5 Disturbing Signs Hackers Are Already Watching You on Public WiFi

The FBI Quietly Issued a Hotel WiFi Warning — And Nobody Reported It

The FBI's Denver field office published an advisory warning travellers not to use hotel WiFi for anything sensitive — banking, work email, or personal accounts. The advisory described a specific threat: hackers who book hotel rooms to launch attacks on other guests sharing the same network. It received almost no mainstream media coverage. Most travellers have never heard of it.

Hotels outsource their networks to third-party providers who face no security vetting. The WiFi you connect to at check-in may run on hardware that hasn't been updated in years — no intrusion detection, no router-level encryption, no monitoring whatsoever.

"Evil Twin" Hotspots Are Now Standard Equipment for Any Amateur Attacker

An "evil twin" is a fake WiFi network built to look identical to a real one. A hacker names their hotspot "AirportFreeWiFi" or "HotelGuest" and waits. Once you connect, every password, banking session, and work credential passes through their device before reaching the internet. You would never know.

The hardware to run one costs under $50 and step-by-step instructions are freely available online. Security researchers running tests at major airports found dozens of suspicious hotspots active at any given terminal.

Passive WiFi Sniffers Are Completely Invisible — And More Common Than You'd Think

A "packet sniffer" quietly captures all unencrypted data passing over a shared network. Unlike an evil twin, it doesn't need you to connect to anything fake — it passively monitors the real network while you use it normally. Someone at the next table in a café can silently capture your login session without you ever knowing.

Even HTTPS websites can leak metadata: which sites you visit, when, and how often. That metadata alone is often enough to profile your behaviour, employer, and daily routines.

You've Received Multiple Charges From a Company You Only Bought From Once

If you've ever noticed a charge repeat from a store you only visited once — or spotted purchases on your statement you don't recognise — your payment details may have been copied while you were on an unsecured network.

When you enter your card details or complete a purchase over public WiFi, that data travels through the network unencrypted. A hacker monitoring the same network can capture it in real time — your card number, expiry, CVV — and use it minutes or days later. You won't know until your bank flags it.

This isn't a rare edge case. It's one of the most common outcomes of using public WiFi for anything financial — shopping, banking, even just checking a balance. And the victim almost never connects it back to the WiFi network they were on.

Cybersecurity Professionals Have Already Switched to Pocket VPN Routers

Ask anyone who works in enterprise cybersecurity what they carry when they travel and you'll notice something consistent: a small pocket VPN router. Not a phone app — a hardware device that creates its own encrypted private network, so that even on a compromised hotel network, their devices are protected before data ever leaves their laptop.

For years this was niche, known mainly to IT professionals and corporate security teams. The hardware was expensive and hard to configure. That's started to change.