India’s Anti-Spam Regime Expands, Mandating Data Sharing from Caller-ID Apps and Prompting Truecaller’s Anti-Competitive Concerns

India has significantly escalated its efforts to combat unsolicited commercial communications, extending its anti-spam regulatory framework to mandate that caller-ID and call-management applications share users’ spam reports directly with telecom operators. This sweeping change, spearheaded by the Telecom Regulatory Authority of India (TRAI), has been met with strong opposition from leading spam-blocking app maker Truecaller, which has publicly labeled the ruling as "anti-competitive" and a "one-way exchange" of valuable data.

On Friday, the TRAI, the country’s principal telecom regulator, formally amended the existing rules governing commercial communications. These revised regulations now make it compulsory for all caller-ID and call-management applications that empower users to flag calls as spam or junk to transmit these reports to a specialized blockchain-based platform. This platform, which is maintained and operated by India’s telecom service providers, serves as a central repository for tracking commercial communications and is instrumental in enforcing the nation’s stringent anti-spam rules. The regulator’s stated objective behind this amendment is to significantly broaden the collective pool of spam reports available for swift and decisive action against persistent spammers, thereby forging a crucial link between the valuable data gathered by third-party applications and the telecom industry’s established enforcement infrastructure.

However, the directive has ignited a fierce debate within the digital ecosystem. Truecaller, a prominent global player in call identification and spam blocking, conveyed its apprehension to TechCrunch, articulating that it perceives this new requirement as fundamentally "anti-competitive." The company argues that the mandate constitutes a "one-way exchange" that effectively compels call-management applications like itself to transfer commercially valuable data to telecom operators, potentially creating an uneven playing field. This concern is particularly acute for Truecaller, given India’s immense strategic importance to its global operations. The nation accounts for well over 350 million of its more than 500 million monthly active users worldwide, making it Truecaller’s single largest market. The Stockholm-based company’s core methodology for identifying and blocking spam calls relies heavily on a sophisticated blend of community reports, advanced automated detection algorithms, and various other proprietary signals. The forced sharing of these community-sourced spam reports, which are central to its service and market differentiation, is therefore seen as a direct threat to its business model and competitive standing.

India’s persistent struggle with spam and fraudulent calls is a challenge of colossal proportions, necessitating robust regulatory interventions. Truecaller’s own report in February highlighted the staggering scale of the problem, revealing that its users across the country encountered approximately 42 billion spam calls in 2025 alone. This staggering figure encompasses calls that were either automatically blocked, explicitly labeled as spam, or simply ignored by users. During the same period, the company reported that it successfully blocked nearly 12 billion spam calls, underscoring both the severity of the issue and the efficacy of its platform. The sheer volume of unwanted calls underscores the urgent need for comprehensive solutions, but also explains why data from leading apps is so valuable.

This latest regulatory skirmish is not the first instance of a disagreement between Truecaller and the Indian telecom regulator concerning the optimal approach to handling spam calls. The Swedish company had previously raised strong objections to restrictions that prevented call-management applications from automatically labeling calls originating from specific government-designated number ranges as spam. Truecaller’s argument at the time was that such exemptions could inadvertently create significant loopholes, allowing unwanted or malicious calls to circumvent its advanced filtering mechanisms and reach unsuspecting users.

Despite these earlier objections, Friday’s amendments not only retain but reinforce this controversial restriction. The new rules explicitly bar call-management applications from implementing blanket blocking, filtering, or spam-tagging for calls originating from designated number series. These specific series are typically reserved for legitimate promotional, service, and transactional communications. However, the regulator has clarified that individual users retain the autonomy to manually block such calls on their personal devices if they deem them unwanted. A Truecaller spokesperson, while acknowledging compliance, noted the adverse impact of this policy: "While our data and user sentiment clearly show that spam has skyrocketed due to this free pass to spammers, we have been compliant with this since late last year." This statement highlights the ongoing tension between regulatory objectives and the practical realities of spam mitigation.

Sumeysh Srivastava, a distinguished partner at The Quantum Hub, a New Delhi-based consulting firm specializing in telecom regulation policy, offered valuable insights into the intricate dynamics of the latest regulatory change. Srivastava explained that the new mandate attempts to bridge two inherently distinct operational layers within the telecom ecosystem. On one hand, telecom operators are responsible for providing the foundational network infrastructure and are now tasked with running the blockchain-based anti-spam system. On the other hand, caller-ID applications operate "on top" of this network, employing sophisticated algorithms and user-generated data to identify and filter calls.

This architectural integration, Srivastava pointed out to TechCrunch, inevitably raises a multitude of complex technical and jurisdictional questions. Key among these are the precise reporting standards that applications will be compelled to adhere to, ensuring uniformity and compatibility with the telcos’ platform. Furthermore, significant questions loom regarding how the new requirement will be effectively enforced, particularly against companies that are not themselves licensed telecom operators within India, such as Truecaller. A draft proposal released in March had suggested leveraging India’s existing Information Technology (IT) laws to enforce this requirement. However, Srivastava noted a critical omission: the final announcement did not explicitly state whether this specific enforcement mechanism was retained in the finalized rules, leaving an element of uncertainty regarding the legal teeth of the new regulations.

Adding to the call for clarity, Kazim Rizvi, the founding director of The Dialogue, a prominent New Delhi-based policy think tank, emphasized the crucial distinction between various types of data. Rizvi told TechCrunch that requiring an application to transmit a specific spam report generated by an individual user is fundamentally different from compelling it to share broader datasets, proprietary reputation signals, or the underlying analytical systems it employs to identify suspicious calls. The latter represents a much more significant transfer of intellectual property and commercially sensitive information.

Consequently, Rizvi stressed that the new rules will necessitate meticulous clarification on several fronts: precisely what quantum and type of information must be transmitted, the mechanisms through which users will be notified or asked for their explicit consent for such data sharing, and the parameters governing how that shared data can subsequently be retained, processed, and utilized by telecom operators. Without such granular clarity, there are substantial risks to user privacy and fair competition. Notably, TRAI declined to respond to TechCrunch’s specific inquiries regarding the exact nature of the information apps would be required to share, and crucially, whether the rule would also extend to spam-reporting features natively built into major smartphone operating systems and dialers, such as Android and iOS, which represent a significant segment of the market.

New Rules for AI-Powered Calls

Beyond the mandate for caller-ID apps, the recent amendments also introduce comprehensive regulations addressing the burgeoning use of software and Artificial Intelligence (AI) voice agents for making calls. In a forward-looking move, calls made automatically, without direct human dialing, will now fall squarely under TRAI’s existing application-to-person (A2P) framework. This expanded definition encompasses a wide array of automated communications, including traditional robocalls and calls employing prerecorded or artificially generated voices.

Under the new directives, companies intending to utilize such automated calling systems will be obligated to proactively declare their use and the specific phone numbers involved to their respective telecom operators in advance. A critical provision states that any undeclared A2P calls will be automatically categorized and treated as spam by the regulatory framework, subjecting them to potential blocking and penalties.

Sumeysh Srivastava highlighted that the "key test" for categorizing these calls lies in how a call is initiated, rather than solely whether it utilizes an AI-generated voice. This distinction leaves some ambiguity regarding AI-assisted calls where human initiation is still involved, such as agents using AI tools to enhance their conversational abilities but still manually dialing or initiating the call. This nuance will require further interpretation and practical guidelines to avoid unintended consequences.

Satya N. Gupta, a former additional secretary at TRAI, clarified to TechCrunch that the new rules are not designed to restrict businesses from leveraging AI or other advanced automated calling technologies. Instead, their primary intent is to ensure transparency and accountability by requiring these businesses to disclose their use of such technologies to telecom operators. This disclosure allows operators to better manage network traffic, identify potential misuse, and enforce anti-spam measures more effectively.

To further regulate this segment, telecom operators will now be authorized to levy a termination charge of up to 5 paise (approximately 0.052 cents) per minute on A2P calls. This charge aims to create a disincentive for excessive or unwanted automated calls and to compensate operators for the network resources consumed. However, calls made using certain designated number ranges, typically reserved for critical services or public interest communications, will be exempt from this termination charge, ensuring that essential automated communications remain unburdened.

Kazim Rizvi expressed a cautionary note regarding the breadth of the new A2P definition. He told TechCrunch that without careful distinctions, the expanded definition could inadvertently encompass calls made using software even when a human is still actively involved, such as calls originating from contact centers or those initiated via click-to-call services. Rizvi articulated a significant concern: "Without that distinction, the A2P category risks becoming broader than the regulatory harm it is intended to address." Such an overly broad interpretation could inadvertently stifle legitimate business communications, increase operational costs for customer service operations, and ultimately disadvantage both businesses and consumers. Precision in defining "automated" versus "human-initiated but software-assisted" will be crucial for the effective and equitable implementation of these new rules.

The comprehensive amendments by TRAI underscore India’s aggressive stance against spam and unsolicited communications, reflecting a determination to harness technology and regulatory power to protect its vast subscriber base. While the intent is clear, the implementation of these complex rules, particularly concerning data sharing and the nuanced definition of AI-powered calls, will undoubtedly present significant challenges and require ongoing clarification and adaptation. The outcomes will shape the future landscape of digital communication and competition in one of the world’s largest telecom markets.