Official Warnings Issued by Financial Authorities

India’s leading financial institutions, including the Reserve Bank of India (RBI) and the State Bank of India (SBI), have issued public warnings about a significant cybersecurity threat known as the USB charger scam or “juice jacking.” These alerts caution citizens against using public USB charging stations found in locations such as airports, railway stations, hotels, and cafes. The warnings are based on documented instances where these convenient charging points have been manipulated by scammers to steal personal information and funds from unsuspecting users.

The scam involves criminals leaving infected charging cables or setting up compromised charging ports in public areas. When an individual connects their smartphone to one of these malicious points, the device becomes infected with malware. This software is specifically designed to bypass the phone’s security and extract sensitive data.

How Scammers Exploit Public USB Ports

The core of the USB charger scam is the dual functionality of USB cables, which can transfer both power and data. Scammers exploit this by loading malware onto the public charging stations. Once a phone is connected, this malware can be transferred to the device without the user’s knowledge. The malicious software then proceeds to scan the phone and steal valuable personal information. Data targeted by this scam includes contact lists, photos, and, most critically, banking information like passwords and PINs. This stolen information is then transmitted back to the scammers, who use it to conduct fraudulent financial transactions, draining money from the victims’ accounts.

To safeguard against this threat, authorities advise the public to avoid using public USB charging stations altogether. The recommended alternatives include carrying a personal power bank or using a traditional electrical wall socket with your own charging adapter and cable. Additionally, some devices offer settings to disable data transfer when connected to a USB port, allowing for charging only. Using a dedicated “USB data blocker” device or a charge-only cable are also effective preventative measures.