A USB cable moves power and data through the same connector. That is the basis of the worry known as juice jacking: a public USB port with something behind it other than a plain adapter, a device trying to read the phone's contents or install software. Real cases are rare, but avoiding it costs almost nothing, so it is worth the habit, much like the care taken on shared networks in the public Wi-Fi guide.
How it would work
- File access. The device at the far end pretends to be a computer and asks for storage permission. Modern phones always ask you first.
- Installing software. This needs developer mode enabled or an old, unpatched device. Rare on an up-to-date phone.
- A prepared cable. The more plausible version today: a cable left on a table, or a gift cable with extra circuitry inside.
A phone that is kept updated closes most of these paths. System updates remain the main defence, just as with router firmware updates.
How to avoid it
- Carry your own adapter and use a mains socket. Mains sockets carry electricity only, never data.
- Carry a small power bank. The most practical option on long journeys.
- Use a charge-only cable or a USB data blocker, a small plug that cuts the data pins.
- Keep the screen locked while charging. Many devices refuse data requests while locked.
- Decline permission prompts. If asked about file access or "trust this computer", say no.
- Avoid cables provided at the venue. Use your own.
Keeping the risk in proportion
In public, the far more common threats are mundane: a phone left on a table, someone reading your PIN over your shoulder, a fake network as covered in fake Wi-Fi and evil twins, and re-stuck QR codes as in Wi-Fi QR code scams. Juice jacking is worth avoiding, but it is not the most urgent thing on the list.
If you already plugged in and something looks off
- Review installed apps and remove anything you don't recognise.
- Change your main account passwords and turn on two-step verification.
- Check active sessions on your email and banking accounts, and sign out unfamiliar devices.
- If personal data may have leaked, the reporting steps are in how to report a personal data breach.
A public USB socket carries data on the same cable as the power. Bringing your own adapter or power bank settles the whole question, and leaves your attention free for the risks that actually come up more often in public.
Frequently asked questions
Has juice jacking actually happened?
Documented real-world cases are very few, and most demonstrations come from security research. The risk is small, but so is the cost of avoiding it, carry your own adapter.
Are power banks safe?
Yes. A power bank only supplies power and has no way to read data. What deserves caution is a rental power bank with a built-in cable of unknown origin.
What does an "Allow data access?" prompt while charging mean?
It means something at the other end of the cable is asking for file access, not just supplying power. Choose "Don't allow" and unplug.