Free public Wi-Fi can feel like a lifesaver when you’re out and about, but public Wi-Fi is also one of the easiest ways for scammers to access your personal information if you’re not careful.
Here’s how scammers use public Wi-Fi to their advantage, and the safer alternatives to consider when you need to get online away from home.
Why public Wi-Fi can be risky
Public Wi-Fi networks are usually open or lightly protected. That means anyone nearby can connect, including scammers. Unlike your home internet, these networks often don’t encrypt the data you send and receive, making it much easier for cybercriminals to intercept.
Scammers know many people will connect to Wi-Fi when it’s available and usually access their mobile banking, email and online shopping, which makes public Wi-Fi a prime hunting ground.
Common ways scammers use public Wi-Fi
1. Fake Wi-Fi networks
One of the most common tricks is setting up a fake network with a convincing name, such as “Free Airport Wi-Fi” or “Café Guest Wi-Fi”. You connect thinking it’s legitimate, but the scammer now has a direct line to your device.
Once connected, they may:
- Monitor what you’re typing
- Redirect you to fake websites
- Capture login details like usernames and passwords
Tip: If you’re unsure, always ask staff for the exact network name before connecting.
2. “Man-in-the-middle” attacks
This is when a scammer secretly positions themselves between you and the website you’re using. You think you’re communicating directly with your bank, email provider or social media account, but the scammer is intercepting the information in between.
This can allow them to:
- Steal login details
- Read private messages
- Collect financial information
These attacks are hard to spot and can happen silently in the background.
3. Malware downloads
Some public Wi-Fi networks prompt you to “accept terms and conditions” or download something before you can connect. In some cases, this can be malware disguised as a legitimate update or login page.
Once installed, malware can:
- Track what you type
- Access saved passwords
- Monitor banking or shopping activity
Tip: If a Wi-Fi network asks you to download software to connect, don’t use it.
4. Session hijacking
Even if you don’t log in to anything new, scammers can sometimes hijack existing sessions. For example, if you’re already logged in to social media or email. This can give them access without needing your password.
From there, they may:
- Send scam messages from your account
- Attempt password resets on other services
- Gather information for identity theft
What information is most at risk?
When using public Wi-Fi, scammers are often looking for:
- Online banking logins
- Email passwords
- Social media accounts
- Credit card details
- Personal information such as date of birth or address
Even small bits of information can be combined and used for identity fraud later on.
Safer alternatives to public Wi-Fi
The good news is you don’t have to avoid the internet altogether when you’re out. There are safer ways to stay connected.
1. Use your mobile data
Your phone’s mobile data connection is usually much more secure than public Wi-Fi. If you’re accessing sensitive information such as banking apps, paying bills, or logging into important accounts, mobile data is the safest option.
Tip: If you’re worried about data usage, save heavy browsing or streaming for when you’re back on a trusted network.
2. Use a personal hotspot
If you’re using a laptop or tablet, tethering it to your phone’s hotspot is far safer than connecting to public Wi-Fi. You’re essentially creating your own private network.
Make sure your hotspot:
- Has a strong password
- Isn’t left on when not in use
3. Consider a VPN
A Virtual Private Network (VPN) encrypts your internet traffic, making it much harder for scammers to see what you’re doing, even on public Wi-Fi.
While VPNs aren’t foolproof, they add an extra layer of protection, especially if you travel often or work remotely.
Tip: Choose a reputable, paid VPN provider. Free VPNs can sometimes collect and sell your data.
Smart habits if you must use public Wi-Fi
Sometimes public Wi-Fi is unavoidable. If that’s the case, these habits can reduce your risk:
- Avoid banking and shopping on public Wi-Fi
Don’t log into banking apps, enter card details, or make payments unless you’re on mobile data. - Look for “https” websites
The “s” means the site is encrypted. While not a guarantee of safety, it’s better than unencrypted sites. - Turn off auto-connect
This stops your device from automatically joining unsafe networks without you realising. - Log out when you’re done
Don’t stay logged into accounts longer than necessary. - Keep your device updated
Software updates often include security fixes that protect against known vulnerabilities.
What to do if you think you’ve connected to a scammer’s Wi-Fi
If you realise or even just suspect that you’ve connected to a fake or unsafe Wi-Fi network, don’t panic. Acting quickly can reduce the risk of anything serious happening.
- Disconnect immediately
Turn off Wi-Fi on your device straight away - this cuts the connection and stops any further information being shared. - Avoid logging into anything else
If you’re still connected, don’t log into email, social media, banking apps, or shopping websites. Once you’ve disconnected, switch to mobile data or a trusted network before doing anything online. - Change your passwords
If you logged into any accounts while connected, especially email, banking, or social media, change those passwords as soon as possible. If you reuse the same password across multiple accounts, change it everywhere. - Check your accounts for unusual activity
Keep an eye out for unknown transactions, password reset emails you didn’t request, messages sent from your account that you didn’t write and new devices or locations listed in your account settings. - Run a security scan on your device
If your device downloaded anything while connected, or you were prompted to install software, run a security or antivirus scan. This can help identify malware or suspicious activity. - Contact your bank if needed
If you accessed banking apps or entered card details while connected, contact your bank and let them know what happened. It’s always better to report concerns early, even if nothing seems wrong yet.
Scammers are becoming more sophisticated, and public Wi-Fi attacks are difficult to detect until it’s too late. A quick check of emails at a café can turn into months of dealing with fraud, identity theft, or compromised accounts, and understanding how these scams work makes it easier to make safer choices and protect your personal and financial information.
A few small changes can go a long way in keeping your information, and your money, safe while you’re out and about.
Learn more about scams and how to protect yourself by visiting our website.
This information provides general advice only. We do not provide advice based on any consideration of your personal objectives, needs or circumstances.
