What Is Juice Jacking?
The USB Charging Threat
Travelers Need to Know

What juice jacking actually is

A USB cable does two things simultaneously: transfers power and transfers data. Most people only think about the power part when they plug into a public charging station. Juice jacking exploits the data transfer capability.

In a juice jacking attack, a malicious actor replaces or modifies a public USB charging port — at airports, hotel lobbies, cafes, or train stations — to also transfer data or malware when a device connects. Your phone thinks it's just charging. The compromised port is also copying files, installing software, or logging keystrokes.

The term was coined by security researcher Brian Krebs in 2011 after researchers demonstrated the attack at DEF CON. The FBI and FTC have both issued public warnings about it in recent years.

The two types of juice jacking attacks

How real is the risk for travelers?

Here's the honest answer: documented real-world juice jacking attacks on travelers are rare. Most of what's reported is proof-of-concept research by security professionals, not active criminal operations. The FBI warning, while legitimate, doesn't cite specific confirmed incidents involving travelers.

That said, "rare" doesn't mean "impossible." The attack is technically straightforward for anyone with moderate hardware knowledge. Higher-risk environments include airports and transit hubs in countries with less reliable infrastructure, budget hotels, and anywhere USB ports are unmonitored.

The reason to take it seriously isn't that it's common — it's that the fix costs nothing and the downside of being wrong is significant.

How to protect yourself — in order of importance

• 🔌
  Use a power outlet, not a USB port

  This is the complete fix. A standard power outlet carries electricity only — no data transfer possible. Carry your own charger and use the wall socket. If you don't have one, buy a universal travel adapter.
• 🔋
  Carry a portable battery pack

  Charge your power bank from a trusted outlet at home or in your hotel. Use the power bank to charge your phone while traveling. You never need to touch a public USB port.
• 🔒
  Use a USB data blocker ("USB condom")

  A USB data blocker is a small passthrough adapter that physically breaks the data pins in a USB connection — only power pins remain active. Plug it between your cable and the public port. Charging works; data transfer is impossible. Costs about $10.
• 📱
  Lock your phone before plugging in

  On both iOS and Android, a locked screen significantly limits data access via USB. The "Trust this device?" prompt only appears on the lock screen — if your phone is locked, the default is to deny data transfer and only allow charging.
• 🔄
  Keep your OS updated

  Modern iOS and Android have much stronger USB data transfer protections than older versions. Both now default to charge-only mode and require explicit user confirmation before allowing data transfer. Staying updated is basic hygiene.

Juice jacking and the broader travel security picture

Juice jacking is one piece of a larger set of threats travelers face. The physical threat of a compromised USB port gets a lot of press — but the more common, higher-probability threat is digital: your data being exposed on unsecured hotel wifi.

While a juice jacking attack requires physical access to infrastructure and a motivated attacker, hotel wifi exposure is passive — the moment you connect to a shared network, your browsing history is visible to the network admin and potentially to other guests. It happens automatically, without any deliberate attack.

The two protections work on different layers. For juice jacking: carry your own charger and use a data blocker. For wifi exposure: use a VPN like NordVPN that encrypts all traffic before it touches the hotel network. Both take about five minutes to set up and cover the two most common travel security scenarios.

Frequently asked questions