India Mandates Caller-ID Apps Share Spam Data With Telcos

India’s telecom regulator has mandated that caller-ID applications share spam data with operators, a move designed to centralize enforcement against unwanted communications. The Telecom Regulatory Authority of India (TRAI) amended its commercial communication rules on Friday, requiring apps that allow users to flag calls as junk to transmit those reports to a blockchain-based platform operated by telcos. This infrastructure is intended to track commercial messages and enforce anti-spam regulations more effectively.

The regulator stated that the amendment aims to expand the dataset available for combating spammers by linking user-generated reports from third-party apps directly to the telecommunications industry’s enforcement mechanisms. By integrating these reports into a unified system, TRAI hopes to create a more robust defense against fraudulent and unsolicited calls.

Industry Pushback and Market Dynamics

Truecaller, the Stockholm-based company behind one of the most popular call-management apps, immediately criticized the ruling. The company described the requirement as a “one-way exchange” that is “anti-competitive,” arguing that it forces the transfer of commercially valuable data from private app developers to state-backed or operator-controlled entities. Truecaller emphasized that it uses community reports alongside automated detection signals to identify spam, making this data integral to its service model.

India represents Truecaller’s largest market, hosting over 350 million of its global 500 million monthly active users. The scale of the problem in the region is significant. In a February report, Truecaller noted that Indian users encountered approximately 42 billion spam calls in 2025. Of these, the company blocked nearly 12 billion calls, highlighting the massive volume of unwanted traffic that platforms are managing daily.

This regulatory clash is not unprecedented. Truecaller has previously objected to restrictions that prevented apps from automatically labeling calls from certain government-designated number ranges as spam. The Swedish firm argued that such exemptions could allow unwanted calls to bypass filters. While the new amendments retain this restriction, they bar apps from blanket blocking or tagging calls from designated series used for promotional, service, and transactional purposes. Individual users remain free to block such calls manually on their devices.

A Truecaller spokesperson commented on the tension between the company’s compliance efforts and the new mandates: “While our data and user sentiment clearly show that spam has skyrocketed due to this free pass to spammers, we have been compliant with this since late last year.”

Technical and Legal Ambiguities

Experts suggest the new rule creates complex intersections between network infrastructure and application layer services. Sumeysh Srivastava, a partner at the New Delhi-based consulting firm The Quantum Hub, explained that the change bridges two distinct layers. Telecom operators provide the underlying network and run the blockchain system, while caller-ID apps operate on top of that network to identify and filter calls.

Srivastava told TechCrunch that this structure raises technical and jurisdictional questions. Key uncertainties include the reporting standards apps must follow and how enforcement will apply to non-telco companies. A March draft proposal suggested using India’s IT laws to enforce these requirements, but the final announcement did not clarify if this mechanism remains in place.

Furthermore, the scope of data sharing remains vague. Kazim Rizvi, founding director of the policy think tank The Dialogue, pointed out that transmitting specific user-made spam reports differs materially from sharing broader datasets, reputation signals, or analytical systems. He noted that the rules need clarity on what information must be transmitted, how user consent is obtained, and how that data can be retained and used.

TRAI did not respond to inquiries regarding the specific information apps must share or whether the rule applies to native spam-reporting features in smartphone operating systems like Android and iOS.

Regulation of AI and Automated Calls

Beyond traditional spam filtering, the amendments address the rising use of AI voice agents and software-driven calling. Calls made automatically without direct human dialing now fall under TRAI’s application-to-person (A2P) framework. This includes robocalls and those utilizing prerecorded or artificial voices.

Companies employing such systems must declare their usage and associated phone numbers to telecom operators in advance. Undeclared A2P calls will be classified as spam. Satya N. Gupta, a former additional secretary at TRAI, clarified that the rules do not ban businesses from using AI or automated technologies but require transparency regarding their use.

Operators are permitted to charge up to 5 paise per minute for terminating A2P calls, though certain designated number ranges are exempt. However, the definition of A2P may be broader than intended. Rizvi warned that the new definition could encompass calls made using software even when a person is involved, such as contact center interactions or click-to-call services. Without clear distinctions, he cautioned that the A2P category risks becoming overly broad relative to the regulatory harm it aims to address.