Fake Free Wi-Fi Hotspot That Steals Logins
A free Wi-Fi network with a familiar name asks you to log in with your phone number or social account. Learn how fake hotspots work and what to avoid.
At a cafe or mall you see a network named 'Free_Mall_WiFi' and connect. A page asks for your phone number, an OTP or a login with a social account to get online. It feels like the usual sign-in, but the network may belong to someone sitting nearby with a laptop and a hotspot. Whatever you enter can be recorded, and other traffic may be exposed if you open sites that are not protected.
How the scam works
The scammer creates a Wi-Fi network named to match a nearby venue or a well-known brand. Phones that remember similar names may even join it on their own. A sign-in page opens, copied from a typical hotspot login. It asks for a phone number, an email or a social media login, with the promise of a few hours of free data. Some pages also ask for a card for a 'verification charge'.
The pressure is the need to get online and the familiarity of the screen. You may also be asked to install a 'security certificate' or a profile to join, which allows the operator to see more of your traffic. Because the fake network sits between your phone and the internet, it can try to show lookalike pages for popular sites, hoping you will type a password without checking the address bar.
The payoff is credentials, OTPs typed into the sign-in form, and card data in some cases. A phone number collected on the page can also be used for follow-up scam calls. Modern websites that use secure connections protect much of what you do, but a fake login page typed into voluntarily gives the information away directly. The safest answer is to avoid putting any sensitive details into unknown networks.
An example of what you may see
Example hotspot page (invented): 'Welcome to Free Mall WiFi. Enter your mobile number to receive a one-time code and get 2 hours of free internet. Or sign in with your social account for 5 hours.' After you enter the code, a second page says 'Install our security profile to continue', and a third asks 'Verify your card with a Rs 1 charge to activate unlimited speed.' The network name also appears twice in the list, once with an extra underscore.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A network name that is almost the same as the venue's, or open with no password.
- A sign-in page asking for your social account or email password.
- A request to install a profile, certificate or app to get online.
- A card details page for 'free' Wi-Fi.
- Several similar networks appear with slightly different names.
- The browser shows warnings about certificates or insecure pages.
What to do right now
- Ask the venue staff for the exact network name and password.
- Use mobile data for banking, UPI and shopping instead of public Wi-Fi.
- Never install a profile or certificate to join a hotspot.
- Turn off auto-connect to open networks and forget networks you no longer need.
- Type website addresses yourself and check for the lock sign before logging in.
If you already paid or shared a code
- If you shared card details, call your bank on the number printed on your card and ask to block it.
- Call 1930 and report at cybercrime.gov.in if money moved.
- Change passwords for any account you logged in to, from a safe network.
- Remove any profile or certificate you installed from your phone settings.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
The Wi-Fi safety check in Safeavio Sentinel looks at the network you are on and explains in plain words whether it looks risky, and network alerts can warn you about changes. Phone scan can show if a profile or app was installed. Safeavio cannot tell who owns a hotspot and cannot see inside secure apps, so use mobile data for payments when you are unsure.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
Is all public Wi-Fi dangerous?
Not all, but you cannot be sure who runs it. Browsing is usually fine on secure sites, but avoid entering passwords, OTPs or card details on unknown networks and use mobile data for money. Also turn off automatic joining of open networks.
How can I tell a fake hotspot from the real one?
Ask staff for the exact name and password, beware of several similar names, and be cautious of open networks with sign-in pages that ask for more than a phone number. Staff can also tell you if the venue offers Wi-Fi at all.
Does a VPN fix this?
A trusted VPN can add protection for your traffic, but it does not make a fake login page safe if you type your details into it. Safeavio's DNS filter is local to the phone and does not tunnel to a remote server.