Juice jacking (rigged charging station)
In plain terms
A public USB port is used for charging, but a USB cable also carries data. A modified charging station can therefore try to access the phone while it's charging.
Definition
Juice jacking refers to exploiting a public charging port or cable to establish a data connection with the device plugged into it, rather than a simple power supply.
How it works
A USB connector carries power and data on separate pins, and it's the device that decides what it allows. The scenario therefore requires a station or cable modified in advance, in a place where people plug in their phone without thinking about it: a train station, airport, or hotel. Recent mobile systems defend against this by not establishing any data exchange without explicit consent — the "Trust this computer?" prompt is exactly that mechanism, and declining it is enough. The real risk lies less in the station itself than in the reflex of accepting a prompt without reading it, and in a cable borrowed from a stranger, which can contain electronics invisible from the outside.
Warning signs
- A data-access permission prompt appearing during a simple charge
- A cable supplied or left available rather than a port for your own
- A charging station with cables permanently attached and impossible to replace
- Phone that unlocks or shows unexpected activity once plugged in
How to verify
The prompt itself is the warning sign: charging never needs access to your data. If the phone asks to authorize a data exchange when you only wanted battery power, decline and unplug.
What to do
Bring your own power adapter and plug it into an electrical outlet, or use a portable battery: neither carries data. Failing that, decline any permission request, keep the phone locked while charging, and don't use a cable someone else lends you.
If it already happened
If data access was granted, revoke it in settings, restart the device and have it scanned. Change the passwords of sensitive accounts from another device and check active sessions.
Frequently asked questions
- Is this a common risk in train stations and airports?
- The mechanism is real and documented, but it requires hardware modified in advance, and recent mobile systems ask for explicit authorization before any data exchange. The precaution stays simple and costs nothing: your own charger on an outlet, or a portable battery.
- Can a cable really be rigged?
- A cable can contain electronics invisible from the outside — it's an object, not just a wire. That's why the useful rule applies to the cable as much as to the station: only use your own.
Related attacks
Official sources
This article is part of the Phones and connected devices family. Last updated: 2026-09-03.