India's Department of Telecommunications has ordered operators to show callers' registered names by default on 4G and 5G networks from 1 November 2026. The circular is dated 13 October and was reported by MediaNama. The goal is legitimate. The design leaves users no control over their own identity, and the opt-out TRAI had already conceded was dropped.
The strongest case for the mandate
India's phones are flooded with spam and fraud calls. TRAI's February 2024 recommendations on Calling Name Presentation (CNAP) argued that a telecom-network service built on operator records would be more reliable than crowd-sourced caller-ID apps such as Truecaller. A name tied to KYC records is harder to fake than a user-contributed label. A default setting also matters in practice: a protection that only 5% of users switch on does little for the spam problem. Reasonable people can back a default-on design for that reason.
What the circular actually does
According to MediaNama and ThePrint, the order works as follows:
- Operators must provide CNAP "without the requirement of any separate request from such user."
- When the recipient has not saved the caller's number, the name from the caller's KYC records is shown.
- Operators must maintain a database linking numbers to names and query each other's databases for cross-network calls.
- Operators must use a "security-by-design" approach and must not retain the name after the call.
- Businesses may show a "preferred name" if it is a registered trademark or GST-registered trade name.
- Only users with Calling Line Identification Restriction (CLIR) are exempt.
MediaNama reports that DoT has limited CLIR since 2015 to VIPs and government officials. Everyone else needs a recommendation from senior police officers. For an ordinary subscriber, then, there is no way to decline.
The opt-out that vanished
The policy history is the sharpest part of this story. TRAI recommended in February 2024 that CNAP be offered to subscribers on request. DoT sent a back-reference in September 2025 asking for a default service. According to MediaNama and ThePrint, TRAI answered in October 2025 by accepting a default service with an opt-out. The final circular contains neither the opt-in nor the opt-out. The independent regulator conceded a default. The ministry then removed the one safeguard that made the concession acceptable.
Why a CLIR-only exemption fails
The Internet Freedom Foundation argued in 2024 that CLIR cannot serve as a practical way out. Few subscribers know it exists, and access requires police-linked approval and renewal. That is a poor substitute for a settings toggle. Several groups of people have ordinary reasons not to broadcast a legal name to anyone they dial:
- Domestic-violence survivors calling a shelter, a lawyer or a helpline.
- Journalists and their sources.
- Whistleblowers and activists.
- Anyone calling a business, a landlord or a stranger they have not yet decided to trust.
The circular shows the name when the recipient has not saved the caller. That is the moment a name is most sensitive.
The spam argument also cuts both ways. MediaNama's reporting on the 2024 debate noted that scammers who know a target's name can make calls seem more legitimate. A name on screen is a signal, not proof. Fraudsters who hold a victim's number but not their name gain a free lookup. Fraudsters who already have a name gain credibility when the operator's network appears to vouch for it.
The data-protection gap
The order creates a number-to-name lookup that is queried on every call. It requires non-retention and grievance handling. But MediaNama reports that the circular does not mention the Digital Personal Data Protection Act, 2023, or consent. It sets no resolution timeline for complaints. It does not say how "security-by-design" will be checked. A database that is queried constantly, across operators, is exactly the kind of system where verification and breach accountability matter most.
IFF raised the same concern in 2024 about central databases and the absence of a mature data-protection regime. Whatever one thinks of the DPDP Act's adequacy, a mandatory disclosure scheme should be able to say how it fits the Act's consent-and-purpose logic. This one is silent.
A proportionate alternative
A proportionate design is easy to describe, and it was already on the table:
- Keep default-on display, which serves the anti-spam goal.
- Restore the opt-out TRAI accepted in October 2025, perhaps with a short warning that opted-out calls may be treated with suspicion.
- Open a simple route to CLIR for people with a safety reason, without a police recommendation.
- Publish the audit method for non-retention and a complaint-resolution deadline.
- Phase the 1 November start-up so that the pilots' results are public first.
The measure also reaches only 4G and 5G. The 2G, 3G and landline calls that fraudsters often use are excluded for now, so the anti-scam benefit is partial while the privacy cost is immediate.
Policy that serves a real public problem deserves support. But a mandate that overrides a regulator's own accepted compromise, with an exemption that in practice covers VIPs, is not proportionate. India can fight spam without making every unsaved caller announce a legal name to a stranger.