Airtel quietly stripped out a clause that barred customers from sharing their Unlimited 5G Data via mobile hotspot before screenshots of the restriction began circulating on social media this month, a person familiar with the matter told MediaNama. The only binding ceiling on the plan remains a 300 GB fair-usage threshold; once a subscriber crosses that mark, the carrier reserves the right to throttle speeds by classifying the usage as commercial. Airtel has not issued a public statement on the change.
The episode has reignited a long-running debate in India about how telecom operators police what customers do with the data they pay for, and whether the methods used to do so stray into privacy violations or net-neutrality breaches.
Why Spotting Hotspot Use Is Technically Tricky
When a laptop or tablet connects through a phone's hotspot, the traffic rides the same mobile pipe as the handset's own data. There is no explicit flag inside the data stream that says "this packet came from a tethered device." To enforce a hotspot ban, a carrier must infer the presence of a second device by reading subtle signals in the packet headers, the addressing labels that wrap each chunk of network traffic.
Security researchers outline several giveaways an operator can look for. The most common is the Time-to-Live (TTL) counter, a value in the packet header that drops by one every time the data passes through a network device. Traffic that originates on the phone and traffic that is routed through the phone from a laptop will show different TTL values, giving the network a hint that tethering is happening. Operators can also fingerprint the Maximum Transmission Unit (MTU), the largest data chunk a device sends at once, or look for operating-system traits that differ between a phone and a laptop.
Some users have already begun countering these checks. They alter TTL values manually or route traffic through VPNs, which masks the connection's characteristics and makes tethered data harder to distinguish.
The Deep Packet Inspection Question
Reading packet headers is one thing. Peering inside the payload, the actual content of the data, is another. That deeper inspection is known as Deep Packet Inspection (DPI). Security professionals liken header analysis to judging a book by its cover; DPI is opening the book and reading the pages.
An operator can usually flag most tethering from header signals alone, so the sharper privacy concern only arises if it inspects the payload itself. Whether Indian carriers do so is unclear. More than a decade ago, the Centre for Internet and Society (CIS) filed Right to Information requests with the Department of Telecommunications (DoT), TRAI, BSNL, and MTNL asking whether ISPs in India deploy DPI. DoT replied that it had issued no direction to use DPI, and MTNL denied using it. Yet neither clarified what traffic-management practices operators actually follow. To this day, carriers do not routinely disclose how, or whether, they inspect customer traffic.
Where India's Net Neutrality Rules Stand
In 2017, TRAI recommended a sweeping rule that bars operators from "any form of discrimination or interference in the treatment of content," including blocking, slowing, or granting preferential speeds. The principle applies to discrimination based on sender, receiver, network protocols, or user equipment. The same recommendations carved out an exemption for "reasonable traffic management practices."
The DoT adopted those recommendations in 2018 and wrote them into licence conditions, meaning a breach is a licence violation. But TRAI has never clarified whether restricting a data benefit by device type, such as banning hotspot use, falls under the discrimination bar or the traffic-management exemption. The ambiguity matters. DoT, not TRAI, holds enforcement power over licence conditions, and since the rules took effect there has been little public information about monitoring or action taken against violators.
A multi-stakeholder body that TRAI recommended to develop technical standards for traffic management has also failed to materialise in the form proposed. That gap leaves practices like usage-based throttling largely untested against the rules.
The 300 GB Ceiling and What "Commercial" Means
Airtel's postpaid terms state that once a customer burns through 300 GB in a billing cycle, the carrier may classify the usage as commercial and "implement throttle speeds." The threshold itself is not unusual; fair-use policies are standard across the industry. What is notable is that Airtel appears to have backed away from trying to enforce a device-level restriction, at least on paper, even as it retains broad language about throttling heavy users.
For consumers, the practical takeaway is that hotspot sharing is no longer explicitly prohibited in the terms, but crossing 300 GB still carries a speed penalty. For regulators, the incident is a reminder that India's net-neutrality framework remains lightly tested when it comes to the granular ways carriers shape traffic.
The next question is whether TRAI or DoT will step in to clarify whether usage-based throttling, or the traffic-analysis techniques used to justify it, comply with the licence conditions they wrote six years ago.