Advertising Disclosure

Public phone chargers may be free, but they could pose a security risk

Federal officials warn they can be easily modified to steal your data

Updated:

Avatar photo
By:
Avatar photo

Mark Huffman
Reporter

Mark Huffman has covered consumer issues since 2004, with a special focus on protecting and empowering older adults. A former news correspondent for the Associated Press Radio Network, Westwood One, and ConsumerAffairs, Mark brings decades of journalistic experience to RetirementLiving.com. He is passionate about giving consumers a voice and helping them make informed decisions. Mark has also created educational content, including Senior Scam Alert, a video resource designed to help seniors recognize and avoid fraud. He holds a B.A. from the University of Kentucky and lives with his family in Richmond, Virginia.
smart phone charging on a table

Photo by Andreas Haslinger on Unsplash

Key Insights

  • TSA and FCC issue new alerts about “juice jacking” risks at public charging stations
  • Cybercriminals are using public USB ports to install malware or steal personal data
  • Experts urge consumers to use AC outlets or portable power banks instead

Retirees who travel often, whether to visit the grandkids or to a “bucket list” destination, often spend time in airport terminal lounges waiting for a flight. If their phone or tablet is low on power, they may be tempted to plug it into one of those handy public USB charging stations.

But two federal agencies recently advised caution. They warn that these public charging stations pose a cybersecurity threat from something known as “juice jacking.”

An advisory from the Transportation Security Administration and the Federal Communications Commission urges Americans to steer clear of free USB charging ports because they can be modified by bad actors to steal data or install malware.

“Bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices,” the FCC wrote on its website.

The alert warns that plugging into an unfamiliar port may unwittingly connect users to compromised networks or devices, exposing private information, including passwords, banking details, and personal messages.

The threat

Juice jacking exploits the dual-purpose nature of USB cables, which transmit both electrical power and data. When a device is connected to a malicious port, hidden software can silently install surveillance tools, steal sensitive data, or even lock the device entirely in a ransomware-style attack.

While real-world examples remain relatively rare, government cybersecurity experts caution that the mere possibility is enough to merit avoidance. The tactic has been demonstrated in cybersecurity research labs and simulated environments for years, and increasing connectivity means wider attack surfaces for hackers.

What to do

To minimize risk, authorities and experts recommend several precautionary measures:

  • Bring your own AC adapter and plug directly into wall outlets rather than USB ports.
  • Use a portable power bank, especially when traveling or commuting.
  • Carry a data-blocking USB adapter or “USB condom”, which physically blocks data pins on the cable and only allows power to flow.
  • Avoid borrowed or unfamiliar cables, even if they appear to be sealed or branded.

The advisory comes as cybersecurity threats continue to evolve. Officials say it is important to raise public awareness and promote better personal tech hygiene.

The summer travel season is winding down, but Americans are still on the go, and increasingly rely on mobile devices while traveling. The agencies caution that, when it comes to free charging stations, the cost may be much higher than you think.