Spam calls are one of the most complained-about problems in Indian telecom, and regulators have responded by tightening the rules for anyone who makes business calls. For a company using an AI calling agent, the risk is simple: a few angry complaints can get a phone number blocked — and with it, your whole calling operation.
The good news is that the habits that keep you compliant are the same ones that keep customers happy: call people who expect to hear from you, stop when they ask you to, and never mislead them. ExoCall now builds those habits into every call with a Do Not Call list, built-in conduct rules, and compliance flags.
Key Takeaway
When a caller says "don't call me again" on an ExoCall call, the AI apologises and ends the call, and the post-call review adds the number to your Do Not Call list with their exact words. Listed numbers are never dialled again — by campaigns, callbacks, single calls or the API. Every call is also checked for risky moments like no consent or false claims, flagged by severity for your review.
TRAI's Calling Rules, in Plain Words
Business calls in India are governed by TRAI's Telecom Commercial Communications Customer Preference Regulations (TCCCPR), 2018, which TRAI amended on 12 February 2025 to crack down harder on spam. The key ideas for any business making calls:
- People can opt out nationally — Anyone can register their preferences on the DND registry (the National Customer Preference Register) by calling or texting 1909, or through the TRAI DND app.
- Promotional calls have their own number series — Promotional calls are meant to come from 140-series numbers, which DND users can block.
- Service and transactional calls have another — The 1600 series is for service and transactional calls, introduced first for banking, financial services and insurance.
- Consent matters — Calling someone who never enquired or agreed to be contacted is how most spam complaints start.
- Complaints have consequences — Numbers reported for unsolicited commercial calls can be disconnected, and the rules on repeat offenders were tightened in 2025.
This is a simplified overview, not legal advice. Read TRAI's amended regulation or speak to your legal adviser about how the rules apply to your calls.
The Safest Calls Are the Ones People Expect
Most businesses using ExoCall call people who already reached out: someone filled a form on your website, sent an enquiry, visited your centre, or is an existing customer. These are the calls that convert — and the calls least likely to cause a complaint. A few simple habits go a long way:
- 1
Call people who enquired
Use ExoCall's API or website-form integration to call a lead within minutes of their enquiry, while they still remember you.
- 2
Say who you are and why you're calling
Your outbound opening instruction should name your business and the reason for the call in the first sentence.
- 3
Call at reasonable hours
Set campaign calling hours in IST — campaigns pause automatically outside them.
- 4
Stop the moment someone asks
This is where a Do Not Call list does the heavy lifting for you.
How ExoCall's Do Not Call List Works
ExoCall's Do Not Call list is a per-workspace list of numbers your business will never dial again. It fills itself from your calls:
What happens when a caller opts out
- The AI respects it on the call — Every ExoCall agent is instructed to apologise, confirm the person won't be called again, and end the call — without trying to change their mind.
- The number is listed automatically — The post-call review adds it with the caller's exact words and a link to the call, so you always know why it's there.
- It's never dialled again — Campaigns skip listed numbers, scheduled callbacks are cancelled, and single calls or API calls to them are refused.
- "Not interested" isn't an opt-out — Only a clear request not to be called counts, so your list doesn't fill up with people who were just busy.
- You stay in control — Owners can add numbers by hand, search the list, and remove a number if the person later asks to be contacted.
- Inbound still works — People on your list can still call you — the list only stops you calling them.
Compliance Flags: Catch Problems Before They Become Complaints
After every call, ExoCall's AI review checks for moments that put your business or your phone number at risk. A flag is only raised with an exact quote as proof — most calls have nothing to flag.
| Flag | Who | Severity |
|---|---|---|
| Abusive, threatening or shaming language | Agent | High |
| Impersonating a bank, government office, courier or other business | Agent | High |
| Asking for an OTP, PIN, CVV or full card/bank number | Agent | High |
| Prohibited topics (betting, lotteries, adult content, political campaigns, threatening debt recovery) | Agent | High |
| False claims — guaranteed returns, results or jobs | Agent | Medium |
| No consent — "I never gave you my number" | Caller | Medium |
| Complaint threat — TRAI, police, consumer forum, "I'm on DND" | Caller | Medium |
| Opt-out request | Caller | Low |
| Abusive caller | Caller | Low |
Calls with a medium or high flag get a flag icon in Call Logs, and the Flagged filter shows them all in one click. Expand a call to see each flag with the exact words that triggered it.
Why does this matter? A "no consent" flag might mean a lead source is sending you numbers of people who never enquired. A "false claim" flag might mean your Business Knowledge promises something it shouldn't. Each flag points at something you can fix — before the next hundred calls repeat it.
Guardrails Built Into Every ExoCall Agent
Flags catch problems after the fact. These rules prevent them in the first place — they're added to every ExoCall agent automatically, whatever its script says:
- Never claim to be, or to call for, a bank, government office, police, court, courier or telecom company.
- Never ask for an OTP, password, PIN, CVV, or full card or bank account number.
- Never threaten, insult, shame or pressure a caller — including about unpaid dues.
- Never promise guaranteed returns, results, jobs or prizes.
- If asked how you got their number, answer honestly, apologise, and offer not to call again.
ExoCall also verifies each business before it can call on ExoCall's phone numbers, and our Acceptable Use Policy sets out what our lines can and can't be used for. That protects every customer who shares our telephony network — including you.
Bottom Line
AI calling is powerful because it scales. Compliance has to scale with it. With ExoCall, every opt-out is honoured automatically, every call is checked for risk, and every agent follows the same guardrails — so you can call more people without becoming the spam call everyone complains about.
Live now for all ExoCall workspaces
Find your list under Do Not Call in the sidebar, and the Flagged filter in Call Logs. No setup needed — opt-outs are picked up from today's calls onwards.
Frequently Asked Questions
What is a Do Not Call list?
A Do Not Call (DNC) list is a list of phone numbers a business must not call again, usually because the person asked not to be contacted. In ExoCall, every workspace has its own Do Not Call list. Numbers on it are never dialled: campaigns skip them, scheduled callbacks are cancelled, and single or API-triggered calls are refused. The person can still call you.
How does a number get on ExoCall's Do Not Call list?
Two ways. Automatically: after every call, ExoCall's AI review listens for a clear opt-out — for example "dobara call mat karna", "mera number hata do" or "don't call me again" — and adds the number with the caller's exact words and a link to the call. Saying "not interested" or "busy right now" does not count as an opt-out. Or manually: a workspace owner can add any 10-digit number on the Do Not Call page.
Is ExoCall's Do Not Call list the same as the national DND registry?
No. ExoCall's list is your workspace's own list of people who asked you not to call them. TRAI's DND registry (the National Customer Preference Register, which people join by calling or texting 1909) is separate. If you run promotional campaigns, make sure you have the person's consent or follow TRAI's rules for promotional calls — your own DNC list does not replace that.
What are compliance flags in ExoCall?
Compliance flags are risky moments the post-call AI review found on a call, each backed by an exact quote. High severity: the agent was abusive, impersonated another organisation, asked for an OTP or card details, or raised a prohibited topic. Medium: the agent made a false claim, the caller says they never gave consent, or the caller threatens a complaint. Low: an opt-out request or an abusive caller. Calls with medium or high flags get a flag icon and appear under the Flagged filter in Call Logs.
Can I remove a number from the Do Not Call list?
Yes, a workspace owner can remove it — but only do this if the person has since asked to be contacted again. Once removed, the number can be called like any other.