Fake Wifi Networks, Juice Jacking UAE Experts Warn Of Cyber Threats Travellers Face

Many travelers connect to free wifi at airports or charge their phones at public ports without thinking twice. But these moments can be opportunities for cybercriminals. Experts warn that travelers going abroad should stay alert to avoid scams.

According to Rafal Hyps, CEO at travel risk management firm Sicuro Group, cybercriminals thrive on the distractions people face while travelling.“The mix of urgency and lowered awareness makes travel one of the most profitable environments for basic cyber scams, especially for travellers accustomed to the safety of the UAE,” he said.

Cyber threats such as fake Wi-Fi networks, fraudulent payment links, phishing emails, and 'juice jacking' can put travelers' devices at risk. Using personal accounts to log into vacation homes or car rentals can also cause problems.

Stay up to date with the latest news. Follow KT on WhatsApp Channels.

Haider Pasha, CSO EMEA at Palo Alto Networks, pointed out that the biggest mistake holidaymakers make is assuming travel environments are trustworthy.“The best habit is basic cyber hygiene: verify networks, limit permissions, and keep devices updated,” he said.“Scammers often exploit distracted travellers with phishing messages, fake booking confirmations, and refund scams that create urgency and prompt clicks.”

Experts say fake or lookalike wifi networks are common in busy travel areas because they are easy to set up and hard to spot at a glance.“Attackers name networks to resemble legitimate ones and rely on travellers connecting out of habit,” said Rafal.“If a login page asks for credentials that you do not normally use for wifi, requests payment unexpectedly, or pushes you to download an app or profile, disconnect and use cellular data instead.”

He explained that public networks remain risky due to redirection and deception. For sensitive tasks like banking, email, or password manager access, travellers should use cellular data or their own hotspot.“An important habit you need to apply is verifying if you are in the real app or real website before you log in,” he said.

Haider also warned about public USB charging stations.“They pose a threat known as 'juice jacking ' which allows attackers to install malware or extract data,” he said.“Travellers should use their own chargers or power-only USB cables.”

Haider said one of the biggest risks when traveling abroad is having your phone stolen.“Attackers may attempt to access banking apps, emails, and cloud accounts by exploiting weak passcodes, unlocked devices, SIM cards, and lock-screen notifications, making it critical to remotely lock or wipe the device, change passwords, and notify banks and mobile providers,” he said.

Rafal stressed the importance of acting quickly.“Simple things you can do yourself begin with using Find My iPhone or Android Find My Device to mark the phone as lost, lock it, and erase it if recovery is unlikely,” he said.“Change your email password first, then your Apple ID or Google account password, then banking and key accounts.”

He also said to suspend the SIM, freeze bank cards, block transfers, and call your employer's IT department to notify them and follow their advice.“If you use an authenticator app, assume it is compromised until you have re-secured your accounts,” he said.

Erasing data

Haider warned against leaving personal data behind in rental cars, hotel TVs, or other systems.“All information, including contacts, call logs, streaming accounts, and navigation history, all of which should be wiped out before checkout,” he said.

Rafal concluded by saying travel should not be treated like home.“Harden the phone before you leave and keep sensitive activity off public networks,” he said.“Use a strong passcode, enable biometric lock, shorten auto-lock time, and restrict lock-screen previews for messages. Use cellular data or your own hotspot for banking and email, and verify actions inside official apps rather than through links in messages. Finally, do not use the same user and password for multiple logins. It's the simple things that create the biggest issues.”

MENAFN17122025000049011007ID1110491256