My friend from Italy landed at Shanghai Pudong. Her eSIM wasn't working yet. She connected to the airport's free WiFi.
She checked Instagram. Replied to some DMs.
Two hours later, her Instagram account posted a crypto scam. Her friends were messaging her: "Did you get hacked?"
What happened:
Public WiFi in China — like anywhere — is a security risk. But there are extra layers:
1. Fake WiFi hotspots
Attackers set up networks with names like "Airport_Free_WiFi" or "Starbucks_Guest." You connect. They intercept everything.
2. Unencrypted public WiFi
Many free WiFi networks in public spaces are unencrypted. Anyone on the same network can sniff traffic.
3. The captive portal risk
Chinese public WiFi usually requires phone number + SMS verification. Some fake portals harvest phone numbers for spam.
How to stay safe:
1. Use your mobile data instead.
Chinese data is cheap. A 10GB eSIM costs $3-11. Use that instead of public WiFi for anything sensitive.
2. If you MUST use public WiFi:
• Verify the network name with staff.
• Use a VPN (encrypts all traffic).
• Never log into banking, email, or social media without a VPN.
• Enable two-factor authentication on everything before your trip.
3. Turn off auto-connect.
Your phone remembers networks and auto-connects to anything with the same name. Turn this off in your settings.
4. Use a password manager.
If you get phished, unique passwords prevent the attacker from accessing your other accounts.
The China-specific risk:
Some travelers report that after connecting to certain public WiFi networks in China, their devices receive phishing SMS messages or spam calls days later.
This suggests some networks may be selling or leaking phone numbers used for registration.
My Italian friend's recovery:
"I got my Instagram back after 3 days. I changed every password. I turned on 2FA on everything. And I bought an eSIM with 10GB so I'd never need public WiFi again. ¥25 for peace of mind."
Anyone else had a security issue on public WiFi in China?
Posted on 2026-5-30 21:52:18