India mandates spam report sharing for caller-ID apps

New Regulation on Caller-ID Apps in India

India's Telecom Regulatory Authority (TRAI) has introduced a regulation requiring caller-ID and call-management applications to share user-generated spam reports with telecom operators. This move is aimed at enhancing the enforcement of anti-spam measures across the telecommunications sector.

Details of the Regulation

The regulation, introduced on September 18, 2026, mandates that apps allowing users to flag calls as spam must transmit these reports to a blockchain-based platform managed by telecom operators. This platform is designed to track commercial communications and enforce anti-spam rules more effectively. TRAI stated that the goal is to expand the pool of spam reports available for action against spammers, thereby improving the overall spam management system.

Truecaller's Response

Truecaller, a prominent spam-blocking app with over 500 million monthly active users globally, has expressed concerns regarding the new requirement. The company argues that this regulation constitutes a "one-way exchange" of data, which they believe is anti-competitive. Truecaller maintains that it is transferring valuable user data to telecom operators without receiving any reciprocal benefits. India represents Truecaller's largest market, with more than 350 million users who reported encountering approximately 42 billion spam calls in 2025.

Implications for Spam Management

The regulation is part of India's broader efforts to combat the rampant spam and fraudulent calls that have plagued the telecommunications landscape. Truecaller reported blocking nearly 12 billion spam calls in 2025, highlighting the scale of the issue. However, the new rules retain previous restrictions that prevent call-management apps from automatically labeling calls from certain government-designated number ranges as spam, which Truecaller argues could allow unwanted calls to bypass its filters.

Technical and Jurisdictional Questions

Experts have raised concerns regarding the technical and jurisdictional implications of the new regulation. Sumeysh Srivastava, a partner at The Quantum Hub, noted that the requirement connects two distinct layers: telecom operators, who manage the network and the blockchain system, and caller-ID apps, which filter calls. Questions remain about what specific reporting standards will be enforced and how compliance will be monitored for non-telecom companies.

Clarity Needed on Data Sharing

There is ambiguity surrounding the specifics of what data caller-ID apps will be required to share. Kazim Rizvi, director of The Dialogue, emphasized that the regulation's effectiveness hinges on clear guidelines regarding the type of spam reports to be transmitted, user consent protocols, and data retention practices. The TRAI has not clarified whether these requirements will also apply to spam-reporting features integrated into smartphone operating systems like Android and iOS.

Regulation of AI-Powered Calls

In addition to the spam reporting requirements, the new rules also address the use of AI and automated calling systems. Calls made using AI voice agents will now fall under TRAI's application-to-person (A2P) framework, which includes robocalls and calls initiated by pre-recorded messages. Companies utilizing such systems must declare their usage and the associated phone numbers to their telecom operators in advance. Calls that are not declared will be classified as spam.

Conclusion

The new regulation by TRAI represents a significant shift in how spam is managed within India's telecommunications ecosystem. For creators and developers of caller-ID applications, understanding the implications of this regulation is crucial for compliance and operational strategy. As the landscape evolves, staying informed about regulatory changes and their impact on user data and spam management will be essential.