The Telecom Regulatory Authority of India's new September 2026 rules mandate that telecom operators use AI to proactively detect and block spam. Businesses must now pre-declare numbers to prevent their service calls from being filtered by third-party apps, increasing compliance requirements for the telecom sector.
The Telecom Regulatory Authority of India (TRAI) has shifted its strategy to combat unsolicited commercial communications. Following the notification of the 'Telecom Commercial Communications Customer Preference (Third Amendment) Regulations, 2026' on September 18, 2026, telecom operators are now required to implement AI and machine learning-based systems to identify and act against spammers proactively. This marks a departure from the previous model, which relied heavily on consumer complaints to trigger enforcement.
Mandatory AI Enforcement
Under the new framework, telecom service providers must identify spam patterns automatically. If five or more calling numbers from a single sender are flagged by the AI system within a 10-day window, the operator is obligated to take graded action. This can range from re-verification of the sender’s KYC details to barring outgoing services for 15 days or complete disconnection of resources for repeat offenders. By shifting the burden of detection to the network level, the regulator aims to reduce the volume of promotional calls that reach consumers without their consent.
Protecting Essential Service Calls
A critical component of these new regulations addresses the conflict between official business communications and third-party call-management applications. TRAI has prohibited these applications from blocking, filtering, or spam-tagging specific number series—namely 140xx, 1600xx, and 1601xx. These series are designated for legitimate banking, financial, and transactional alerts.
Historically, third-party apps have often misidentified these service calls as unwanted solicitation, leading to critical service alerts being blocked. The regulator is now mandating that these numbers remain free from crowdsourced blocking, ensuring that important notifications reach their intended recipients. To maintain this, businesses are now required to pre-declare their calling numbers on the Distributed Ledger Technology (DLT) platform, creating a formal verification trail for all automated service calls.
Compliance Costs and Regulatory Friction
While the directive aims to improve communication integrity, it introduces new compliance burdens. Telecom operators face increased operational costs to upgrade their network infrastructure and integrate advanced AI analytics. For businesses that rely on Application-to-Person (A2P) messaging services, the requirement for pre-declaration and DLT registration adds a layer of administrative process.
Furthermore, the move highlights an ongoing regulatory struggle. TRAI is currently in discussions with the Ministry of Electronics and Information Technology to acquire broader legal powers to directly regulate third-party call-management applications. While the current rules focus on enforcement through telecom operators, the regulator’s push for direct control over these tech platforms suggests potential for future friction. Investors should monitor how effectively telcos integrate these AI systems and whether the new requirements lead to any service disruptions for businesses during the transition period.