TSA issues major warning over USB charging ports for travelers at US airports

The Mirror US ^ | May 26, 2025 | Jack Hobbs

[where's_the_Outrage?]

The Transportation Security Administration has issued a major warning for all travelers that they may be in danger of being tricked by USB malware. In a recent post on social media, the agency warned that travelers may find their devices hacked by scammers who install malware in the USB port in the airports.

"In this technology age, cybersecurity has never been more important," the Facebook post read. "You’ve likely heard about things like email scams and social media scams (tip: don’t accept that friend request from your buddy’s 'new' profile), but today we want to share our two best tips for staying cyber safe at airports while you're traveling."

The post revealed that "Hackers can install malware at USB ports (we’ve been told that’s called 'juice/port jacking')." TSA continues, "So, when you’re at an airport, do not plug your phone directly into a USB port. Bring your TSA-compliant power brick or battery pack and plug in there."

Passengers were also warned, "Don’t use free public WiFi, especially if you’re planning to make any online purchases. Do not ever enter any sensitive info while using unsecure WiFi." The post concludes with " Thanks to our IT team for these tips!"

The warning comes after an expert issued a stark warning about government software that has been rolled out at airports in the U.S. over the last few years. The TSA has begun using a real-time photo of passengers' faces to confirm their identity at airport security checkpoints, but some experts have suggested people can opt out if they are worried about their privacy.

---

TOPICS:
KEYWORDS: airports; freewifi; internet; malware

[where's_the_Outrage?]

I use AVG VPN which should provide security for free wifi, at least I thought so.

[MeneMeneTekelUpharsin]

Hmm...

[Pontiac]

The post revealed that "Hackers can install malware at USB ports (we’ve been told that’s called 'juice/port jacking')." TSA continues, "So, when you’re at an airport, do not plug your phone directly into a USB port. Bring your TSA-compliant power brick or battery pack and plug in there."

This has been going on for at least a decade.

Of course it bears repeating. There are new people traveling for the frist time every day.

Use a VPN on any public wi-fi connection. Or use your phone carrier network.

[mabarker1]

It’s really simple. DO NOT GO TO ANY AIRPORT !!! DRIVE OR USE VIDEO CALLS FOR BUSINESS.

[MayflowerMadam]

“Don’t use free public WiFi, especially if you’re planning to make any online purchases. Do not ever enter any sensitive info while using unsecure WiFi.”

Well duh.

[BitWielder1]

I never use public USB ports, only my little USB charger cube. It's my "condom".
I never use public WiFi for anything confidential either.

[bak3r]

I’m surprised they are just talking about this. I have been warning clients for at least a decade about this. We even check our clients USB power bricks. We have found some 3rd party bricks customers obtained though places like Amazon that have had various exploits built into them.

[TexasGator]

“This has been going on for at least a decade.”

This has been going on for decades.

I use USB data blockers that only allow power to pass through.

[GingisK]

I don’t think airport USB outlets have data connections. They are +5V power only.

[Ex-Con777]

Use a USB data blocker. They are under $10. It’s a small device, about the size of the USB plug, that allows fast charge but no data transfer.

https://reviews.oneclearwinner.com/product/usb-blocker/?gad_source=1&gad_campaignid=22467482093&gclid=EAIaIQobChMIhoW_icvDjQMVE5taBR3oti3xEAAYASAAEgIOfvD_BwE

EC

[UnwashedPeasant]

”The TSA has begun using a real-time photo of passengers' faces to confirm their identity”

They wanted to scan my face in the security line. I told them I wanted to opt out, and then the TSA agent merely looked at my drivers license the usual way. It was no big deal to opt out, and it did not slow down the security line at all.

[Tell It Right]

This article is about physical connections to public USB ports, not wireless connections (the "wi" of "wi-fi"). For USB ports, a lot of VPN's are of no use. You have to have an info blocker on the USB port.

I just bring my own simple power plug to charge my phone. Usually, though, while at the airport I have my laptop out and plug my phone into the laptop to provide my own internet service to the laptop (and my laptop's USB port charges the phone). Even with my internet coming through my cell service instead of wi-fi, I still have a VPN.

[TexasGator]

What was your concern about the scanning?

[TexasGator]

“I don’t think airport USB outlets have data connections. They are +5V power only.”

Read the OP.

[GingisK]

I did, but don’t really believe it.

[nuconvert]

This is the 1st I’ve heard that you shouldn’t use public charging stations. Thanks for posting.

[70times7]

I don’t think airport USB outlets have data connections. They are +5V power only.

Perhaps you have heard of "Skimmers" at gas pumps. Take that idea, and apply it to an airport USB outlet, and you will have the idea behind it all.

It seems to me the simple corrections of charging with 120Vac and using a VPN will be sufficient.

Yes?

[Pontiac]

This article is about physical connections to public USB ports, not wireless connections

This article is about Data Security.

From the article excerpt

"Don’t use free public WiFi, especially if you’re planning to make any online purchases. Do not ever enter any sensitive info while using unsecure WiFi." The post concludes with " Thanks to our IT team for these tips!"

[AndyJackson]

This just demonstrates the utter IT incompetence of the Federal government that these threats even exist. But that is the produce of a domestic surveillance industry that regard keeping track of its citizens as more important than information security which is apparently far more important than security $1T per annum in IP from the Chinese.

It would be a simple matter for the TSA to ensure that charging ports only provide power and that WIFI is secure, requiring it to be provided by known vendors who would be bankrupted, fined and jailed for not maintaining infosec.

But that would interfere with a whole bunch of corrupt good ol boys and gals getting contract to provide services that they are not competent to provide in return for kickbacks to the poor petty corrupt officials running this stuff.

Greasing skids is more important that protecting the Republic.

[logi_cal869]

Old news, but I concede the ‘true pandemic’ has its willing victims.

Who doesn’t carry a ‘wall wart’ among their cables? C’mon, man: They’re only 1” square.