In this guide
Juice jacking is a cyberattack where a compromised public USB charging port or cable is used to steal data or install malware on your phone while it charges.
- You plug into a tampered USB port at an airport, mall, or hotel
- Your device auto-starts a data session or you tap “Trust” on a prompt
- No charge-only cable or USB data blocker is used
- You decline the “Trust This Device” prompt on modern iOS or Android
- You use a charge-only cable or USB data blocker
- You charge via AC adapter instead of a USB port
How Juice Jacking Works
USB cables carry both power and data on the same connector. Public charging kiosks use standard USB-A or USB-C ports — the same ports used to sync files with a computer. An attacker can modify a public port or plant a malicious cable so that when you plug in, a hidden device attempts a data connection alongside the charge.
If your phone automatically accepts the connection, or if you tap “Allow” on a trust prompt, the attacker gains access to files or can push malware to your device. Learn more about how USB data transfer works on Wikipedia’s juice jacking overview.
Which Devices Are at Risk?
Any smartphone, tablet, or laptop with a USB port is theoretically at risk. In practice, devices running iOS or Android after 2011 show a “Trust This Computer” prompt before allowing any data transfer. If you decline or ignore that prompt, only charging proceeds and the attack fails.
Older devices or those with outdated software that skip the trust prompt carry the highest risk.
Real-World Risk Level
No confirmed real-world cases of juice jacking have been documented outside of controlled lab demonstrations. Security researchers and the FBI have flagged it as a theoretical concern, but it remains a low-probability threat compared to phishing or unsecured Wi-Fi. That said, easy precautions make it a non-issue.
How to Stay Safe
| Setup | Works? | Need | Note |
|---|---|---|---|
| Public USB port, standard cable | Risk present | Data blocker or charge-only cable | Decline any trust prompt |
| Public USB port, charge-only cable | Safe | Charge-only cable | No data pins wired |
| Public USB port, USB data blocker | Safe | USB data blocker dongle | Blocks data, passes power only |
| Your own AC wall adapter | Safe | AC adapter | No data path exists |
The simplest fix is to carry your own AC wall charger and cable. If you must use a public USB port, a USB data blocker — a small dongle that strips the data pins from the connection — costs under $10 and eliminates the risk entirely.
USB-C ports are used for far more than charging. If you want to understand what else travels over a USB-C cable, see our guide on whether USB-C supports video output.
Quick Checklist
- Always tap “Don’t Allow” or “Decline” on any trust prompt at a public port
- Use your own wall adapter whenever possible
- Carry a charge-only cable or USB data blocker for travel
- Keep your phone’s OS updated so trust prompts stay active
Bottom line: Juice jacking is a real but largely theoretical threat — no documented attacks exist outside labs. Modern phones block it by default if you decline the trust prompt, and a charge-only cable or USB data blocker removes all risk. When travelling, your own AC adapter is always the safest option.