcement system. The move broadens the data available for action against spam and fraudulent calls, but it also opens a dispute over competition, data use, and compliance obligations for app providers.
Highlights
- India’s Telecom Regulatory Authority now requires caller-ID apps to share user spam reports with a telecom-run blockchain platform to strengthen anti-spam enforcement.
- Amendments expand oversight to include AI-enabled and autodialed calls, mandating advance disclosure to operators and categorizing undeclared A2P calls as spam subject to up to 5 paise per minute charges.
- Industry experts raise compliance and data-sharing concerns due to unclear requirements for what caller-ID apps must transmit and how user consent is managed under the new rules.
Revised anti-spam rules widen reporting duties
As first reported by TechCrunch, the Telecom Regulatory Authority of India on Friday amended its commercial communications rules to require apps that let users mark calls as spam or junk to pass those reports to a blockchain-based platform run by telecom operators. The platform is used to track commercial communications and enforce anti-spam measures across the industry.TRAI says the change is meant to expand the pool of spam reports that can be used against spammers by linking app-based reporting with telecom operators’ enforcement infrastructure. The updated rules also keep in place restrictions that prevent call-management apps from blanket blocking, filtering, or labeling calls from designated number series used for promotional, service, and transactional communications, although individual users can still block such calls on their own devices.
Truecaller calls the requirement a one-way exchange and says it hands commercially valuable proprietary data to telecom operators. The company says India is its largest market, with well over 350 million of its more than 500 million monthly active users globally, and it relies on community reports, automated detection, and other signals to identify and block spam calls.
The dispute comes as India continues to face spam and fraudulent calling at scale. In a February report, Truecaller says users in the country encounter around 42 billion spam calls in 2025, including calls that are blocked, labeled, or ignored, and the company says it blocks nearly 12 billion spam calls during the year.
Compliance questions and broader impact on automated calls
Regulatory specialists say the new requirement connects two different layers of the communications market, telecom operators that control the network and anti-spam system, and caller-ID apps that sit on top of that network to identify and filter calls. Sumeysh Srivastava of The Quantum Hub says that creates technical and jurisdictional questions, including what standards apps must follow and how the rule is enforced against companies that are not telecom operators.Uncertainty also remains over the scope of data sharing. Kazim Rizvi of The Dialogue says there is a material difference between requiring an app to transmit a specific user spam report and forcing it to share broader datasets, reputation signals, or analytical systems. He says the rules need more clarity on what information must be sent, how users are notified or asked for consent, and how the data can later be retained and used.
The amendments also expand oversight of software-driven and AI-enabled calling. Calls made automatically, without a person directly dialing the number, now fall under India’s application-to-person framework, including robocalls and calls using prerecorded or artificial voices, and companies must declare such use and the numbers involved to telecom operators in advance. Undeclared A2P calls are treated as spam, while operators are allowed to levy a termination charge of up to 5 paise per minute on those calls, with some designated number ranges exempt.
Industry observers say the definition may still prove difficult in practice. Srivastava says the key test is how a call is initiated rather than whether it uses an AI-generated voice, while Rizvi warns the framework could stretch to software-assisted calls where a person is still involved, such as contact center or click-to-call services.
Our earlier article covered the rising cumulative impact of UK regulation on businesses and public services, as new measures add layers of compliance, paperwork, and legal risk. It highlighted how these requirements can raise costs, slow activity in sectors like housing, and undermine professional discretion in public services, feeding broader concerns about productivity and bureaucracy.