---
title: "Property portals, brokers, landlords and rentals: your rights and..."
description: "Broker calls after one enquiry, listings posted without consent, fake rentals, landlords and hidden cameras. Plain steps, helplines and templates."
url: "https://dpdpr.in/rights/property-rentals/"
canonical: "https://dpdpr.in/rights/property-rentals/"
site: "dpdpr.in"
updated: "2026-11-02"
disclaimer: "Independent reference, not legal advice. Not affiliated with the Government of India or MeitY."
---

# Property portals, brokers, landlords and rentals: your rights and how to complain

Plain-language help for ordinary people. General information, not legal advice. Helplines, portals and screen names were checked against official Government and regulator pages on 1 November 2026. Portals change: if a screen looks different, follow the words on the screen and the official guide linked in each step.

## What data they hold

- Property portals: your name, phone, searches and listings.
- Brokers and channel partners: leads bought from portals or builders.
- Landlords: ID copies and police verification forms.
- Homestays and hostels: ID and booking details.

## Your rights under current law

- Property portals are online platforms: their grievance officer must acknowledge in 24 hours and resolve in 7 days (IT Rules, 2021, as amended in 2026), with appeal to the Grievance Appellate Committee.
- Under RERA (sections 9 and 10), real estate agents who sell in registered projects must register with the State RERA and must not use unfair trade practices.
- Real estate marketing can be blocked with BLOCK 2 to 1909.

## Your DPDP rights once in force

Sections 11 to 14 of the DPDP Act (your rights) and the duties of companies in sections 4 to 10 start on **13 May 2027** (G.S.R. 843(E)). Until then, use the sector rules on this page. After that date you can use both.

From 13 May 2027 you can ask a portal which brokers received your number (section 11) and ask for erasure (section 12). Withdrawing consent must be as easy as giving it (section 6(4)).

- Access: a summary of your data and who it was shared with ([section 11](https://dpdpr.in/act/section-11/)).
- Correction, completion, updating and erasure ([section 12](https://dpdpr.in/act/section-12/)).
- Grievance redressal by the company, before going to the Board ([section 13](https://dpdpr.in/act/section-13/)).
- Nominate someone to act after your death or incapacity ([section 14](https://dpdpr.in/act/section-14/)).
- Withdraw consent, as easily as you gave it ([section 6(4)](https://dpdpr.in/act/section-6/)).

## Common problems

- Dozens of broker calls after one enquiry.
- Brokers listing your property without consent.
- Numbers staying on portals after a sale.
- Fake rental listings asking for a token amount.
- Landlords sharing tenants' ID copies.

## Evidence to keep

- Listing links and screenshots.
- Call logs with dates.
- Payment proof for any token or deposit.
- Complaint numbers.

See the full [evidence checklist](https://dpdpr.in/rights/evidence-checklist/).

## How to approach, step by step

Go in this order. Start with the company. Move to the next step only when the time limit has passed or the reply is not good enough. If money was lost or you were threatened, go to 1930 or the police first.

### Complain to the app or platform, then the Grievance Appellate Committee

Social media and other online platforms must publish the name and contact of a Grievance Officer. The IT Rules, 2021 (as amended on 10 February 2026) set short time limits.

**Keep this ready before you start:**

- Links (URLs) to the post, profile or account.
- Screenshots with date and time.
- Your own account name, and the complaint number from the platform.

1. Find the platform's Grievance Officer. The rules require the name, contact and complaint method to be shown on the website or app, usually under Help, Legal or Grievance.
2. Send your complaint there. Attach links and screenshots.
3. The Grievance Officer must acknowledge it within 24 hours and resolve it within 7 days.
4. For a request to remove content such as impersonation, privacy invasion or harassment, the limit is 36 hours.
5. For content that shows your private body parts, nudity, sexual acts, or impersonates you (including morphed images), the platform must act within 2 hours of your complaint.
6. If you are not satisfied, or get no reply within 30 days, appeal to the Grievance Appellate Committee within 30 days.
7. Open [gac.gov.in](https://gac.gov.in). Click **Appellant Login (File appeal / View status)**.
8. Agree to the privacy policy, enter your mobile number and the captcha, then click **Send OTP**.
9. Fill the appeal and upload the Grievance Officer's reply or your complaint proof.
10. The GAC order is uploaded on the site. You get an SMS and email. The platform must publish a compliance report.
11. The GAC does not handle money fraud or cybercrime. For those use 1930 or cybercrime.gov.in.

Checked on 1 November 2026 against: [IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended up to 10 February 2026](https://www.meity.gov.in/documents/act-and-policies/information-technology-intermediary-guidelines-and-digital-media-ethics-code-rules-2021-it-rules-2021-IjM5QjMtQWa), [Grievance Appellate Committee (IT Rules, 2021): FAQ](https://gac.gov.in/CMSData/FAQs).

### Block marketing calls and SMS (DND) and complain by SMS to 1909

1909 is a free short code on every Indian mobile network. You can block commercial calls and messages, and complain about spam. These codes are from TRAI's own public notice.

**Keep this ready before you start:**

- The phone with the SIM you want to protect.

1. To block all commercial calls and SMS except transactional ones, send an SMS with the text **FULLY BLOCK** (or **BLOCK 0**) to **1909**.
2. To block all except transactional and service messages, send **BLOCK PROMO** (or **BLOCK 50**) to 1909.
3. To block only one category, send **BLOCK 1** (banking, insurance, financial products, credit cards), **BLOCK 2** (real estate), **BLOCK 3** (education), **BLOCK 4** (health), **BLOCK 5** (consumer goods and automobiles), **BLOCK 6** (communication, broadcasting, IT), **BLOCK 7** (tourism and leisure) or **BLOCK 8** (food and beverages).
4. You can also dial **\*1909\*0#** (USSD), or call **1909** and follow the voice menu, or use the **TRAI DND** app.
5. Keep any reply SMS you get from your operator.
6. To complain about a spam SMS or call, send an SMS to **1909** in this format: **The UCC, XXXXXXXXXX, dd/mm/yy**. Put the spam text or a short description first, then the sender's number or header, then the date.
7. Do it within 7 days of the spam. Under TRAI's 2025 amendment a complaint is valid if it has the sender's number, your number, the date and a short description.
8. Save the complaint ID your operator sends.

Checked on 1 November 2026 against: [TRAI public notice: block commercial calls and SMS through 1909](https://www.trai.gov.in/sites/default/files/2024-10/Ads_8_2024.pdf), [TRAI FAQ on unsolicited commercial communication (SMS complaint format)](https://trai.gov.in/faqcategory/unsolicited-commercial-communicationsucc), [TRAI: TCCCPR (Second Amendment) Regulations, 2025 (complaint within 7 days)](https://trai.gov.in/sites/default/files/2025-02/Regulation_12022025.pdf), [PIB, 12 February 2025: TRAI amends TCCCPR, 2018](https://www.pib.gov.in/PressReleasePage.aspx?PRID=2102413).

### Complain about a marketing call or SMS on Chakshu (within 7 days)

Use this for unwanted marketing (spam) that is not a fraud. A complaint made within 7 days of the call or SMS is a valid complaint and the telecom company must act on it. After 7 days it only counts as a report.

**Keep this ready before you start:**

- A screenshot of the call log or SMS.
- The number or header (for example AB-XYZBNK-P) that sent it.
- Date and time (within the last 7 days).
- Your mobile number, your telecom company, your State and telecom circle.

1. Open [sancharsaathi.gov.in/sfc](https://sancharsaathi.gov.in/sfc/) or the Sanchar Saathi app.
2. Under **Report Spam (UCC)**, click **Proceed**.
3. Choose the medium: **Call** or **SMS**.
4. Choose the category, for example Banking/insurance/financial products/credit cards, Real Estate, Education or Health.
5. Attach the screenshot.
6. Type the sending number or header. (If the number is international, the form sends you to the fraud section instead.)
7. Enter the date and time.
8. Write the details in at least 10 characters. Add any numbers or links in the message.
9. Enter your number. Choose your telecom company (Airtel, BSNL, RJIL, TATA or Vodafone Idea), your State and your circle.
10. Type the captcha, verify your number with OTP, tick the declaration, click **Preview**, then **Submit**.
11. Save the complaint ID you are given.
12. Track it on your telecom company's page. Sanchar Saathi lists these: Airtel airtel.in/track-request, BSNL ucc-bsnl.co.in/customers, Jio jio.com/track\_sr\_status, Vi through the Vi app.

Checked on 1 November 2026 against: [Chakshu: report suspected fraud or spam (Sanchar Saathi)](https://sancharsaathi.gov.in/sfc/), [Sanchar Saathi portal and FAQ (Department of Telecommunications)](https://sancharsaathi.gov.in/), [TRAI: TCCCPR (Second Amendment) Regulations, 2025 (complaint within 7 days)](https://trai.gov.in/sites/default/files/2025-02/Regulation_12022025.pdf).

### Report money lost to fraud: call 1930

1930 is the national cyber crime helpline run with the Ministry of Home Affairs. It links your report to banks and wallets so they can try to stop the money. Call as fast as you can. The sooner the report reaches the bank, the better the chance.

**Keep this ready before you start:**

- Your mobile number.
- Name of the bank, wallet or app the money left from.
- Account number, wallet ID or UPI ID that was debited.
- Transaction ID or 12 digit UTR number for each payment.
- Date and amount of each payment.
- Card number, if a debit or credit card was used.
- Screenshots of the payment and of the chat or SMS.

1. Dial **1930** from any phone.
2. Tell them you want to report a financial cyber fraud.
3. Give each transaction one by one: bank, transaction ID or UTR, date and amount.
4. Write down the acknowledgement number they give you. It also comes by SMS.
5. Save that SMS. Take a screenshot of it.
6. Now file the full complaint on [cybercrime.gov.in](https://cybercrime.gov.in) (steps below). The official cybercrime.gov.in instructions ask you to complete it within 24 hours of the call.
7. Call your bank's official customer care number too, and ask them to block the card, UPI or account. Use the number on your card or passbook.

Checked on 1 November 2026 against: [I4C (Ministry of Home Affairs): National Cybercrime Reporting Portal and 1930](https://i4c.mha.gov.in/ncrp.aspx), [National Cyber Crime Reporting Portal: FAQ](https://cybercrime.gov.in/Webform/FAQ.aspx).

## Ready-to-use complaint

Copy, fill the brackets, and send it through the company's official channel. Keep a copy.

To: Grievance Officer, \[Portal name\] Subject: Remove my number and listing \[link\] On \[date\] I \[enquired about / listed\] a property. Since then brokers call me. Please remove my number from all lead lists, take down \[listing link\], and tell me which brokers received my number. Please acknowledge within 24 hours and resolve within 7 days as the IT Rules require. \[Name\] \[Mobile\]

## Time limits

- Portal grievance: 24 hours to acknowledge, 7 days to resolve.
- GAC appeal: within 30 days.
- Spam complaint: within 7 days.
- DPDP rights: from 13 May 2027.

## If this happened to you

- [\*\*The movers app subcontracted my move and I could not get support\*\*You booked packers and movers through an app, a different firm turned up, and things went wrong.](https://dpdpr.in/rights/scenarios/movers-subcontracted/)
- [\*\*I found a hidden camera in a homestay, hostel or rented room\*\*You found a camera, or a device that looks like one, in a room you rented.](https://dpdpr.in/rights/scenarios/hidden-camera-in-stay/)
- [\*\*I viewed one property on a portal and dozens of brokers started calling\*\*After one enquiry or a premium plan on a property site, brokers call nonstop.](https://dpdpr.in/rights/scenarios/property-portal-broker-calls/)
- [\*\*Brokers posted my property without asking me\*\*Your flat or house appears on a portal, with photos, listed by someone you never authorised.](https://dpdpr.in/rights/scenarios/broker-posted-my-property/)
- [\*\*How do I get my number off property portals?\*\*You want your number removed from portals and broker lists.](https://dpdpr.in/rights/scenarios/remove-number-property-portal/)
- [\*\*I lost my deposit to a fake rental listing in a WhatsApp group\*\*Someone posted a flat, took a token amount or deposit, and vanished.](https://dpdpr.in/rights/scenarios/fake-rental-listing-deposit/)
- [\*\*My landlord shared my personal details with others\*\*Your landlord passed your ID, phone or rent details to brokers, neighbours or strangers.](https://dpdpr.in/rights/scenarios/landlord-shared-my-details/)
- [\*\*A rental or society app leaked user data\*\*A rental, flat sharing or society app reported or was accused of a data leak.](https://dpdpr.in/rights/scenarios/rental-app-data-leak/)

## Official sources

- [IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as amended up to 10 February 2026](https://www.meity.gov.in/documents/act-and-policies/information-technology-intermediary-guidelines-and-digital-media-ethics-code-rules-2021-it-rules-2021-IjM5QjMtQWa)
- [Grievance Appellate Committee (IT Rules, 2021): FAQ](https://gac.gov.in/CMSData/FAQs)
- [Real Estate (Regulation and Development) Act, 2016 (India Code)](https://www.indiacode.nic.in/indiacode/bitstream/123456789/2158/1/A201616.pdf)
- [TRAI: TCCCPR (Second Amendment) Regulations, 2025 (complaint within 7 days)](https://trai.gov.in/sites/default/files/2025-02/Regulation_12022025.pdf)
- [Chakshu: report suspected fraud or spam (Sanchar Saathi)](https://sancharsaathi.gov.in/sfc/)
- [National Consumer Helpline (Department of Consumer Affairs)](https://consumerhelpline.gov.in/public/)
- [Digital Personal Data Protection Act, 2023 (MeitY copy of the Gazette)](https://www.meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf)
- [G.S.R. 843(E): start dates for the Act](https://www.meity.gov.in/static/uploads/2025/11/c56ceae6c383460ca69577428d36828b.pdf)
