Last reviewed 11 August 2026

Is AI Cold Calling Legal in India?

Yes — AI cold calling is legal in India, with conditions. No Indian law bans an automated voice from placing a commercial call. What the law restricts is who may call, whom they may call, when, and from which number. Break those rules and the liability is yours, whether a human or software dialled.

That distinction matters, because the question is usually asked the wrong way round. India’s telemarketing regime is technology-neutral: the Telecom Commercial Communications Customer Preference Regulations, 2018 (TCCCPR 2018) govern the commercial call, and say nothing about what produces the voice on the line. There is no separate AI licence to obtain, and no AI exemption to hide behind.

Nearly every enforcement action reported in India has been against unregistered senders and calls to people who had opted out — failures of process, not of technology. So the practical question is not “may we use AI?” but “is our calling programme compliant?” This page walks through what that means, in plain language.

What TRAI actually regulates

TCCCPR 2018 exists to control Unsolicited Commercial Communication (UCC). Its core obligations for anyone making commercial calls:

• Be registered. Commercial calls must come from a registered sender — a Principal Entity, calling directly or through a registered telemarketer. Unregistered telemarketers (UTMs) are the regulator’s primary enforcement target.
• Respect subscriber preference. Every list must be scrubbed against the DND / National Customer Preference Register before dialling. Preferences are set per sector, so a number that accepts banking calls may block real-estate calls.
• Keep to the window. Promotional calls are not permitted between 9pm and 9am, regardless of consent.
• Use registered voice headers. Calls must originate from a calling line identity registered with your telecom operator, in the correct series (see below).
• Honour opt-outs immediately and retain evidence of consent and of the call.

Enforcement has sharpened considerably. The February 2025 amendment to TCCCPR obliges an operator to suspend a sender’s outgoing services and open an investigation once five or more unique complaints are received against it within ten days; repeat violations can result in disconnection for up to a year. In 2025 TRAI issued more than 731,000 notices to unregistered telemarketers against roughly 3.1 million spam complaints.

In March 2026 TRAI directed telecom operators to deploy AI and machine-learning systems to detect UCC proactively — monitoring signals such as call-recipient diversity, very short call durations and lopsided outgoing-to-incoming ratios — and to share sender KYC data with other operators within two hours of a request. The point for anyone running outbound campaigns: your dialling pattern is now itself a compliance signal. High-volume, low-duration, low-answer-rate calling looks like spam to a classifier even when every number on the list consented.

TRAI also published a draft Third Amendment on 13 March 2026, which would lower the complaint threshold from five to three where an operator’s AI system has already flagged the number in the same ten-day window. This remains a draft and is not in force. Notably, the draft does not let AI flags trigger action on their own — subscriber complaints still have to corroborate them.

TRAI publishes its own plain-language guidance for telemarketers and senders, plus an official UCC FAQ. If anything on this page conflicts with those, they win.

Which number your call must come from: 140 vs 1600

This trips up more businesses than any other rule, and getting it wrong is visible to every recipient. TRAI has designated two series for commercial calling, and they are not interchangeable.

In a clarification issued in July 2026, TRAI confirmed that calls from these designated series may not be tagged, filtered or blocked by third-party apps — the sole permitted block being a subscriber’s own DND registration against promotional calls from that sector. That is a genuine advantage of doing this properly: a compliant 140-series call reaches the handset unlabelled, while a call from an ordinary 10-digit mobile number is increasingly flagged as spam by the recipient’s own phone.

The practical consequence for most businesses: if you are generating leads, qualifying enquiries or following up prospects, you belong on 140. The 1600 series is not available to you unless you are a financial-sector entity regulated by one of those four authorities, or a government body — and even then only for genuinely non-promotional contact with existing customers.

DLT registration, step by step

DLT stands for Distributed Ledger Technology. It is the blockchain-based registry TRAI mandated under TCCCPR 2018 so that every commercial communication in India traces back to an identified, accountable sender. Each major telecom operator runs its own DLT portal, and the registrations are shared between them.

Who has to register: the business whose goods or services are being promoted — the Principal Entity. You cannot delegate that identity to an agency. If a vendor offers to make calls “on their own DLT registration” on your behalf, they are describing a registered-telemarketer arrangement, and you should confirm the registration exists.

The one distinction most guides get wrong. DLT registration is widely explained in SMS terms — register a header, then register a content template for every message. Content-template registration is an SMS requirement. For voice, the obligation is to register your voice headers (the calling line identity) with your telecom operator in the correct series and to call only from them. You do not lodge a script for pre-approval the way you lodge an SMS template. That does not make voice a soft option — your calls are still subject to preference scrubbing, time windows, complaint thresholds and, since March 2026, operator-side AI monitoring.

Documents you will typically need:

• Company PAN
• GST registration certificate
• Certificate of incorporation, or equivalent proof of business registration
• Authorised signatory’s PAN and Aadhaar
• Letter of Authorisation on company letterhead, signed — usually downloadable from the portal itself

Charges. These are set by the individual telecom operators rather than by TRAI, and they change. As a guide: some operators levy no fee for Principal Entity registration while others charge in the region of ₹5,900 including GST, with a smaller annual renewal and a nominal per-header approval fee. Once you have registered on one operator’s platform, registering on the others is generally free. Always confirm current pricing on the portal before budgeting.

Timeline. Straightforward Principal Entity registrations are often approved within a few working days; header approvals are usually quicker. Most delay comes from document mismatches — a business name that does not match the PAN exactly, or an unsigned Letter of Authorisation. Get those right first time and the process is undramatic.

Consent under the DPDP Act

TRAI governs the telecom channel. A separate statute governs the personal data flowing through it: the Digital Personal Data Protection Act, 2023. The DPDP Rules, 2025 that operationalise it were notified on 13 November 2025 and gazetted the following day, with obligations phased in and full compliance expected by 13 May 2027. Both are published via MeitY’s data protection framework.

If you are calling people, you are a Data Fiduciary processing their personal data, and three obligations bear directly on outbound calling:

• Notice. Where processing rests on consent, you must give a clear, plain-language notice covering what data you collect, the purpose, how the person exercises their rights, and how they complain to the Data Protection Board. It must be available in English or any of the 22 languages in the Eighth Schedule to the Constitution — a requirement that lands squarely on anyone running multilingual campaigns.
• Consent quality. Consent must be free, specific, informed, unconditional and unambiguous, and withdrawable as easily as it was given. This is where bought lead lists fail: a number scraped from a portal or bought from a broker carries no consent you can evidence, and “the vendor said it was opted in” is not a record.
• Call recordings are personal data. If you record calls — and for quality and dispute purposes you probably should — recordings must be kept only as long as the stated purpose requires, secured, and deleted on schedule. Indefinite retention “just in case” is the default failure mode.

The Act’s penalty schedule runs to substantial figures — up to ₹250 crore for a failure to take reasonable security safeguards — but the realistic exposure for a mid-sized business is more mundane and more likely: a complaint you cannot answer because you have no consent record.

Does an AI voice change anything legally?

This is the genuinely novel question, and the honest answer is that it is partly unsettled. We would rather say that than give you false certainty, because several vendors currently state the position more confidently than the law supports.

What is clear:

• TCCCPR 2018 contains no requirement that an automated caller announce itself. Its obligations attach to registration, preference and timing, not to the nature of the voice.
• The IT Amendment Rules 2026 — amending the Intermediary Guidelines and in force from 20 February 2026 — regulate “synthetically generated information”, defined to include audio created or altered by computational means to appear authentic. Where such audio is published, it must carry a prominent audio disclosure.
• Impersonating a specific real individual is squarely in scope. Cloning an identifiable person’s voice for an outbound campaign is a clear and avoidable risk.

What is not clear: those SGI obligations are drafted for intermediaries publishing content on platforms, not for a live one-to-one telephone conversation. On a plain reading they do not squarely bite on an outbound call. But the drafting direction is unmistakable, and general consumer-protection principles against misleading conduct point the same way.

Our position: our agents identify themselves as an AI assistant at the start of every call, and we do not clone the voice of any real person without their written permission. We do that because it is where regulation is clearly heading, because it removes a whole category of dispute, and because — in practice — callers who are told plainly do not object nearly as often as people expect. Disclosure costs you very little and buys certainty.

This page is general information, not legal advice. Take advice on your own facts before launching a campaign, particularly in a regulated sector where RBI, IRDAI, SEBI or RERA obligations sit on top of everything above.

A compliance checklist

Before your first outbound campaign:

• Register as a Principal Entity on a telecom operator’s DLT platform — or confirm in writing that your calling partner is a registered telemarketer.
• Obtain and use registered voice headers in the correct series. 140 for promotional; 1600 only if you genuinely qualify.
• Scrub every list against DND / NCPR immediately before dialling, not at the point of upload. Preferences change daily, so a list cleared last week is not cleared today.
• Hard-code the 9am–9pm window into the dialler rather than relying on campaign discipline.
• Record, for every number, where the consent came from, when, and for what purpose — retrievable on demand.
• Publish a DPDP-compliant notice, and make it available in the languages you actually call in.
• Process opt-outs immediately and irreversibly, across every channel.
• Set an explicit retention period for recordings and transcripts, and automate the deletion.
• Have the AI identify itself as an AI at the start of the call.
• Monitor your own complaint rate. Five unique complaints in ten days is the level at which your operator must act — you want to know before they do.
• Watch for the Third Amendment being notified, and for sector rules from RBI, IRDAI, SEBI or RERA if they apply to you.

Where ArtIntele fits

We build AI voice agents and telecallers for businesses across sectors in India, and compliance is part of the build rather than a document handed over at the end: registered headers on the right series, dial-time preference scrubbing, enforced calling windows, consent and recording retention you can evidence, and disclosure on every call.

If you want to talk through a specific calling programme — what it needs, and whether it is workable as designed — book a free consultation and we will go through it with you. Pricing is on the pricing page.

Questions, answered

Is AI cold calling illegal in India?

No. There is no Indian law banning an AI from placing a commercial call. What is illegal is making unsolicited commercial calls without being a registered telemarketer, calling numbers registered on the DND/NCPR preference list for that sector, calling outside 9am–9pm, or calling without a lawful basis under the DPDP Act. Those rules apply identically to a human dialling and to software dialling.

What is DLT registration?

DLT registration is the mandatory process of registering your business as a Principal Entity on a telecom operator’s Distributed Ledger Technology platform before you may send commercial SMS or place commercial voice calls in India. It was introduced by TRAI under TCCCPR 2018 to make every commercial communication traceable to an identified sender.

What is the full form of DLT?

DLT stands for Distributed Ledger Technology — the blockchain-based registry TRAI mandated under TCCCPR 2018 so that every registered sender, header and template is recorded on a tamper-evident ledger shared across telecom operators.

What documents are required for DLT registration?

Typically your company PAN, GST registration certificate, certificate of incorporation or equivalent business registration, the authorised signatory’s PAN and Aadhaar, and a Letter of Authorisation on company letterhead. Individual operator portals may ask for more; check the specific portal before you start.

What are the DLT registration charges?

Charges are set by each telecom operator, not by TRAI, and change from time to time. As a guide, some operators charge nothing for Principal Entity registration while others charge in the region of ₹5,900 including GST, with smaller annual renewal fees and a nominal per-header or per-template approval charge. Registering on one operator’s platform generally makes registration on the others free. Confirm current pricing on the operator portal.

What are the TRAI rules for telemarketing calls?

Register as a telemarketer or Principal Entity, place calls only from voice headers registered with a telecom operator in the correct number series, scrub every list against the DND/NCPR preference register immediately before dialling, keep calls within 9am to 9pm, honour opt-outs at once, and keep consent and call records. Since the February 2025 amendment, five or more unique complaints against a sender inside ten days obliges the operator to suspend outgoing service and investigate; repeat violations can mean disconnection for up to a year.

Does an AI caller have to disclose that it is an AI?

The position is genuinely unsettled. No provision of TCCCPR 2018 requires an automated caller to announce that it is automated. The IT Amendment Rules 2026 require synthetically generated audio to carry an audio disclosure, but those obligations are drafted for intermediaries publishing content rather than for a live one-to-one phone call, so they do not clearly bite on outbound calling. Given the direction of regulation and the rules against impersonating a specific individual, we disclose on every call and recommend you do the same. Take your own legal advice.