Scam category

WiFi and hotspot scams

WiFi and hotspot scams exploit the trust people place in public internet access. Attackers set up rogue access points that mimic legitimate networks at airports, hotels, and cafes. Once connected, victims unknowingly route all traffic through the attacker, who can intercept passwords, session tokens, and payment details in real time.

10 scams trackedAll categories

Category activity

“WiFi scam”

↑ 165%

Watch for

  • Two WiFi networks at the same location have almost identical names.
  • A captive portal page asks for credit card details or social media logins to connect.
  • Your browser shows certificate warnings immediately after connecting to a public network.

Common searches

evil twin wifi attackfake public wifi scamairport wifi scamcaptive portal phishing
WiFi and hotspot scams
↑ 15%

evil twin airport WiFi scam

An attacker sets up a WiFi network with the same name as a legitimate airport hotspot, intercepting all data transmitted by connected users including passwords and financial information.

What to do first

Confirm the exact network name and authentication process with airport staff before connecting.

Targets

Travelers

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

hotel WiFi phishing scam

A fake hotel WiFi login page mimics the hotel's branding and asks for your room number, name, and credit card to provide internet access, stealing your payment information.

What to do first

Verify the exact WiFi network name and login procedure at the front desk before connecting.

Targets

Travelers

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

coffee shop man-in-the-middle scam

An attacker on the same coffee shop WiFi network intercepts communications between your device and the router, capturing sensitive data or injecting malicious content.

What to do first

Always use a VPN on public WiFi — it encrypts all traffic and prevents interception.

Targets

Remote workers

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

fake captive portal scam

A rogue WiFi network presents a convincing login page that mimics a legitimate business, collecting your email, social media credentials, or payment information.

What to do first

Never enter social media or email passwords on a WiFi login page — legitimate portals do not require them.

Targets

Public WiFi users

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

Bluetooth proximity attack scam

An attacker exploits Bluetooth connections in crowded public spaces to send malicious files, access device data, or push unwanted notifications to nearby phones.

What to do first

Set your Bluetooth to non-discoverable or turn it off entirely when not actively using it.

Targets

Travelers

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

juice jacking charging station scam

Public USB charging stations at airports and hotels are compromised to install malware or extract data from connected phones while they charge.

What to do first

Carry your own charger and plug into a power outlet rather than using public USB ports.

Targets

Travelers

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

fake mobile hotspot scam

An attacker shares a mobile hotspot with a generic name like 'Free WiFi' in a public area, capturing all traffic from users who connect.

What to do first

Be suspicious of generic open WiFi networks, especially in areas without advertised free internet.

Targets

Travelers

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

WiFi Pineapple attack scam

A WiFi Pineapple device is used to automatically impersonate saved WiFi networks on your device, tricking it into connecting and exposing your data to the attacker.

What to do first

Regularly clear saved WiFi networks from your device, especially open networks from hotels, airports, and cafes.

Targets

Business travelers

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

public library WiFi spoofing scam

An attacker creates a fake WiFi network mimicking a public library's hotspot, targeting patrons who use library computers and WiFi for banking, email, and job applications.

What to do first

Confirm the exact WiFi name with library staff and look for posted network information at the help desk.

Targets

Public WiFi users

Seen in

U.S.

WiFi and hotspot scams
↑ 15%

event venue fake network scam

A fake WiFi network at a conference, concert, or sporting event mimics the venue's official network to capture data from thousands of attendees simultaneously.

What to do first

Check the event program, app, or organizer's website for official WiFi network details before connecting.

Targets

Travelers

Seen in

U.S.

Related categories