Understanding The USB Charger Scam: What Is Juice Jacking, Safety Measures, Reporting Guidelines

Next time your phone dies in a public place, think twice before you use those charging points. The USB charger scam is now taking over India. The Indian Computer Emergency Response Team (CERT) under the Ministry of Electronics and Information Technology issued a cautionary advisory to stay safe from such juice-jacking attacks. The agency warned Indian citizens via a Tweet that read, "Cyber-criminals may use USB charging ports installed at public places like airports, cafés, hotels and bus stands for malicious activities. Charging your electronic device at such infected USB charging stations may make you a victim of juice-jacking cyber attack.”

What Is The USB Charger Scam?

Cybercriminals are now targeting people through USB charging points via which they steal data from all connected devices or install malware on them. The technique is called ‘Juice Jacking’. People using USB charging points at airports, railway station waiting rooms, hotels, and cafes are now at the risk of being victims of cyber fraud.

What Is Juice Jacking?

With this new threat, Juice Jacking, cybercriminals install malware applications through USB, steal your mobile data, and give remote access to mobile devices to cybercriminals.

How To Save Yourself From The USB Charger Scam?

We spoke to Shubham Ajit Singh, Cyber Security Expert (instagram/shubhamcyberexpert), and asked him to share safety measures in light of the new scam. He stressed that it is important for citizens to follow the following tips to keep themselves safe from juice jacking.

• Use a direct electrical board for charging instead of a USB port charging. Also, you can prefer to use a power bank while travelling.
• Avoid pairing your devices with unknown devices, and keep Bluetooth and WiFi hotspots off when not in use. Use a strong password for WiFi hotspots.

• Try charging your device by turning it off, it helps you charge your device faster and will minimise the risk of cyber attack.
• Install anti-malware applications to keep your devices safe (for instance, malware bytes). Make sure you are downloading the applications only from official sites or official stores like App Store and Play Store.
• Keep your phone and mobile applications updated always.

What To Do If You Get To Know Your Phone Was Attacked By Juice Jacking?

The cyber expert further shared that on knowing your phone is compromised from juice jacking, do the following:

• Immediately turn your phone on airplane mode
• Check your device for any unwanted suspicious applications and uninstall it
• Scan your device with anti-malware application

How To Report A USB Charger Scam?

“An aggrieved person can reach out to the National Cyber Crime Reporting portal (Helpline Number: 1930) to register a complaint about cybercrime (including cyber fraud). A complainant can also contact the nearest police station to file a complaint. An online complaint can be filed through cybercrime.gov.in,” said Siddharth Chandrashekhar, Advocate and Legal Counsel, Bombay High Court.

Documents Needed To Report USB Charger Scam

To file a cyber fraud case related to online transactions, lottery scams, ATM transactions, fake calls, or Internet banking, you will need to attach the following with your FIR:

• Proof of the alleged fraudulent transactions
• Supporting evidence like bank statements, address proof, and ID proof, and any suspicious messages or emails received

We hope this guide helps you stay safe from the emerging USB scam. If you have any questions related to the scam, write to us on our social media handles and we will be happy to bring you the answers from our expert. For more such stories, stay tuned!