Public WiFi while traveling: how to protect your cards and personal data
Use the instant discount code MEDALLOADV2023
The main risk of public WiFi isn't the official network at the airport or hotel, but fake networks known as "evil twins": an attacker sets up an access point with a name almost identical to the official one (for example, "Airport-Free-WiFi" instead of "Airport_WiFi"), something that can be set up with inexpensive equipment in under 30 minutes, and any data you send over that network can be exposed.
The most effective protection combines three simple habits: using an active VPN before connecting to any open network, avoiding banking transactions or purchases while on public WiFi (use mobile data or an eSIM for that instead), and turning on real-time transaction alerts with your bank, set to notify you even about small charges (some banks let you set the threshold as low as 1 USD) so you can catch fraud within minutes instead of days.
No travel insurance directly covers the theft of banking data, but you can reduce the financial impact by combining these digital habits with the electronics protection that some plans offer as additional coverage.
Before connecting: verify the exact name of the network
Ask the venue's staff for the exact official network name (letter by letter) instead of connecting to the first similar option that appears in the list. Turn off automatic connection to saved open networks on your phone, because many devices connect on their own to any network with a name they've seen before.
Use a VPN and avoid sensitive transactions
A VPN encrypts your traffic even if the network is insecure. Even so, avoid logging into your online banking, making card purchases, or checking confidential information while connected to public WiFi; for those, use mobile data or a local eSIM, which is usually more secure and sometimes cheaper than traditional roaming.
Set up your cards and accounts to detect fraud quickly
- Turn on push notifications for every transaction, not just email (they arrive faster).
- If your bank allows it, set a low alert threshold (for example, any charge over 1 USD) while traveling.
- Use app-based two-factor authentication instead of SMS, since SIM theft (SIM swapping) is a common fraud technique while traveling.
- Consider using single-use virtual cards for online purchases from abroad.
What to do if you suspect you've already been compromised
Immediately change your banking and email passwords from a trusted network (mobile data, not the suspicious WiFi), freeze or temporarily block your card through the bank's app, and contact your bank to report the incident and request a card replacement if necessary.
Get a quote in minutes with Assist-365 and apply your discount.
Frequently Asked Questions
Is it safe to use hotel WiFi to check my email?
The risk is lower than doing banking transactions, but it's still a good idea to use a VPN and avoid logging into sensitive accounts while on any shared network.
What is an 'evil twin' network and how do I recognize it?
It's a fake WiFi network created by an attacker with a name very similar to the official one at an airport, hotel, or café; to avoid it, always confirm the exact network name with the venue's staff.
Is it better to use mobile data/eSIM than public WiFi?
For sensitive transactions, yes, because mobile data and eSIMs use an encrypted point-to-point connection with the carrier, unlike an open WiFi network shared with strangers.
Does my travel insurance cover money stolen through digital fraud?
Most travel insurance policies don't directly cover digital banking fraud; some do include protection for electronic devices (like a laptop or camera) against physical theft, which is a different type of coverage.
