India forces Truecaller to share spam data with telcos

The Telecom Regulatory Authority of India (TRAI) has updated its commercial communication rules, requiring call-management applications to feed user-reported spam data into a blockchain-based tracking platform managed by telecom operators. The regulatory shift aims to centralize spam data to bolster the country's enforcement infrastructure. However, Stockholm-based Truecaller, which counts India as its largest market with over 350 million of its 500 million global monthly active users, has criticized the mandate. The company described the new requirement as an anti-competitive "one-way exchange" that hands over proprietary user data to telecom carriers.

The policy update arrives as India battles an overwhelming volume of unwanted communications. Truecaller reported that its Indian users faced approximately 42 billion spam calls in 2025, including those labeled, ignored, or blocked, with the app itself blocking nearly 12 billion calls that year. This is not the first clash between the Swedish developer and Indian regulators. TRAI has maintained restrictions that prevent caller-ID apps from automatically blocking or spam-tagging calls from specific government-designated number ranges used for promotional or transactional services, though individual users can still manually block them.

The amended regulations also target the rise of automated dialing systems and artificial intelligence voice agents. Under the new rules, any call initiated automatically without direct human dialing—including robocalls and AI-generated voices—falls under the application-to-person (A2P) framework. Businesses deploying these automated systems must register their numbers with telecom operators beforehand, or face having their calls treated as spam. Furthermore, telecom operators are now authorized to levy a termination charge of up to 5 paise, equivalent to roughly 0.052 cents, per minute on these A2P calls.

For developers and enterprise communication practitioners, these rules introduce significant compliance hurdles and technical ambiguity. App creators must determine how to securely transmit user reports to the telecom blockchain without compromising user privacy or proprietary data models. Meanwhile, businesses utilizing automated outreach or contact center software must carefully audit their dialing systems to ensure proper registration, lest their legitimate customer communications be flagged as spam or subjected to unexpected termination fees.