Don’t Connect to “Free WiFi” on a Plane Without Checking｜How to Spot Fake In-Flight Wi-Fi
A network called “Free WiFi” is not automatically fake, but its name does not prove it belongs to the airline. Here is how to verify in-flight Wi-Fi, spot warning signs, and respond if you connect to a suspicious network.
Don’t Connect to “Free WiFi” on a Plane Without Checking｜How to Spot Fake In-Flight Wi-Fi
You board your flight, switch your phone to Airplane Mode, turn Wi-Fi back on, and check the list of available networks.
You might see names such as:
Free WiFi
Free Inflight WiFi
Airline WiFi
Onboard WiFi
AirlineName_WiFi
The natural reaction is to tap one and connect.
But there is one important question to ask first:
How do you know that network actually belongs to the airline?
The answer is that you usually cannot tell from the Wi-Fi name alone.
A network name, technically called an SSID, is not proof of ownership. Someone can create another wireless network with a name that looks very similar to a legitimate one.
That does not mean free in-flight Wi-Fi is inherently unsafe. Many airlines legitimately provide free or paid Wi-Fi.
The important lesson is simpler:
Verify the network before connecting.
Has fake Wi-Fi actually been found on an airplane?
Yes, there has been a documented case involving an actual flight.
In 2024, an Australian airline reported a suspicious Wi-Fi network detected by employees during a domestic flight. Australian authorities later investigated allegations that fake free Wi-Fi networks had been created at airports and on domestic flights to collect users’ login credentials through fraudulent pages. Later reporting in 2025 covered a conviction and prison sentence related to the case.
That distinction matters.
Fake Wi-Fi is often discussed in the context of airports, hotels, cafés, and other public places. We should not pretend every public Wi-Fi incident happened on an aircraft.
However, this case shows that an in-flight Evil Twin attack is more than a purely theoretical scenario.
It also does not mean fake Wi-Fi is common on airplanes. It simply means travelers have a good reason to verify a network instead of trusting its name.
Why a Wi-Fi name does not prove anything
The name you see in your phone’s Wi-Fi menu is called an SSID.
Think of it as a sign above a store.
Someone putting a famous brand name on a sign does not automatically make the store an official branch of that company.
Wi-Fi works in a similar way.
An attacker may be able to broadcast a network name that resembles a legitimate hotspot.
CISA describes so-called Evil Twin access points as systems designed to impersonate legitimate wireless access points and trick users into connecting.
So statements such as:
“It has the airline’s name, so it must be real.”
or
“It says Free WiFi, so the airline must be providing it.”
are not reliable ways to identify an official network.
What is an Evil Twin Wi-Fi network?
An Evil Twin is essentially a fake wireless network made to resemble a legitimate one.
Imagine that an airline’s real network were called:
Airline_WiFi
A suspicious network nearby might appear as:
Airline_Free_WiFi
Airline_WiFi_Free
or even:
Airline_WiFi
If two similar networks appear, an ordinary passenger may have no obvious way to identify the legitimate one from the name alone.
That is why you should rely on the airline’s official instructions rather than guessing.
What could happen if you connect to fake Wi-Fi?
This part is often exaggerated.
Connecting to the same Wi-Fi network as an attacker does not automatically mean the attacker can instantly read every password on your phone.
Modern web security has changed considerably.
Most major websites now use HTTPS encryption. The U.S. Federal Trade Commission notes that the widespread adoption of encrypted websites has made public Wi-Fi safer than it was in the past.
HTTPS helps prevent someone on the network from simply reading the contents of encrypted communication between your browser and a website.
However, HTTPS does not solve every problem.
One of the more realistic risks is a fake login portal.
For example, after connecting you might see:
“Sign in with your email account to activate free Wi-Fi.”
“Log in with Google to continue.”
“Enter your payment card to activate Internet access.”
If the webpage itself belongs to the attacker and you voluntarily type your password into it, encrypted communication will not save you from the owner of that fake website.
The FTC specifically warns that scammers can create fraudulent websites that themselves use encryption.
Potential risks therefore include:
Fake airline login pages
Email or social-media credential theft
Payment-card information requests
Phishing redirects
Requests for excessive personal information
Malicious app or file downloads
Exposure of traffic that is not properly encrypted
Does “Free WiFi” mean the network is fake?
No.
That is an important distinction.
Many legitimate airlines, airports, hotels, and other organizations provide free Wi-Fi.
The words “Free WiFi” are not evidence of malicious activity.
The problem is that they are also not evidence that the network is legitimate.
Instead of asking:
“Is Free WiFi dangerous?”
ask:
“Is this the network the airline told me to use?”
How to verify official in-flight Wi-Fi
Fortunately, you do not need cybersecurity expertise.
1. Check the seatback screen or onboard instructions
Wi-Fi-equipped aircraft often provide connection instructions through a seatback screen, safety or service card, inflight magazine, or onboard announcement.
2. Check the airline’s official website or app
Before your trip, look up whether Wi-Fi is available on your flight and how the airline says passengers should connect.
3. Compare the exact network name
For example, Korean Air currently instructs passengers on supported aircraft to enable Airplane Mode, turn Wi-Fi back on, select the network named “Korean Air In-Flight,” and access wifi.koreanair.com. Availability depends on the aircraft and route and continues to change as service expands.
Delta currently tells passengers to select “DeltaWiFi.com” on supported flights and proceed to its onboard Wi-Fi portal. Available services can vary by aircraft.
Airline Wi-Fi systems change over time, so always check current official instructions for your particular trip.
4. Ask a flight attendant
When in doubt, this may be the easiest option.
Simply ask:
“What is the official Wi-Fi network for this flight?”
5. Do not guess when several similar networks appear
Suppose your phone shows:
Airline_WiFi
Airline_Free_WiFi
Airline_Premium_WiFi
Do not choose one just because its signal is strongest or because it says “Free.”
Check the official instructions first.
Wi-Fi warning signs worth checking
None of the following proves that a network is malicious by itself, but each is a good reason to stop and verify.
Situation | Why to check |
|---|---|
Network not mentioned by the airline | Its operator is unclear |
Slightly misspelled official name | Could be an imitation |
Extra words such as Free, VIP or Premium | Name alone does not identify the operator |
Immediate request for your email password | May be unnecessary credential collection |
Unexpected payment-card request | Verify the official payment portal |
Request to download an app or file | Could be malicious |
Browser certificate warning | Connection or destination needs verification |
The key is not to panic.
Just do not continue entering information until you know where you are connected.
Never casually ignore certificate warnings
Your browser may occasionally display messages such as:
“Your connection is not private.”
or
“The certificate cannot be verified.”
If this suddenly appears while visiting a website that normally works without warnings, especially your bank, email provider, or social-media account, do not simply click through.
Disconnect and verify the Wi-Fi network and website first.
What if you already connected to suspicious Wi-Fi?
The response depends on what you actually did.
If you only connected
Simply joining a suspicious network does not automatically mean your accounts have been compromised.
You can:
Disconnect from the Wi-Fi.
Forget or remove the saved network.
Check whether automatic Wi-Fi connection is enabled.
Update your operating system and browser.
Check whether you downloaded any unexpected files or apps.
If you entered a username and password
Take stronger precautions.
Move to a trusted mobile-data or Wi-Fi connection.
Change the password for the affected account.
Change passwords on other services if you reused the same one.
Review recent account login activity.
Sign out of unfamiliar sessions or devices.
Enable two-factor or multi-factor authentication.
The FTC recommends strong passwords, software updates, and two-factor authentication as important account-protection measures.
If you entered payment information
Contact your card issuer or financial institution and review recent transactions.
Depending on what was exposed, the provider may recommend monitoring, blocking, or replacing the card.
Safer Wi-Fi habits while traveling
These practices are useful not only on airplanes but also at airports, cafés, hotels, and other public locations.
Confirm the official Wi-Fi name.
Disable automatic connection to unknown networks.
Keep your operating system and browser updated.
Prefer HTTPS websites.
Never ignore unexpected certificate warnings.
Avoid sensitive financial transactions on networks you do not trust.
Use mobile data when practical.
Enable two-factor authentication on important accounts.
Remove public Wi-Fi networks you no longer use.
CISA has also advised travelers to avoid using open public Wi-Fi for sensitive activities such as banking and transmitting important personal information.
What about a VPN?
A trustworthy VPN can improve privacy on untrusted networks by encrypting traffic between your device and the VPN service.
But a VPN is not a universal shield.
Suppose a fake Wi-Fi network sends you to a phishing page and you personally type your email password into that page.
A VPN cannot undo that decision.
It protects the connection. It does not magically determine whether every website you visit is trustworthy.
So the first lines of defense remain:
Verify the Wi-Fi network.
Verify the website.
Think before entering sensitive information.
The most important rule: verify before you connect
Seeing “Free WiFi” on an airplane does not mean you should be afraid of it.
But seeing the airline’s name in the Wi-Fi list does not automatically mean you should trust it either.
Imagine that after boarding you see:
Airline_Free_WiFi
and
Airline_WiFi
at the same time.
Your first step should not be choosing the strongest signal.
It should not be choosing the one marked “Free.”
Instead, check the airline’s onboard instructions, official app or website, or simply ask a flight attendant.
That quick verification can eliminate much of the uncertainty.
You do not need to understand advanced Wi-Fi hacking techniques to improve your travel security.
Just replace this habit:
“Free WiFi? Connect.”
with this one:
“Official Wi-Fi? Verify, then connect.”