TRAI's New Spam Rules in 2026: What the TCCCPR Third Amendment Changes for Indian Marketers

What Is the TCCCPR Third Amendment in 2026?

The Telecom Commercial Communication Customer Preference (Third Amendment) Regulations, 2026 is TRAI's amendment to the TCCCPR, 2018, introduced on 18 September 2026. It changes how unsolicited commercial communication is detected and acted on: complaint-based action now requires corroboration from operator AI systems, application-driven calls are defined and regulated for the first time, inquiry-based messaging is capped at seven days, and header or template misuse carries a six-hour suspension duty.

If your business sends SMS, makes outbound calls, runs a dialer, or holds registered DLT headers in India, this is the regulation that now governs it. TRAI describes the intent as "strengthening consumer confidence in the commercial communication ecosystem, ensuring greater accountability across stakeholders, and enabling more effective and timely action against misuse of telecom resources by the spammers".

Why Did TRAI Amend the Spam Rules in 2026?

Because enforcement under the 2018 framework depended on consumer complaints alone, and TRAI concluded that complaints arrive too late and too rarely to catch a spammer early. The amendment pairs complaint data with the AI and machine learning detection that operators already run, so a sender can be identified before the complaint volume builds up.

The process behind it is documented and worth knowing, because it tells you these rules were negotiated rather than imposed overnight. TRAI issued the draft for consultation on 13 March 2026. Comments closed on 19 April 2026 and counter-comments on 4 May 2026. An Open House Discussion with stakeholders was held on 3 June 2026. The final amendment followed on 18 September 2026. A separate TRAI Direction of 27 February 2026 had already required operators to share AI and ML intelligence on suspected UCC between themselves, and the amendment folds that Direction into the regulations as Regulation 21A.

What Changes for Senders in 2026? The Eleven Salient Features

TRAI lists eleven salient features. Five of them change what a marketing or sales team does day to day, three change what your telecom provider is obliged to do about you, and three are structural powers TRAI has taken for later use. The table maps all eleven so nothing is missed.

How Does the New Complaint Trigger Actually Work in 2026?

It is a two-condition test, and most summaries state only half of it. The press release says action "will be triggered against the sender if there are 3 or more unique complaints within a period of ten days and the concerned Sender's CLI is also flagged by the AI/ML-based system as suspected of sending UCC". Both conditions must hold. The previous framework used a threshold of five or more unique complaints in ten days on its own.

Read plainly, that is not simply a drop from five complaints to three. It is a different mechanism. Three complaints alone do not trigger action if your CLI is not flagged. A flag alone does not trigger complaint-based action either. The practical consequence for a legitimate sender is that clean sending behaviour protects you from a small number of complaints, while a pattern that looks like bulk spam to an operator's classifier lowers your complaint tolerance to three.

There is a separate and parallel mechanism on the detection side. Where five or more CLIs associated with a sender are flagged within ten days, the press release says access providers will initiate "further investigation and graded action", which it lists as KYC re-verification, physical verification, barring of outgoing services, and disconnection of telecom resources in cases of repeated violations and misuse. TRAI also notes that certain timelines under the complaint mechanism have been revised, but the press release does not state the new timelines, so treat that as an open item to check in the regulation text.

One protection is worth knowing: the special numbering series designated for commercial communication, including the 140xx, 1600xx and 1601xx series, "shall not be flagged as suspected spam for recipients", so that legitimate commercial and government communication from regulated series is not inadvertently missed.

What Are A2P Calls Under the 2026 Rules, and Who Must Declare Them?

A2P calls are defined in the amendment as "voice calls initiated by an application, software system or automated platform without direct human dialing, including using autodialing, robo-calls and pre-recorded/artificial voice technologies". Every entity using them must pre-declare that use to its telecom service provider along with the details of the CLIs used. A2P calls made without that prior declaration "will be treated as UCC".

This is the single provision most likely to catch an otherwise compliant business by surprise, because the definition covers ordinary sales tooling. A predictive dialer, an IVR callback, an automated reminder call and a pre-recorded announcement all sit inside it. The declaration is an administrative step with your operator, not a technical restriction, but skipping it reclassifies your legitimate calls as unsolicited commercial communication by default. Our guide to the A2P rules covers the definition, the declaration and the termination charge in detail.

How Long Can You Message Someone After an Inquiry in 2026?

Seven days. The press release states that commercial communications may be sent on the basis of a customer inquiry "only for a period of seven days from the date of such inquiry". The inquiry itself "shall be made in writing or through digital means, and shall be maintained in a verifiable form by the Sender", and TRAI says the amendment is intended primarily to facilitate e-commerce and e-service platforms.

For any Indian lead generation operation this is the rule that changes process rather than paperwork. A form fill or a chat inquiry opens a seven day window, and it opens it only if you can produce the record afterwards. A long drip sequence that runs for weeks off a single inquiry no longer sits inside this provision. Our seven day rule guide works through what that means for follow-up cadence and record keeping.

What Happens If a Header or Template Is Misused in 2026?

The clock is six hours. Where headers or content templates are misused, the press release says the Originating Access Provider "shall suspend the misused Headers or Content Templates, within six hours of becoming aware of such misuse", and must issue a notice to the sender within the prescribed period. The sender is then required to undertake specified remedial measures to prevent further misuse and to file a complaint with the appropriate law enforcement agency.

Where the misuse is attributed to a telemarketer, the consequence is severe and stated plainly: "all its telecom resources across the TSPs will be disconnected for a period of one year, along with blacklisting". For a brand, the operational risk is that a suspended header takes your legitimate transactional messaging down with it. Our header and template misuse guide covers the sequence and what a sender is obliged to do.

Is Legacy Consent Still Valid in 2026?

Conditionally, yes, and this is one of the few genuinely permissive changes in the amendment. TRAI has expanded the definition of consent to include legacy consents already held by entities, and says the framework is being amended to enable their recognition and digitisation. The condition is strict: legacy consents "shall be considered valid only where they have been obtained through verifiable means and are subsequently registered on the Digital Platform of the TSPs".

That is a data project, not a policy update. It asks a brand to prove how a historical consent was obtained and then to register it on operator infrastructure. Consent captured without a verifiable record does not become valid simply because it is old. Our legacy consent guide sets out what the two conditions mean for a CRM owner.

Why Can Call Management Apps No Longer Block 1600xx Calls in 2026?

Because TRAI concluded that blanket tagging by third-party apps was mislabelling legitimate and government communication as spam. Call Management Applications are now prohibited from blanket blocking, filtering or spam tagging calls from series designated for commercial communication, specifically 1600xx and 1601xx for service and transactional calls and 140xx for regulated promotional calls. Individual consumers keep full freedom to block or filter calls on their own devices.

There is a second obligation attached. No CMA may offer users the ability to report unsolicited commercial communication, "under any name such as spam, junk, etc.", unless the CMA sends that report to the DLT platform maintained by the access providers. For brands on regulated series this cuts both ways: fewer calls silently suppressed, and a wider net of reports feeding the system that can flag your CLI. Our guide to the CMA rules covers the brand-side implications.

How Might TRAI Classify Your Business in 2026?

Under a new regulation, TRAI may classify senders into different categories and specify differentiated enforcement measures for each. The press release lists the considerations: the criticality of the services and the sector a sender belongs to, the importance of the entity to the economy, scale of operations, extent of telecom resource usage, and the potential impact on consumers of suspending or disconnecting that sender's telecom resources.

No categories have been published in this press release. What has changed is that TRAI has taken the power to treat a bank, a hospital, a utility and a promotional D2C brand differently for the same violation. If your messaging carries genuine service criticality, that is worth documenting now rather than arguing later. Our sender classification guide works through the five stated factors.

What Is the New Consumer Appeal Route in 2026?

Consumers can now appeal the resolution of a UCC complaint. The appeal may be preferred within 15 days before the Appellate Authority, and will be resolved under the Telecom Consumers Complaint Redressal Regulations, 2012. It can be filed through any mode available for lodging UCC complaints, which the press release lists as the TRAI DND App, the TSP app or portal, and a call or SMS to 1909, besides the modes specified under the TCCR Regulations.

For a brand the effect is duration. A complaint that is closed is no longer necessarily finished, because a further 15 day window exists in which the consumer can reopen the question. Our appeal mechanism guide covers what that means for complaint handling.

What Should a Marketing Team Do This Week in 2026?

Six things, in this order. None of them require a legal opinion to start, and all of them are cheaper to do now than to retrofit after an operator notice.

1. Inventory your outbound calling. List every system that places calls without a human dialing each one: predictive dialers, IVR callbacks, automated reminders, pre-recorded announcements. Each is a candidate for A2P pre-declaration with your TSP.
2. Find out whether the declaration has been filed. If your calling runs through a vendor or a call centre, ask in writing who declared what, and get the CLI list.
3. Audit your inquiry records. For every lead source, establish whether the inquiry exists in writing or digital form and whether you could produce it in verifiable form on request.
4. Re-cadence inquiry-based follow-up to the seven day window, and move anything longer onto a consent basis rather than an inquiry basis.
5. Check how your legacy consent was captured, and whether the capture method would count as verifiable. Then ask your operator about registering it on the Digital Platform.
6. Assign an owner for header and template monitoring, because a six hour suspension duty on your operator means your response time has to be shorter than that.

What Are the Common Mistakes in 2026?

• Reading the trigger as "three complaints". It is three or more unique complaints in ten days and an AI or ML flag on the CLI. Stating only the first half overstates your risk in one direction and understates it in the other.
• Confusing the two thresholds. Three unique complaints in ten days is the complaint trigger. Five or more flagged CLIs in ten days is the detection trigger for graded action. They are separate provisions.
• Assuming A2P only means robocalls. The definition covers any call initiated by an application or platform without direct human dialing, which includes ordinary dialer-driven sales calling.
• Treating an inquiry as open-ended consent. Seven days, with a record you can produce.
• Assuming old consent is safe because it is old. Validity depends on verifiable capture and registration on the TSP Digital Platform.
• Leaving header monitoring to the operator. The six hour duty sits with the access provider, but the remedial measures and the law enforcement complaint sit with the sender.
• Waiting for penalties to be spelled out. The press release states consequences for telemarketer header misuse and graded action on detection. It does not publish a general penalty schedule, and the absence of one is not an absence of exposure.

Key Takeaways for 2026

The 2026 amendment moves Indian spam enforcement from complaint-led to detection-led, and it attaches specific, short clocks to the things that go wrong.

• Introduced 18 September 2026 as the Third Amendment to the TCCCPR, 2018, after a consultation that ran from 13 March 2026 to an Open House Discussion on 3 June 2026.
• Complaint-based action now triggers at three or more unique complaints in ten days, but only where the sender's CLI is also flagged by the operator's AI or ML system.
• Five or more flagged CLIs in ten days triggers investigation and graded action including KYC re-verification, physical verification, barring of outgoing services and disconnection.
• A2P calls are defined and must be pre-declared to your TSP with CLI details. Undeclared A2P calls are treated as UCC.
• Inquiry-based commercial communication is capped at seven days and requires a verifiable written or digital record of the inquiry.
• Legacy consent is recognised only where it was obtained verifiably and is registered on the TSP Digital Platform.
• Misused headers or templates must be suspended by the originating access provider within six hours; telemarketer misuse draws one year of disconnection across all TSPs plus blacklisting.
• Consumers get 15 days to appeal a UCC complaint resolution, so a closed complaint is not always a finished one.
• The 140xx, 1600xx and 1601xx series cannot be flagged as suspected spam to recipients, and call management apps cannot blanket block or tag them.

Distk works with brands and agencies across India on the operational side of this: mapping which systems now need an A2P declaration, rebuilding inquiry-based follow-up to fit a seven day window with records that survive scrutiny, and assigning ownership for header monitoring. If you send SMS or make outbound calls in India, that audit is where we would start.

Sources

• TRAI Press Release No. 119 of 2026, "TRAI Strengthens Framework for Curbing Unsolicited Commercial Communications through Technology-Driven Enforcement and Enhanced Consumer Protection", 18 September 2026. Every rule, date, number and quotation in this guide comes from that press release.
• TRAI press release listing, which carries the dated entry and the source PDF.