Fake WiFi networks, juice jacking; UAE experts warn of cyber threats travellers face

Many travelers connect to free wifi at airports or charge their phones at public ports without thinking twice. But these moments can be opportunities for cybercriminals. Experts warn that travelers going abroad should stay alert to avoid scams.

According to Rafal Hyps, CEO at travel risk management firm Sicuro Group, cybercriminals thrive on the distractions people face while travelling. “The mix of urgency and lowered awareness makes travel one of the most profitable environments for basic cyber scams, especially for travellers accustomed to the safety of the UAE,” he said.

Recommended For You

UAE-India travel: SpiceJet to launch Ahmedabad–Sharjah flights in February

'The Rip' star Matt Damon explains how Netflix keeps viewers engaged

'A Knight of the Seven Kingdoms' Review: A smaller, smarter return to Westeros

Sharjah Ruler announces new Al Ashkal neighbourhood in Khorfakkan

Spain announces 3 days of mourning as train crash toll rises to 40

 

Bertil Brendeke, Sales Leader at Comet Backup LTD said using public wifi could risk giving access to personal or sensitive data to cybercriminals. “It is the equivalent of giving a house key to a stranger who can then walk freely in a private property, looking into someone’s personal belongings and stealing anything they want,” he said.

Cyber threats such as fake Wi-Fi networks, fraudulent payment links, phishing emails, and 'juice jacking' can put travelers’ devices at risk. Using personal accounts to log into vacation homes or car rentals can also cause problems.

Stay up to date with the latest news. Follow KT on WhatsApp Channels.

Haider Pasha, CSO EMEA at Palo Alto Networks, pointed out that the biggest mistake holidaymakers make is assuming travel environments are trustworthy. “The best habit is basic cyber hygiene: verify networks, limit permissions, and keep devices updated,” he said. “Scammers often exploit distracted travellers with phishing messages, fake booking confirmations, and refund scams that create urgency and prompt clicks.”

Common cyber risks at airports

Experts say fake or lookalike wifi networks are common in busy travel areas because they are easy to set up and hard to spot at a glance. “Attackers name networks to resemble legitimate ones and rely on travellers connecting out of habit,” said Rafal. “If a login page asks for credentials that you do not normally use for wifi, requests payment unexpectedly, or pushes you to download an app or profile, disconnect and use cellular data instead.”

Rohan Daniel Nair, Founder & COO AHAD pointed out that travellers should always check for ‘HTTPS’ padlocks and certificate warnings as well. He added that attackers can send urgent "booking cancellation" or "visa issue" messages with malicious links to create confusion.

“Unfortunately, stress impairs judgment,” he said. “To identify such attempts, travellers should remain calm and check the source first. They should also verify communication directly. Additionally, they need to be extra careful with QR codes, as a lot of them are now being replaced by stickers which are fake ones to cover the real codes, and they re-direct to malicious pages.”

Haider also warned about public USB charging stations. “They pose a threat known as 'juice jacking' which allows attackers to install malware or extract data,” he said. “Travellers should use their own chargers or power-only USB cables.”

Stolen phones

Haider said one of the biggest risks when traveling abroad is having your phone stolen. “Attackers may attempt to access banking apps, emails, and cloud accounts by exploiting weak passcodes, unlocked devices, SIM cards, and lock-screen notifications, making it critical to remotely lock or wipe the device, change passwords, and notify banks and mobile providers,” he said.

Rafal stressed the importance of acting quickly. “Simple things you can do yourself begin with using Find My iPhone or Android Find My Device to mark the phone as lost, lock it, and erase it if recovery is unlikely,” he said. “Change your email password first, then your Apple ID or Google account password, then banking and key accounts.”

He also said to suspend the SIM, freeze bank cards, block transfers, and call your employer’s IT department to notify them and follow their advice. “If you use an authenticator app, assume it is compromised until you have re-secured your accounts,” he said.

Bertil added that it was important for people to always setup the right level of security on their devices. “They can use 2FA, MFA, facial recognition, time delay features before activating accessibility changes and so on,” he said, explaining that these will help in the unfortunate event of a phone being lost.

Erasing data

Haider warned against leaving personal data behind in rental cars, hotel TVs, or other systems. “All information, including contacts, call logs, streaming accounts, and navigation history, all of which should be wiped out before checkout,” he said.

Rafal concluded by saying travel should not be treated like home. “Harden the phone before you leave and keep sensitive activity off public networks,” he said. “Use a strong passcode, enable biometric lock, shorten auto-lock time, and restrict lock-screen previews for messages. Use cellular data or your own hotspot for banking and email, and verify actions inside official apps rather than through links in messages. Finally, do not use the same user and password for multiple logins. It’s the simple things that create the biggest issues.”

Nasreen Abdulla

nasreen@khaleejtimes.com

Nasreen Abdulla is a Special Correspondent covering food, tech and human interest stories. When not challenged by deadlines, you’ll find her pulling off submissions on the jiu jitsu mats.