DPI Brief — August 27, 2026

TRAI Weighs Callback Functionality on 1600-Series Numbers (L7 — Trust/Regulation)

TRAI is actively discussing a proposal with telecom operators to enable callback functionality on 1600-series numbers — the number range used by banks, insurers, and financial institutions for transactional alerts and service calls. Currently, customers cannot call back these numbers, forcing them to navigate IVR menus or visit branches to respond to alerts about fraud, loan approvals, or account issues.

Banks have pushed for this capability, arguing it would reduce customer friction and improve response times for time-sensitive financial communications. However, telecom operators remain hesitant — the concern is that enabling callbacks on 1600 numbers could cannibalise regular voice revenue, since these calls would bypass standard tariff plans. ¹

This discussion sits at the intersection of L2 (Payments) and L7 (Trust) — it directly affects how banks communicate via UPI-linked mobile numbers, and any TRAI mandate on commercial communication rules reshapes the regulatory perimeter.

Separately, TRAI has also initiated phase-wise implementation of the 1601-series for service and transactional calls by utilities, courier, and logistics companies — expanding the structured numbering regime beyond financial services. ²

TRAI Releases Draft 13th Amendment to Telecom Consumer Protection Regulations (L7)

TRAI has released the Draft Telecom Consumer Protection (Thirteenth Amendment) Regulation, 2026, targeting the scarcity of voice-and-SMS-only tariff packs. Following its 2024 mandate requiring operators to offer at least one voice-SMS STV, TRAI observed that few such plans actually exist in the market. The new draft proposes that for every bundled STV with voice, SMS, and data, operators must also offer a corresponding voice-and-SMS-only voucher at a proportionally reduced price. ³

This matters for DPI because affordable voice connectivity underpins access to UPI helplines, DigiLocker OTP flows, ABHA health ID registration, and virtually every citizen-facing digital service. When consumers are forced into data-bundled plans they don’t need, the effective cost of accessing government digital services rises — a regressive outcome the regulator is now trying to correct.

₹62,500 Crore Mobile Phone Manufacturing Scheme Notified (L6/L7 — Governance/Trust)

MeitY has notified the ₹62,500 crore Mobile Phone Manufacturing Scheme (MPMS), running from FY2026-27 to FY2030-31. The scheme builds on the PLI for Large Scale Electronics Manufacturing and is designed to deepen India’s position in the global mobile phone value chain — moving beyond assembly to components and Indian-brand manufacturing. ⁴

The India Cellular and Electronics Association (ICEA) welcomed the move, noting it strengthens the electronics manufacturing ecosystem under Minister Ashwini Vaishnaw’s leadership. For DPI, this is foundational infrastructure: the device layer is the access layer. India’s 1.4 billion citizens interact with Aadhaar, UPI, DigiLocker, and ONDC primarily through smartphones. A stronger domestic manufacturing base reduces import dependency and can lower device costs — expanding the addressable base for every DPI layer above it.

HDFC Bank Data Governance Scrutiny: Aadhaar on a Marketer’s Phone (L1/L7 — Identity/Trust)

A detailed investigative piece has revisited the multiple controversies surrounding HDFC Bank — including a ₹45 crore mis-selling allegation and, most relevant to DPI watchers, the discovery of Aadhaar details found on a third-party marketer’s phone. The report traces the governance gap: MCA controls filing environments, banks receive and use data for customer acquisition, marketing intermediaries sit in between, TRAI regulates commercial communications, RBI regulates banks, and MeitY administers the DPDP framework — yet no single regulator has demonstrated end-to-end accountability for how Aadhaar data flows from UIDAI to marketing intermediaries. ⁵

This is a stress test for the L1 (Identity) and L7 (Trust) layers simultaneously. The DPDP Act’s Data Protection Board is expected to enforce the regime, but until it is fully operational, these inter-regulatory gaps remain exploitable. The piece underscores that having policies on paper is not the same as having systems capable of demonstrating those policies were followed in practice.

Covering L1, L2, L6, and L7 layers of India’s Digital Public Infrastructure stack.