India Mandates Caller-ID Apps Share Spam Data with Telecom Operators

India’s telecommunications regulator has expanded its anti-spam framework, requiring caller-ID and call-management applications to transmit user-generated spam reports to a blockchain-based system operated by telecom providers. The amendment, issued by the Telecom Regulatory Authority of India (TRAI) on Friday, aims to integrate community-sourced data with the industry’s enforcement infrastructure.

The move has drawn sharp criticism from Truecaller, which labeled the mandate an “anti-competitive” one-way exchange that transfers commercially valuable data from app developers to telecom operators. Truecaller, headquartered in Stockholm, operates in India as its largest market, with more than 350 million of its 500 million global monthly active users located in the country. The company relies on community reporting combined with automated detection to identify and block unwanted calls.

The regulatory change addresses what TRAI described as a massive scale of spam and fraudulent calling in India. According to Truecaller’s February report, users in the country encountered approximately 42 billion spam calls in 2025, with the firm blocking nearly 12 billion of those attempts.

This is not the first dispute between the Swedish company and Indian regulators regarding spam control. In July, Truecaller objected to previous restrictions that prevented call-management apps from automatically labeling calls from certain government-designated number ranges as spam. The company argued those exemptions allowed unwanted calls to bypass filters. The latest amendments retain that restriction, prohibiting blanket blocking or spam-tagging of calls from number series designated for promotional, service, and transactional communications, though individual users may still block such calls on their devices.

A Truecaller spokesperson stated, “While our data and user sentiment clearly show that spam has skyrocketed due to this free pass to spammers, we have been compliant with this since late last year.”

Experts note the new rules create technical and jurisdictional complexities. Sumeysh Srivastava, a partner at the consulting firm The Quantum Hub, explained that the regulations bridge two distinct layers: telecom operators provide the network and run the blockchain anti-spam system, while caller-ID apps operate on top of that network. Srivastava highlighted uncertainties regarding the reporting standards apps must follow and how enforcement will apply to non-telecom companies.

A March draft proposed using India’s IT laws to enforce these requirements, but it remains unclear if that mechanism was retained in the final rules. Kazim Rizvi, founding director of the policy think tank The Dialogue, pointed out that the distinction between sharing a specific spam report and sharing broader datasets or analytical systems is critical. He emphasized that the rules need clarification on what information must be transmitted, how user consent is obtained, and how data is retained and used.

TRAI did not respond to requests for comment regarding whether the rules would apply to spam-reporting features integrated into smartphone operating systems such as Android and iOS.

In addition to caller-ID regulations, the amendments address the rise of AI-powered calling. Calls generated automatically without direct human dialing, including robocalls and those using prerecorded or artificial voices, now fall under TRAI’s application-to-person (A2P) framework. Companies utilizing these systems must declare their use and associated phone numbers to telecom operators in advance; undeclared A2P calls will be classified as spam.

Srivastava noted that the key regulatory test focuses on how a call is initiated rather than solely on whether AI voice is used, creating ambiguity for AI-assisted calls involving human initiation. Satya N. Gupta, a former additional secretary at TRAI, clarified that the rules do not ban businesses from using AI or automated calling technologies but require disclosure to operators.

Telecom operators are permitted to charge up to 5 paise per minute for terminating A2P calls, with exemptions for certain designated number ranges. However, Rizvi warned that the broad definition could encompass contact center and click-to-call services where humans are still involved, potentially widening the regulatory scope beyond the intended harm.