Renting in Barcelona
Check the property, the person’s right to rent it and the written terms before paying a deposit. An ID photo or a viewing alone does not prove someone is authorised to rent it out.
Official Generalitat warning →Dichabao Protect is a set of free tools to spot warning signs when renting a home, buying second-hand or receiving a suspicious message, and to help you decide what to check next.
Select a tool to open it. Select it again to close it.
See where a link leads before opening it. This tool does not check reputation or detect malware.
Use a different random password for each account. Store it in a password manager.
It is not saved or sent. Avoid generating passwords on shared or potentially compromised devices.
Select the protections you already have and review what remains.
Check the property, the person’s right to rent it and the written terms before paying a deposit. An ID photo or a viewing alone does not prove someone is authorised to rent it out.
Official Generalitat warning →Open the Wallapop or Vinted app yourself and check payments and orders there. On Milanuncios, review the terms for the specific service: protections vary between transactions.
Wallapop safety →Vinted help →If someone claims to represent your bank or a known service, end the conversation and verify using its app or a phone number from an independent source. A hidden caller ID alone does not prove a scam.
INCIBE resources →If you sent money or bank details, contact your bank through an official channel as soon as possible and explain what happened. Keep messages, receipts and transaction details; notify the platform and ask the authorities how to report it.
If you shared a password, change it from a trusted device, review active sessions and enable multi-factor authentication. If you installed a suspicious app or gave remote access, stop using that device for sensitive activity and seek technical help.
Do not pay anyone who promises to recover your money in exchange for an advance fee. You can get free advice from INCIBE at 017.
Have I Been Pwned: check whether your email appears in known breaches directly on that service. Your email is shared with the provider; no matches do not guarantee it was never exposed.
AEPD Priority Channel: for the unlawful sharing of sexual or violent content that puts someone at serious risk. It is not a general scam reporting channel.
General guidance · Sources: INCIBE, the Catalan Cybersecurity Agency and platform help centres · Reviewed: 2 October 2026. Independent project, not affiliated with these organisations.
These tools are free. They currently contain no affiliate links. Any paid recommendations will be clearly identified.
If something seems wrong or you’ve already shared information, get in touch. We’ll offer guidance and, if needed, help remotely or in Barcelona.