India's TRAI now requires caller-ID apps to hand user spam reports to telcos

What changed

The Telecom Regulatory Authority of India (TRAI) amended its commercial communications rules on Friday to require caller-ID and call-management apps that let users flag spam to transmit those reports to a blockchain-based platform run by the country's telecom operators. According to TechCrunch, the regulator's stated goal is to widen the pool of spam intelligence feeding the enforcement system the telecom industry already operates, connecting reports collected inside apps to the machinery that acts against spammers.

Truecaller objects

Truecaller, the Stockholm-based company behind one of the world's most widely used caller-ID apps, told TechCrunch it views the requirement as a "one-way exchange" that is "anti-competitive," arguing it shifts commercially valuable data from app makers to network operators. The stakes are high for the company: India is its largest market, home to well over 350 million of its more than 500 million monthly active users worldwide. Its detection engine blends community reports with automated signals to identify and block unwanted calls.

The backdrop

India's spam problem is enormous. TechCrunch points to a February report from Truecaller estimating that its Indian users encountered roughly 42 billion spam calls in 2025 — including calls blocked, labeled or ignored — and that the app itself blocked nearly 12 billion over the same period.

The regulator and the company have clashed before. Truecaller previously objected to rules stopping call-management apps from automatically labeling calls from certain government-designated number ranges as spam, arguing the carve-out would let unwanted calls slip past its filters. Friday's amendments keep that restriction: apps cannot blanket-block, filter or spam-tag calls from designated number series used for promotional, service and transactional communications, though individual users may still block such calls on their own devices. A Truecaller spokesperson said the company has complied with this since late last year while maintaining that its data shows spam has climbed as a result.

Unanswered questions

Analysts flagged gaps in the new rules. Sumeysh Srivastava of New Delhi consulting firm The Quantum Hub, who leads its telecom-regulation policy work, noted that the change joins two different layers — operators run the network and the blockchain ledger, while apps sit on top — raising questions about what reporting standards apps must meet and how the requirement can be enforced against companies that are not themselves telecom operators. A March draft proposed using India's IT laws as the enforcement mechanism, but, as Srivastava told TechCrunch, the final announcement does not confirm whether that carried through.

Kazim Rizvi, founding director of the policy think tank The Dialogue, drew a distinction between forcing an app to pass on an individual user's spam report and compelling it to share broader datasets, reputation signals or the analytical systems behind its detection. The rules, he said, need clarity on exactly what must be transmitted, how users are notified or asked for consent, and how the data may later be retained and used. TRAI did not respond to questions about what information apps must share, or about whether spam-reporting features built into smartphone operating systems and dialers such as Android and iOS fall under the rule.

Automated and AI calls

The amendments also reach AI-placed calls. Calls initiated automatically — robocalls and those using prerecorded or artificial voices — now fall under TRAI's application-to-person (A2P) framework. Businesses using such systems must declare them, and the phone numbers involved, to their operators ahead of time; undeclared A2P calls will be treated as spam. Satya N. Gupta, a former additional secretary at TRAI, told TechCrunch the rules do not restrict businesses from using AI or other automated calling technologies, only require disclosure. Srivastava observed that the trigger is how a call is initiated rather than whether it uses an AI voice, leaving ambiguity for AI-assisted calls that a person starts. Rizvi cautioned the definition could also capture software-dialed calls with a human involved, such as contact-center and click-to-call traffic. Operators may additionally levy a termination charge of up to 5 paise (about 0.052 cents) per minute on A2P calls, with exemptions for certain designated number ranges.

Why it matters

The ruling redirects the raw material of spam detection — millions of user reports — from private app silos into a shared ledger controlled by telcos. For Truecaller, that crowdsourced data is core to its product, and being required to pipe it into a platform its telecom partners control sets a precedent regulators elsewhere could copy. For users, faster enforcement may follow, but the open questions around consent, retention and data reuse remain unresolved. The A2P changes are also among the first concrete attempts to regulate machine-placed and AI-voice calls, pairing mandatory disclosure with a per-minute charge that effectively prices automated outreach — a template worth watching well beyond India.