Starting September 1, the Telecom Regulatory Authority of India (TRAI) will implement a new policy under which telecom operators will inspect text messages for web addresses, links to over-the-top messaging services, app installation files, or phone numbers. Any SMS containing these elements will be blocked unless it is pre-approved.
This move is part of TRAI’s broader strategy to combat phishing attempts and other fraudulent activities that exploit SMS to deceive users. Scammers often use these methods to trick individuals into divulging sensitive information or to install malicious software on their devices.
The regulation mandates that entities, such as banks and online platforms, must register and whitelist their numbers by August 31 to continue sending One-Time Passwords (OTP) for transactional alerts or authentication purposes.
Previously, companies were only required to register their header and message templates with telecom operators, excluding the specific content of their messages. However, the new directive introduces a more stringent approach, compelling telecom operators to implement a mechanism capable of analysing the content of messages and blocking those that deviate from the approved template.
While this rule is expected to reduce fraud and scams, it has raised concerns among major telecom players like Reliance Jio, Bharti Airtel, and Vodafone Idea. These operators are seeking an extension to the deadline, citing the complexities involved in complying with the new requirements, reports Indian Express.
However, as recent reports suggest, TRAI is unlikely to grant additional time, signalling a firm stance on the issue.
In a related development earlier this month, the TRAI directed telecom operators to disconnect all services provided to unregistered telemarketers engaged in spam activities. If found guilty, these telemarketers will face a two-year ban from accessing telecom resources.
With India’s widespread use of the internet and smartphones, the country has become a goldmine for scammers and other cyber threat actors. Complicating the situation is the general Indian populace’s lack of cybersecurity knowledge.
In the News: ISPs in USA and India targeted via zero-day in Versa Director app
