---
title: "Voice AI Compliance in India 2026: TRAI, DPDP, RBI, IRDAI | Ringg AI"
description: "How AI voice agents can call customers in India: TRAI 140, 1600 and 1601 numbers and A2P declaration, DPDP consent, RBI recovery-call hours and IRDAI call recording."
canonical_url: "https://www.ringg.ai/voice-ai-compliance-india"
last_updated: "2026-10-20"
---

Guide

# Voice AI compliance in India: rules for AI calling in 2026

What banks, NBFCs, insurers and e-commerce brands must do before an AI voice agent calls a customer in India, under the TRAI, DPDP, RBI, IRDAI and consumer protection rules in force on 20 October 2026.

Published

20 Oct 2026

Last reviewed

20 Oct 2026

By

Ringg AI

Covers

Outbound and inbound AI voice agents in India

This guide summarises public rules and regulator announcements. It is not legal advice: check the sources and your own counsel before you launch.

## In short

*   AI voice agents are legal in India. TRAI’s Third Amendment, issued on 18 September 2026, treats them as automated (A2P) calls: businesses must declare them to their telecom operator in advance, and undeclared ones count as spam.
*   Call from the right number series: 140 for promotional calls, 1600 for service and transactional calls from banks, NBFCs, insurers and other financial regulated entities, and 1601 for utilities, courier and logistics. Ordinary 10-digit numbers cannot be used for commercial calls.
*   Respect Do Not Disturb preferences on promotional calls unless the customer’s explicit consent is recorded through the operators’ consent system.
*   Banks and NBFCs: no recovery calls about overdue loans before 8 am or after 7 pm, and no threats or harassment. The lender stays responsible for whoever it engages to make the calls.
*   Insurers: record telemarketing calls, keep the recordings and tell the customer the call is recorded.
*   Personal data: most DPDP Act duties, including notice, consent, security and breach reporting, apply from May 2027. Penalties go up to ₹250 crore.
*   Say it is an AI. We found no Indian rule that requires this on business calls yet, but RBI’s FREE-AI framework recommends disclosing AI use, and it is the safest default.

## The rules at a glance

Every rule that shapes an AI voice agent in India, who it covers, and what it means on a call.

| Rule | Regulator | Who it covers | What it means for an AI voice agent | In force | Sources |
| --- | --- | --- | --- | --- | --- |
| TCCCPR 2018, Second Amendment 2025 | TRAI | Every business making commercial calls | Promotional calls only from 140-series numbers, never from ordinary 10-digit numbers. Respect Do Not Disturb preferences unless explicit consent is recorded. Repeat violators lose all telecom connections for a year and are blacklisted. | 12 February 2025 | *   [TRAI, 12 February 2025](#source-trai-2025)<br>*   [Press Information Bureau, February 2025](#source-pib-2025) |
| 1600-series directions | TRAI, RBI, IRDAI | Banks, NBFCs, insurers and other RBI-, SEBI-, IRDAI- and PFRDA-regulated entities | Service and transactional calls only from 1600-series numbers, even when the customer has consented. | Banks 1 January 2026; large NBFCs, payments banks and small finance banks 1 February 2026; insurers 15 February 2026; other NBFCs, co-operative banks and regional rural banks 1 March 2026 | *   [TRAI, 19 November 2025](#source-trai-1600)<br>*   [RBI, 17 January 2025](#source-rbi-1600)<br>*   [IRDAI, 6 January 2026](#source-irdai-1600) |
| 1601-series direction | TRAI | Utilities, courier and logistics companies (Phase I) | Service and transactional calls from 1601-series numbers. TRAI has said more sectors will follow. | August 2026, in phases | *   [TRAI, August 2026](#source-trai-1601) |
| TCCCPR Third Amendment 2026 | TRAI | Any business placing automated calls, including AI voice agents | Declare A2P calls (placed by an application or automated platform, including artificial voices) to the operator in advance and on DLT; undeclared ones are treated as spam. Operators detect spam with AI/ML, three complaints in ten days plus an AI flag can trigger action, and A2P calls outside the designated series can carry a charge of up to ₹0.05 a minute. | Issued 18 September 2026; takes effect in phases | *   [TRAI, 18 September 2026](#source-trai-2026)<br>*   [Press Information Bureau, September 2026](#source-pib-2026) |
| DPDP Act 2023 and DPDP Rules 2025 | MeitY, Data Protection Board | Anyone processing personal data of people in India | Clear notice and consent, use for the stated purpose only, security safeguards, breach reporting and erasure when the purpose ends. A child’s data needs verifiable consent from a parent or guardian. | Rules notified 13 November 2025; most duties from May 2027 | *   [MeitY, 13 November 2025](#source-dpdp-rules) |
| Rules for recovery agents | RBI | Banks, NBFCs and other RBI-regulated lenders | No calls about overdue loans before 8 am or after 7 pm. No intimidation, threats, anonymous or persistent calls. The lender stays responsible for the agents it engages. | 12 August 2022 | *   [RBI, 12 August 2022](#source-rbi-recovery) |
| Digital Lending Directions 2025 | RBI | Lenders and their lending service providers | Send the borrower the recovery agent’s details by SMS or email before the agent first makes contact, and again if the agent changes. | 8 May 2025 | *   [RBI, 8 May 2025](#source-rbi-dl) |
| FREE-AI framework | RBI | RBI-regulated entities (recommendations) | Tell customers when they are dealing with AI, and give them a way to contest AI decisions. | Report published 13 August 2025 | *   [RBI, 13 August 2025](#source-rbi-freeai) |
| Distance marketing guidelines | IRDAI | Insurers, brokers and their telemarketers | Record and preserve telemarketing calls, and tell the customer the call is recorded. | 2011 | *   [IRDAI, 2011](#source-irdai-dm) |
| Information and Cyber Security Guidelines | IRDAI | Insurers and insurance intermediaries | Keep ICT and application logs for a rolling 180 days, report cyber incidents to CERT-In and IRDAI within six hours, and check vendors before sharing data with them. | 2023, amended April 2026 | *   [IRDAI, 2023, amended April 2026](#source-irdai-cyber) |
| IT Rules amendment on synthetic content | MeitY | Online intermediaries | Label AI-generated audio and video that they host or publish. It does not set a script for business phone calls, but it shows where disclosure rules are heading. | 20 February 2026 | *   [MeitY, 10 February 2026](#source-meity-2026) |
| Dark Patterns Guidelines | Central Consumer Protection Authority | Platforms, sellers and advertisers | Bans false urgency, basket sneaking, subscription traps, drip pricing, confirm shaming and nagging. Keep sales scripts free of them too. | 30 November 2023 | *   [Central Consumer Protection Authority, 30 November 2023](#source-ccpa-dp) |

## What every business must do

These apply to any AI voice agent that calls people in India, whatever the sector.

*   Register on your telecom operator’s DLT platform before you make commercial calls, and make them only through registered connections.
*   Use 140-series numbers for promotional calls, and 1600 or 1601 numbers for service and transactional calls where your sector has one. Never use ordinary 10-digit numbers for commercial calls.
*   Declare automated calling to your originating operator in advance, as TRAI’s Third Amendment requires for A2P calls.
*   Check Do Not Disturb preferences before promotional calls, unless you hold explicit consent recorded through the operators’ consent system.
*   Collect only the personal data the call needs, say what it is for, and delete it when that purpose ends.
*   Open every call with who is calling, on whose behalf and why. Say it is an AI agent and offer a person.
*   Stop calling anyone who asks you to, and keep records of consent, calls and complaints.

Sources: [TRAI, 12 February 2025](#source-trai-2025); [TRAI, 18 September 2026](#source-trai-2026); [MeitY, 13 November 2025](#source-dpdp-rules)

## What each sector must add

Regulated sectors carry their regulator’s rules on top of TRAI and DPDP.

### Banks

RBI and TRAI rules decide the number you call from, when you can call about overdue loans and who is responsible.

*   Service and transactional calls, such as EMI reminders and account alerts, only from 1600-series numbers. Promotional offers from 140.
*   Recovery calls about overdue loans only between 8 am and 7 pm, with no threats, intimidation or persistent calling.
*   The bank stays responsible for recovery work it outsources. Hold a vendor’s AI agent to the same rules as a human agent.
*   Tell customers when they are speaking to an AI and give them a way to reach a person, as RBI’s FREE-AI framework recommends.
*   Never ask for OTPs, PINs, CVVs or passwords on a call.

Sources: [TRAI, 19 November 2025](#source-trai-1600); [RBI, 17 January 2025](#source-rbi-1600); [RBI, 12 August 2022](#source-rbi-recovery); [RBI, 13 August 2025](#source-rbi-freeai)

### NBFCs and digital lenders

The same RBI recovery rules apply, plus the Digital Lending Directions for loans sourced or serviced digitally.

*   1600-series numbers for service and transactional calls: NBFCs with assets above ₹5,000 crore from 1 February 2026, other NBFCs from 1 March 2026.
*   Recovery calls about overdue loans only between 8 am and 7 pm, with no threats or harassment.
*   Send the borrower the recovery agent’s details by SMS or email before the first recovery call, and again if the agent changes.
*   The lender stays responsible for its lending service providers and the calls they make.

Sources: [TRAI, 19 November 2025](#source-trai-1600); [RBI, 12 August 2022](#source-rbi-recovery); [RBI, 8 May 2025](#source-rbi-dl)

### Insurance

IRDAI rules cover how insurers sell and service policies over the phone and how they protect the data.

*   Service and transactional calls only from 1600-series numbers since 15 February 2026. Promotional calls from 140.
*   Record telemarketing calls, keep the recordings and tell the customer the call is being recorded.
*   Keep ICT and application logs for 180 days, and report cyber incidents to CERT-In and IRDAI within six hours.
*   Do not promise returns, cover or claim outcomes the policy wording does not support.

Sources: [IRDAI, 6 January 2026](#source-irdai-1600); [IRDAI, 2011](#source-irdai-dm); [IRDAI, 2023, amended April 2026](#source-irdai-cyber)

### E-commerce, D2C and logistics

No sector regulator, but TRAI, DPDP and consumer protection rules all apply to order, delivery and sales calls.

*   Promotional calls, such as offers and cart recovery, only from 140-series numbers, respecting Do Not Disturb unless consent is recorded.
*   Courier and logistics companies: delivery and failed-delivery calls from 1601-series numbers. For other e-commerce service calls such as COD confirmation, TRAI had not named a series by 20 October 2026, so ask your operator which numbers it allows and keep its answer in writing.
*   Keep sales calls free of dark patterns: no false urgency, surprise charges, subscription traps or nagging.
*   Do not take card numbers or OTPs on the call. Send a payment link instead.

Sources: [TRAI, 12 February 2025](#source-trai-2025); [TRAI, August 2026](#source-trai-1601); [Central Consumer Protection Authority, 30 November 2023](#source-ccpa-dp)

### Healthcare, education and other sectors

TRAI and DPDP rules apply in full. Watch for sensitive data.

*   Ask only for the health details the call needs, and keep recordings under a written retention period.
*   A child’s personal data needs verifiable consent from a parent or guardian before it is processed.
*   Use 140-series numbers for promotional calls, such as admissions or appointment offers.

Sources: [MeitY, 13 November 2025](#source-dpdp-rules); [TRAI, 12 February 2025](#source-trai-2025)

## Pre-launch checklist for an AI voice agent in India

1.  Classify every call as promotional, service or transactional.
2.  Get the right numbers from your operator: 140, 1600 or 1601.
3.  Register on DLT and declare automated (A2P) calling to your operator.
4.  Check consent and Do Not Disturb preferences before promotional calls.
5.  Set calling hours: 8 am to 7 pm for loan recovery, and your own policy for everything else.
6.  Open with who is calling and why, say it is an AI, and offer a person.
7.  Act on opt-outs and stop requests during the call.
8.  Collect only the data the call needs, and write down how long you keep it.
9.  Record calls where your regulator requires it, and tell the customer.
10.  Log consent, calls and complaints, and review a sample of calls regularly.

## How Ringg supports these rules

Features in Ringg that map to the checklist. You still own registration, consent and number allocation with your operator.

### Calling windows and call limits

Set the hours each agent may call and how often each person can be called.

### Your own telephony

Connect your operator account, such as Exotel, Plivo, Twilio, Ozonetel or Tata Tele, or a SIP trunk, and call from its numbers.

### Recordings and transcripts

Every completed call is recorded and transcribed, and you can download recordings to your own storage.

### Security and residency

SOC 2 Type II audited and ISO 27001 certified, with deployment in India or on-premise.

[Read Ringg’s security and compliance page](https://www.ringg.ai/security)

## Voice AI compliance in India: FAQs

### Are AI voice agents legal in India?

Yes. No Indian law bans AI voice calls. TRAI’s Third Amendment to the TCCCPR, issued on 18 September 2026, treats them as automated (A2P) calls: a business must declare them to its telecom operator in advance and on DLT, and follow the same number-series, consent and Do Not Disturb rules as any commercial call. Undeclared automated calls are treated as unsolicited commercial communication.

### Which phone numbers should an AI voice agent call from in India?

Promotional calls must come from 140-series numbers. Service and transactional calls from banks, NBFCs, insurers and other RBI-, SEBI-, IRDAI- and PFRDA-regulated entities must come from 1600-series numbers, and utilities, courier and logistics companies use the 1601 series. Ordinary 10-digit mobile or landline numbers cannot be used for commercial calls.

### Do businesses have to tell customers they are talking to an AI in India?

As of 20 October 2026 we found no Indian rule that requires a business to announce an AI agent on a phone call. RBI’s FREE-AI framework of August 2025 recommends that regulated entities disclose AI use to customers and let them contest AI decisions. Saying it is an AI at the start of the call, and offering a person, is the safest default in every sector.

### What hours can an AI agent make loan recovery calls in India?

RBI’s rules for recovery agents, issued on 12 August 2022, bar calls to borrowers about overdue loans before 8 am or after 7 pm and ban intimidation, threats and persistent calling. The lender stays responsible for anyone it engages to make these calls, so apply the same limits to AI agents.

### Does the DPDP Act apply to AI voice calls?

Yes, whenever a call collects or uses personal data such as a name, phone number, voice recording or account details. The DPDP Rules were notified on 13 November 2025, and most duties, including notice, consent, security safeguards and breach reporting, apply from May 2027. Penalties go up to ₹250 crore.

### Do insurers have to record AI telemarketing calls?

IRDAI’s distance marketing guidelines require insurers and their telemarketers to record and preserve telemarketing calls and to tell the customer that the call is recorded. Since 15 February 2026, insurers and intermediaries must also make service and transactional calls only from 1600-series numbers.

### Can an AI voice agent call numbers registered on Do Not Disturb?

Not for promotional calls, unless the customer’s explicit consent is recorded through the telecom operators’ consent system. Service and transactional calls follow their own rules and must come from the designated number series.

### What changed in TRAI’s Third Amendment in 2026?

Issued on 18 September 2026, it defines A2P calls as calls placed by an application or automated platform without direct human dialling, including artificial-voice calls. Businesses must declare them to their operator in advance and on DLT, and undeclared ones are treated as spam. Operators detect spam with AI/ML, three complaints in ten days plus an AI flag can trigger action, and A2P calls outside the designated number series can carry a charge of up to ₹0.05 a minute. The provisions take effect in phases.

### What are the penalties for non-compliant AI calling in India?

Under TRAI’s rules, a sender that keeps breaking them can have all its telecom connections, including SIP trunks, cut off across operators for a year and be blacklisted. Under the DPDP Act, penalties go up to ₹250 crore for failing to protect personal data. RBI and IRDAI can also take supervisory action against the entities they regulate.

### Which numbers should e-commerce brands use for COD confirmation and delivery calls?

Courier and logistics companies use 1601-series numbers under TRAI’s Phase I direction of August 2026. As of 20 October 2026, TRAI had not named a series for other e-commerce service calls, so ask your operator which numbers it allows for them and keep its answer in writing. Promotional calls, such as offers and cart recovery, must use the 140 series.

## Sources

Rules checked against these documents and reports on 20 Oct 2026. Where the regulator’s own copy could not be linked, the report or summary is marked as such.

1.  [TCCCPR (Second Amendment) Regulations, 2025: press release No. 11/2025](https://trai.gov.in/sites/default/files/2025-02/PR_No.11of2025.pdf) TRAI · 12 February 2025 · Official document
2.  [TRAI strengthens consumer protection with amendments to TCCCPR, 2018](https://www.pib.gov.in/PressReleasePage.aspx?PRID=2102413) Press Information Bureau · February 2025 · Official document
3.  [TCCCPR (Third Amendment) Regulations, 2026: press release No. 119/2026](https://www.trai.gov.in/sites/default/files/2026-09/PR_No119of2026.pdf) TRAI · 18 September 2026 · Official document
4.  [TRAI strengthens framework for curbing unsolicited commercial communications through technology-driven enforcement](https://www.pib.gov.in/PressReleseDetailm.aspx?PRID=2311989) Press Information Bureau · September 2026 · Official document
5.  [Direction on mandatory phase-wise adoption of 1600-series numbers (copy published by NCDEX)](https://www.ncdex.com/public/uploads/circulars/Telecom%20Regulatory%20Authority%20of%20India%20\(TRAI\)%20Direction%20dated%2019.11.2025%20-%20Mandatory%20Phase-wise%20Adoption%20of%201600-Series%20Numbers_1763729564.pdf) TRAI · 19 November 2025 · Official document
6.  [Prevention of financial frauds perpetrated using voice calls and SMS (circular, reproduced by TaxGuru)](https://taxguru.in/rbi/rbi-directs-measures-combat-voice-call-sms-frauds.html) RBI · 17 January 2025 · Report or summary
7.  [IRDAI circular IRDAI/PP&GR/CIR/MISC/02/01/2026 on adopting the 1600 series (summary by Taxmann)](https://www.taxmann.com/post/blog/irdai-mandates-1600-series-numbers-for-insurance-calls) IRDAI · 6 January 2026 · Report or summary
8.  [Direction on 1601-series numbers for service and transactional calls by utilities, courier and logistics companies (reported by ThePrint)](https://theprint.in/economy/trai-directs-use-of-1601-series-for-service-transactional-calls-by-utilities-logistics-cos/3010594/) TRAI · August 2026 · Report or summary
9.  [Digital Personal Data Protection Rules, 2025 (notification note published by PIB)](https://static.pib.gov.in/WriteReadData/specificdocs/documents/2025/nov/doc20251117695301.pdf) MeitY · 13 November 2025 · Official document
10.  [Outsourcing of financial services: responsibilities of regulated entities employing recovery agents (DOR.ORG.REC.65/21.04.158/2022-23), reported by Business Standard](https://www.business-standard.com/amp/article/finance/rbi-directs-loan-recovery-agents-not-to-intimidate-borrowers-no-calling-before-8am-after-7pm-122081201144_1.html) RBI · 12 August 2022 · Report or summary
11.  [Reserve Bank of India (Digital Lending) Directions, 2025 (analysis by IndiaCorpLaw)](https://indiacorplaw.in/2025/07/19/rbis-revised-digital-lending-guidelines-strengthening-guardrails-in-an-evolving-ecosystem/) RBI · 8 May 2025 · Report or summary
12.  [Framework for Responsible and Ethical Enablement of AI (FREE-AI) committee report (summary by Khaitan & Co)](https://www.khaitanco.com/sites/default/files/2025-08/Ergo%20-%20FREE%20AI%20Framework%20-%2028%20Augusut%202025.pdf) RBI · 13 August 2025 · Report or summary
13.  [IRDAI guidelines on distance marketing of insurance products, reported by Deccan Herald](https://www.deccanherald.com/business/irda-issues-guidelines-telemarketing-2406872) IRDAI · 2011 · Report or summary
14.  [IRDAI Information and Cyber Security Guidelines, 2023 (summary by Deloitte)](https://www.deloitte.com/in/en/services/consulting/services/risk-regulatory-forensic/irdai-tightens-cyber-net.html) IRDAI · 2023, amended April 2026 · Report or summary
15.  [IT (Intermediary Guidelines and Digital Media Ethics Code) Amendment Rules, 2026, G.S.R. 120(E) (summary by DSCI)](https://www.dsci.in/resource/content/it-amendment-rules-2026) MeitY · 10 February 2026 · Report or summary
16.  [Guidelines for Prevention and Regulation of Dark Patterns, 2023 (reported by SCC Online)](https://www.scconline.com/blog/post/2023/12/04/ccpa-notifies-guidelines-for-prevention-and-regulation-of-dark-patterns-2023-legal-news/) Central Consumer Protection Authority · 30 November 2023 · Report or summary

## Launching an AI voice agent in a regulated team?

Talk to Ringg about calling windows, number series and deployment in India, or email admin@ringg.ai.

[Security and compliance](https://www.ringg.ai/security)[Book a demo](https://www.ringg.ai/book-a-demo)

Source: https://www.ringg.ai/voice-ai-compliance-india