India forces caller-ID apps to feed spam reviews to telcos

India has prolonged its anti-spam regime to require caller-ID and call-management apps to share customers’ spam reviews with telecom operators, prompting spam-blocking app maker Truecaller to name the ruling anti-competitive.

On Friday, the Telecom Regulatory Authority of India (TRAI), the nation’s telecom regulator, amended guidelines governing business communications, making it necessary for caller-ID and call-management apps that permit customers flag calls as spam or junk to ship these reviews to a blockchain-based platform maintained by telecom operators. The platform tracks business communications and enforces anti-spam guidelines.

The change, TRAI stated, is meant to broaden the pool of spam reviews accessible for motion towards spammers, successfully connecting reviews collected by apps with the telecom business’s enforcement infrastructure.

Nonetheless, Truecaller advised TechCrunch that it sees this requirement as a “one-way trade” that’s “anti-competitive,” arguing that it transfers commercially worthwhile information from call-management apps like itself to telecom operators.

India is Truecaller’s largest market, accounting for effectively over 350 million of its greater than 500 million month-to-month energetic customers globally. The Stockholm-based firm makes use of group reviews alongside automated detection and different indicators to determine and block spam calls.

The foundations come as India grapples with spam and fraudulent calls at monumental scale. In its report in February, Truecaller stated its customers within the nation encountered round 42 billion spam calls in 2025, together with calls that had been blocked, labeled, or ignored. The corporate additionally acknowledged that it blocked almost 12 billion spam calls throughout the 12 months.

It’s not the primary time Truecaller and the Indian regulator have been at odds over how spam calls needs to be dealt with. The Swedish firm beforehand objected to restrictions stopping call-management apps from routinely labeling calls from sure government-designated quantity ranges as spam. It argued that the exemption might permit undesirable calls to flee its filters.

Nonetheless, Friday’s amendments retain that restriction and have barred call-management apps from blanket blocking, filtering, or spam-tagging calls from designated quantity collection used for promotional, service, and transactional communications. Particular person customers can nonetheless select to dam such calls on their very own units, the regulator stated.

“Whereas our information and consumer sentiment clearly present that spam has skyrocketed as a consequence of this free go to spammers, we have now been compliant with this since late final 12 months,” a Truecaller spokesperson stated.

Sumeysh Srivastava, a companion at New Delhi-based consulting agency The Quantum Hub, who leads its telecom-regulation coverage work, stated the most recent change bridges two distinct layers: Telecom operators present the underlying community and run the blockchain-based anti-spam system, whereas caller-ID apps function on high of the community to determine and filter calls.

That raises technical and jurisdictional questions, Srivastava advised TechCrunch, together with what reporting requirements apps should observe and the way the requirement will probably be enforced towards corporations that aren’t themselves telecom operators.

A March draft proposed (PDF) utilizing India’s IT legal guidelines to implement the requirement. Nonetheless, Srivastava identified that the brand new announcement didn’t say whether or not that enforcement mechanism was retained within the last guidelines.

Additionally it is unclear how a lot data the apps will even have to offer underneath the up to date regulation. Kazim Rizvi, founding director of New Delhi-based coverage assume tank The Dialogue, advised TechCrunch that requiring an app to transmit a particular spam report made by a consumer is materially completely different from requiring it to share the broader datasets, fame indicators, or analytical techniques it makes use of to determine suspicious calls.

The foundations will want readability on what data have to be transmitted, how customers are notified or requested for consent, and the way that information can subsequently be retained and used, Rizvi stated.

TRAI didn’t reply to TechCrunch’s questions on what data apps can be required to share and whether or not the rule would additionally apply to spam-reporting options constructed into smartphone working techniques and dialers reminiscent of Android and iOS.

New guidelines for AI-powered calls

The amendments additionally handle the rising use of software program and AI voice brokers to make calls. Calls made routinely, with no individual immediately dialing the quantity, will now fall underneath TRAI’s application-to-person (A2P) framework. That features robocalls and calls utilizing prerecorded or synthetic voices.

Firms utilizing such techniques should declare their use and the telephone numbers concerned to their telecom operators upfront. Undeclared A2P calls will probably be handled as spam, TRAI stated.

The important thing check, Srivastava stated, is how a name is initiated, quite than merely whether or not it makes use of an AI-generated voice, leaving some uncertainty round AI-assisted calls that contain human initiation.

Satya N. Gupta, a former further secretary at TRAI, advised TechCrunch that the brand new guidelines don’t limit companies from utilizing AI or different automated calling applied sciences, however as an alternative require them to reveal their use to telecom operators.

Telecom operators may even be allowed to levy a termination cost of as much as 5 paise (about 0.052 cents) per minute on A2P calls. Nonetheless, calls made utilizing sure designated quantity ranges will probably be exempt.

Rizvi advised TechCrunch that the brand new definition might additionally cowl calls made utilizing software program even when an individual continues to be concerned, reminiscent of calls from contact facilities and click-to-call providers. “With out that distinction, the A2P class dangers turning into broader than the regulatory hurt it’s supposed to handle,” he stated.