What Is Juice Jacking? How to Protect Your Phone from Public USB Charging Scams

You've probably done it without thinking—plugged your phone into a free public charging station at the airport, in a hotel lobby, or at your local coffee shop. It's quick, convenient, and seems totally harmless. But there's a growing risk hiding behind those innocent-looking USB ports, and it's called juice jacking

So, what is juice jacking? In short, it's a type of cyberattack that uses those public charging stations to access or steal data from your phone. The term was coined back in 2011 by security journalist Brian Krebs, and the FBI has issued repeated warnings about this threat since—most notably through its Denver field office in 2019 and again in 2023. In this guide, we'll break down how juice jacking works, the types of attacks out there, what to do if you think you've been hit, and—most importantly—how to protect yourself.

What Is Juice Jacking & How It Works

Juice jacking is a cyberattack where hackers use public USB ports or tampered cables to steal data or install malware on your device. When you plug in, you're not just getting power—you may also be opening a hidden data connection.

The FBI officially warns against this tactic, noting that "bad actors have figured out ways to use public USB ports to introduce malware and monitoring software onto devices." The name combines "juice" (power) and "jacking" (hijacking)—your phone gets hijacked while you think you're just charging.

Here's how it works:

1. You plug into a malicious USB port or cable.
2. The connection opens a data pathway, not just power.
3. Malware installs silently, or your data (contacts, passwords, messages) gets stolen—often within seconds.

Attackers can embed hidden chips inside cables or rig public charging kiosks. Most people never realize it's happening until it's too late.

Types of Juice Jacking Attacks

Not all juice jacking attacks look the same. Some are designed to silently siphon off your data, while others aim to infect your device with malware that sticks around long after you've unplugged. Here are the most common types you should know about:

Data Theft (Passive Juice Jacking)

This is the most straightforward version. You plug your phone into a compromised USB port, and without any visible signs, the attacker copies sensitive information off your device. That could include your contacts, emails, text messages, photos, or even login credentials stored in your browser or apps. It's called "passive" because you don't get any malware or pop-ups—just a quiet data grab while you think you're charging up.

Malware Installation (Active Juice Jacking)

This one's more aggressive. Instead of stealing your data directly, the attacker uses the USB connection to install malicious software on your device. That malware might sit silently in the background, logging your keystrokes, watching your activity, or sending your data to an external server. In some cases, it might even lock you out of your own device or give hackers remote access—letting them manipulate your apps and settings without you even realizing it.

Choice Jacking (The New Threat)

Researchers from the Graz University of Technology in Austria demonstrated a new variation of juice jacking called "Choice Jacking". This sophisticated attack bypasses the confirmation prompts that modern smartphones use to protect users. Instead of waiting for you to approve a data connection, the malicious charger can simulate your screen taps and permit itself. While iPhones and iPads are the least vulnerable to this technique (only one of the three demonstrated attacks worked on Apple devices), the discovery underscores that juice jacking threats continue to evolve.

Multi-Device Attack

This type of attack turns your device into an unwitting accomplice. After being infected via a compromised charging station, your device can transfer the malware to other devices through shared cables or connections. Essentially, your device becomes a carrier, spreading the infection further, often without your knowl

How to Tell If You've Been Juice Jacked

As we've learned, most juice jacking attacks happen silently. But there are a few signs your device might have been compromised after using a public USB charger. Keep an eye out for these red flags:

• Unusual Battery Drain: Your phone starts losing battery much faster than usual, even with normal use.
• Overheating: The device feels hot, even when you're not running heavy apps.
• Sluggish Performance: Apps take longer to open, or your phone freezes or crashes more than usual.
• Pop-Ups or Ads: You're seeing strange ads, pop-ups, or redirects while browsing or using apps.
• New or Unknown Apps: Apps appear that you didn't download yourself.
• High Data Usage: There's a spike in your mobile data usage that you can't explain.
• Changed Settings: Things like your homepage, default apps, or security settings have changed without your input.
• Unusual Background Activity: You notice background processes running when you're not actively using your phone.

Not every glitch means you've been juice jacked—but if you spot a few of these signs shortly after using a public USB port or cable, it's worth digging deeper.

What to Do if You've Been Juice Jacked

Think you've been juice jacked? Don't panic—just take action quickly. Here's what you should do:

1. Disconnect Immediately: Unplug from the charging station or cable right away. Cutting the connection might stop or at least limit the damage.
2. Power Off Your Device: Shut your phone down completely. This can stop malicious software from finishing its install or continuing to run in the background.
3. Run a Security Scan: If you have antivirus or security software installed, run a full scan immediately. Look for any suspicious apps, unknown files, or settings that may have changed.
4. Remove Suspicious Apps or Profiles: On iPhones, go to Settings > General > VPN & Device Management and remove any unknown profiles. On Android, head to Apps and uninstall anything that looks fishy.
5. Change Your Passwords: If there's a chance your data was accessed, change your passwords—especially for email, banking apps, cloud storage, and anything sensitive. Enable two-factor authentication wherever possible.
6. Monitor for Unusual Activity: Keep an eye on your bank accounts, email inboxes, and social media for unauthorized logins or password reset attempts.
7. Consider a Factory Reset: If strange behavior persists or you want to be absolutely sure everything's clean, back up your data and do a full reset of your device.

How to Prevent Juice Jacking

The good news? Avoiding juice jacking is actually pretty easy once you know what to look out for. With just a few smart habits and tools, you can keep your device safe while charging on the go. For airport-specific scenarios, Is It Safe to Charge Your Phone at the Airport?. Here's how to stay protected:

1. Use a Wall Outlet with Your Own Charging Gear

The safest and most reliable way to charge your phone in public is to plug into a standard wall outlet using your own charging cable and power adapter. Wall outlets deliver only power (not data), and using your own gear eliminates the risk of data theft or malware from public USB ports or mystery cables that could be tampered with.

2. Enable Apple's Wired Accessories Security Setting (2026 Update)

Here's a critical update for iPhone users in 2026. With the release of iOS 26, Apple introduced a new security feature called Wired Accessories permission control that helps protect against juice jacking. When you connect your iPhone to any wired accessory (including charging cables and docking stations), the system now prompts you to choose whether to allow data transfer. If you select "Deny," your device still charges, but data communication is completely blocked.

To find this setting, go to Settings > Privacy & Security > Wired Accessories. You can customize your permission strategy with four options:

• Always Ask — Approve every accessory manually, every time
• Ask for New Accessories — Only prompt when connecting to a new accessory
• Allow When Unlocked Automatically — Automatically allow when phone is unlocked (this is the default setting, which security experts warn may be too permissive)
• Always Allow — Allow all accessories (least secure)

IMPORTANT: Security experts have raised concerns that Apple's default setting for this feature is "Allow When Unlocked Automatically," which could expose iPhone users to potential juice jacking risks. Security researchers and tech media outlets have urged iPhone users to manually change this default setting to "Always Ask" or "Ask for New Accessories" to ensure maximum protection. If you haven't checked this setting on your iPhone yet, do it now—your data may be more exposed than you think.

3. Invest in a Power Bank

Carrying your own power bank means you never have to rely on public USB stations—eliminating juice jacking risk entirely. Anker Prime Power Bank (26K, 300W) is a great choice: compact, airline-approved (99.75Wh / under TSA limit), and powerful enough to charge a MacBook Pro (M5) up to 1.1 times or an iPhone 16 Pro multiple times. With a total 300W output across two USB-C ports (up to 140W each) and one USB-A port with PD 3.1 support, 250W max input for ultra-fast recharging, smart display, app control, and ActiveShield 4.0 temperature protection, it keeps your devices safe and juiced up anywhere.

4. Use a USB Data Blocker (aka "USB Condom")

A USB data blocker is a small device you plug in between your cable and the USB port. It physically blocks data pins and only allows power through, protecting you from unwanted data transfer. They're inexpensive and easy to carry.

5. Use Charge-Only Cables

Charge-only cables are designed without data wires, allowing your device to charge without opening a data connection. Using these cables adds an extra layer of security when charging in public places. Look for cables labeled "charge-only" or "data-free"—they're a simple, inexpensive way to stay protected at public ports.

6. Always Tap "Charge Only" When Prompted

If you connect your device to a USB port and receive a prompt asking whether to "Trust this computer?" or "Share data," always select "No" or "Charge only." This tells your device to allow power flow without opening a data connection—keeping your personal information safe.

7. Lock or Power Down Your Device Before Charging

If you have no other options and urgently need to charge, lock your device or power it down before plugging into a public charging station. In most cases, USB ports cannot sync with a locked or powered-down device, reducing the risk of juice jacking.

8. Keep Your Software Updated

Both Apple and Android have coded protections against juice jacking into their operating systems. In iOS 26, Apple specifically enhanced USB access control to better defend against USB connection attacks. Keeping your device updated ensures you have the latest security patches and defenses against evolving threats like Choice Jacking.

Frequently Asked Questions

How do you know if you've been juice-jacked?

It can be hard to tell right away, but there are some signs to watch for—like your phone suddenly running slower, overheating, draining battery fast, or showing pop-ups or apps you didn't install. If you notice anything unusual after using a public USB charging port, it's worth taking a closer look.

Is it safe to charge a phone in a hotel room?

Generally, yes—if you're using your own wall charger and cable plugged into an AC outlet. But avoid using USB ports built into hotel lamps or alarm clocks, just to be safe. Those ports could be tampered with, especially in less reputable hotels.

Are iPhones protected from juice jacking in 2026?

iPhones have built-in security features that help reduce the risk. With iOS 26, Apple introduced Wired Accessories permission control, which prompts users before allowing data transfer. However, security experts note that the default setting is "Allow When Unlocked Automatically," which may not be sufficient protection. To maximize protection, manually change this setting to "Always Ask" or "Ask for New Accessories" in Settings > Privacy & Security > Wired Accessories.

Is juice jacking a real threat in 2026?

It's real but rare. Security researchers have repeatedly demonstrated the attack is technically possible—Choice Jacking in 2025 proved the threats keep evolving—and the FBI has issued official warnings. Documented real-world cases remain uncommon, but as the FBI and TSA point out: why take the risk when safer options (your own charger, a power bank, a data blocker) exist?

Conclusion

Now you know what juice jacking is—and how to stop it. Public USB ports aren't worth the risk. Carry your own power bank or a USB data blocker, and always use a wall outlet when possible.

iPhone users: Go to Settings > Privacy & Security > Wired Accessories right now and change the default "Allow When Unlocked Automatically" to "Always Ask" or "Ask for New Accessories." That one tap could save your data. Skip the public charging stations. Grab a reliable power bank like the Anker Prime series. Stay charged. Stay safe.