TRAI Mandates AI-Based Spam Detection for Telecom Operators, Introduces Stricter Penalties

TRAI Introduces Mandatory AI-Based Spam Detection Framework

The Telecom Regulatory Authority of India has notified the Telecom Commercial Communications Customer Preference (Third Amendment) Regulations, 2026, fundamentally reshaping how telecom operators combat unsolicited commercial communications1

1

2

2

. Under these new TRAI spam rules, telecom operators must deploy AI/ML systems to identify spammers and take action against spammers even without consumer complaints. This marks a significant shift from previous frameworks where operators primarily used these systems to warn recipients about suspected spam.

Every Terminating Access Provider must now implement a UCC_Detect system that analyzes calling and messaging behavior to classify numbers as "Suspected high probability UCC CLI" based on behavioral parameters that TRAI may specify2

2

. In April 2026 alone, AI-based spam detection systems flagged 771 crore calls and 48 crore SMS as suspected spam to alert customers, while operators received 2,66,105 complaints, with only 17,401 meeting the earlier threshold2

2

.

Real-Time Information Sharing Through DLT Platform

The amended telecom regulations establish strict timelines for information sharing between operators. When an AI-based caller ID system flags a call as suspected spam, the Terminating Access Provider must share details with the Originating Access Provider from whose network the call originated within two hours of identification1

1

. The Originating Access Provider must then identify unique KYC identifiers of the sender within one business day and share those details with other telecom operators through the DLT platform2

2

.

All telecom operators must check within one day if there are other connections within their network linked to the suspected spammer in the last 10 days1

1

. If operators identify five or more CLIs belonging to the same sender as high-probability unsolicited commercial communications numbers within ten days, they must initiate further action2

2

.

Graduated Enforcement Mechanism and KYC Verification for Spammers

The Telecom Commercial Communications Customer Preference Amendment introduces a three-tier enforcement approach. For the first instance, the Originating Access Provider must re-verify KYC verification for spammers within three business days, with failed verification triggering action under existing KYC guidelines2

2

. Even if re-verification succeeds, the case counts as the first violation.

During the second instance, operators must conduct physical KYC within five business days and investigate whether the sender misused telecom resources2

2

. If KYC details don't match physical verification or misuse is confirmed, all operators must bar outgoing services on all the sender's telecom resources, including PRI/SIP trunks and SIMs, for 15 days, regardless of whether those resources were actually used for spam1

1

.

For subsequent instances of violations, all telecom resources of the sender shall be disconnected by all Access Providers for one year, irrespective of whether those resources were actually used in making such communications1

1

. Repeat offenders will be placed under the blacklist category during this one-year period, with no new telecom resources provided by any operator1

1

. Violators will receive only one telephone number with outgoing services barred, allowed to connect solely with notified emergency services.

Lower Complaint Threshold When AI Systems Corroborate Violations

The amendment significantly changes the complaint-based enforcement trigger. Previously, regulation 25 required 5 or more complaints from unique recipients within ten days2

2

. With AI corroboration, action against spammers can begin with just 3 or more complaints from unique recipients within ten days, provided any CLI was identified as "Suspected high probability UCC CLI" during that period2

2

.

Once this threshold is met, the Originating Access Provider must immediately suspend outgoing services on the telecom resources used to send unsolicited commercial communications and simultaneously start an investigation2

2

. TRAI has clarified that AI-generated intelligence alone cannot establish a regulatory violation, and operators must investigate suspected spammers before taking enforcement action2

2

.

New Rules for Call Management Applications and User Preferences

The notification bars all call management applications like Truecaller from tagging, blocking, or filtering incoming calls originating from designated number series like those starting with 160 or central government numbers for commercial and government communication1

1

. However, consumers retain freedom to filter or block any calls on their own devices at their personal discretion1

1

.

Subscribers opting to block promotional telemarketing calls from all categories must text BLOCK PROMO to 19091

1

. This BLOCK PROMO option blocks only promotional types of commercial communications for all categories but does not block transaction and service type communications and government communications1

1

. All preferences registered under FULLY BLOCK category will be migrated to BLOCK PROMO category within fifteen days of notification1

1

.

The amended rule allows Terminating Access Provider to charge the Originating Access Provider up to Rs 0.05 per minute for A2P calls1

1

. The regulations will be implemented in phases of 30-90 days from the date of notification1

1

. Telecom operators will also need to file complaints with law enforcement agencies against violators1

1

.