In-Flight WiFi Safety: How to Spot Fake WiFi and What to Do If You Connect

You board a plane, switch your phone to airplane mode, turn WiFi back on, and see networks named something like Free WiFi, Inflight WiFi, or perhaps something containing the airline's name.

It is easy to assume that the most official-looking network must belong to the airline.

That is where a quick verification can make a difference.

The name shown in your WiFi list, technically known as an SSID, does not by itself prove who operates the network.

This does not mean fake WiFi is common on airplanes. It does mean that impersonating a legitimate wireless network is technically possible, and incidents involving fake networks have occurred in travel environments and on flights.

CISA and NIST both recognize rogue access points and Evil Twin-style networks as genuine wireless security threats.

How does in-flight WiFi work?

The exact technology varies by airline and aircraft.

Generally, an aircraft obtains an internet connection using satellite communications or, in some systems, ground-based infrastructure.

Wireless access points inside the cabin then allow passengers' phones, tablets, and laptops to connect to that service.

From a passenger's perspective, it works much like any other WiFi network. The important difference is that the aircraft's external internet link may rely on specialized aviation satellite or ground communications.

Availability can vary even within the same airline because different aircraft may have different equipment installed.

Why a WiFi name is not proof of identity

Think of an SSID as a store sign.

Someone can put a familiar company name on a sign. The sign alone does not prove that the business behind it is genuine.

WiFi names work in a similar way.

An attacker can create a wireless network with a convincing name or one that closely resembles a legitimate network.

That is why Free WiFi or even an airline-looking name should not be treated as proof that a network belongs to the airline.

What are Evil Twin and Rogue AP attacks?

An Evil Twin is a fake wireless network designed to resemble a legitimate one.

A Rogue Access Point is broadly an unauthorized wireless access point operating where it should not be.

For travelers, the technical distinction is less important than the practical lesson:

The WiFi network you think belongs to an airline, airport or hotel may not actually be operated by that organization.

NIST advises users to avoid untrusted wireless networks for sensitive services and, when possible, verify the correct network with a representative of the organization providing it.

Has fake WiFi actually appeared on flights?

Yes, although this should not be interpreted to mean that it happens frequently.

In Australia, a 2024 investigation began after airline employees noticed a suspicious WiFi network during a domestic flight.

Authorities alleged that fake free WiFi networks had been used at Australian airports and on domestic flights. Users who connected could be directed to a fake login page requesting email or social media credentials.

There was another notable incident in August 2026 involving Delta Flight 591.

Delta confirmed that an unauthorized WiFi network that was not provided or operated by the airline had briefly been present onboard.

The airline also emphasized that its actual onboard network had not been compromised and that flight safety and aircraft systems were not affected. The incident was being investigated.

These cases show that fake onboard WiFi is possible without suggesting that it is routine.

What could happen on a fake network?

One of the most practical risks is phishing.

A fake network could redirect you to a convincing-looking page and ask you to:

• Sign in with an email account

• Enter social media credentials

• Provide payment-card information

• Visit a fake airline portal

• Download an application or file

• Follow a link with a misspelled or deceptive domain

The danger is therefore not simply that someone is "watching everything you do."

In many cases, persuading you to voluntarily enter information into a fake website may be the attacker's objective.

Doesn't HTTPS protect me?

HTTPS makes a major difference.

Modern websites overwhelmingly use encrypted connections, and the FTC notes that this has significantly improved the safety of using public WiFi compared with the early days of public hotspots.

When you communicate with a legitimate HTTPS website, information traveling between your browser and that site is encrypted.

So the claim that anyone on the same public WiFi can automatically read every password or message is outdated and overly broad.

There is an important catch, however.

A fraudulent website can also use HTTPS.

A padlock means the connection to that particular website is encrypted. It does not prove that the website itself belongs to an airline, bank or other legitimate organization.

The FTC specifically warns that scammers can create encrypted fake websites.

Always check the site itself, not just the padlock.

Signs that deserve a second look

None of these alone proves that a network is malicious.

Legitimate airline WiFi systems can also display captive portals, terms of service or payment screens.

The important question is whether the procedure matches the airline's official instructions.

How to verify official in-flight WiFi

A practical order of checks is:

1. Check the airline's official website before departure.

2. Check the airline's official app.

3. Read the seatback or cabin WiFi instructions.

4. Listen to cabin announcements.

5. Ask a crew member if you are uncertain.

6. Confirm both the WiFi name and the expected portal address.

7. Do not guess if several similar networks appear.

Airlines can use different systems on different aircraft.

For example, Korean Air currently documents Korean Air In-Flight and wifi.koreanair.com for supported aircraft.

Asiana's current Starlink instructions identify wifi.flyasiana.com, while other aircraft and entertainment services may use different network arrangements.

This is precisely why travelers should check instructions for their actual flight instead of memorizing one network name indefinitely.

Check automatic WiFi connections

Phones and laptops often remember previously used WiFi networks.

Apple states that iPhones automatically join known networks, while users can forget networks or change how the phone handles available networks.

Google similarly explains that Pixel devices may automatically connect to nearby saved WiFi networks when WiFi is enabled.

Windows also provides an option to connect automatically to saved networks.

Before traveling, consider reviewing:

• Saved public WiFi networks

• Auto-join or auto-connect settings

• Networks you no longer use

The exact menu names vary by operating-system version and device manufacturer.

What if you accidentally connect to suspicious WiFi?

Do not panic.

Connecting by itself does not automatically mean every account has been compromised.

Respond according to what happened.

Disconnect

Leave the suspicious network.

Forget the network

Remove it from saved networks so your device does not reconnect automatically.

If you entered no sensitive information

Watch for unusual account activity. There is generally no reason to change every password solely because a device briefly connected.

If you entered a password

Once you are on a trusted connection, change that account's password.

If the same password is reused elsewhere, change it there as well.

Enable multi-factor authentication

MFA adds an additional barrier if a password has been exposed.

If you provided payment information

Review transactions and contact your card issuer or financial institution if needed.

If you installed a file or app

Remove the suspicious software and perform appropriate device security checks.

Review account activity

Check recent login sessions for your email, social media, Apple, Google, Microsoft and other important accounts.

Does a VPN make public WiFi completely safe?

No.

A trustworthy VPN can help encrypt traffic between your device and the VPN server, which can be useful on untrusted networks.

The FTC notes that VPNs may help protect information transmitted over public WiFi.

But a VPN cannot stop you from voluntarily typing your password into a phishing website.

It also cannot automatically protect you if:

• You install malware yourself

• Your device is already compromised

• You use an untrustworthy VPN provider

• You hand sensitive information directly to a fraudulent site

A VPN changes who handles part of your internet traffic, so the VPN provider itself should be trustworthy.

A simple travel WiFi security checklist

Before connecting at an airport or onboard an aircraft:

• Verify the official network name

• Ask airline staff when uncertain

• Review automatic WiFi connections

• Avoid ignoring browser certificate warnings

• Check suspicious domain names carefully

• Keep your operating system and browser updated

• Enable multi-factor authentication

• Consider a reputable VPN where appropriate

• Prefer a trusted mobile connection for highly sensitive financial activity

• Remove unnecessary saved public networks

CISA also recommends avoiding sensitive personal, banking and shopping activities on open public WiFi when possible.

The main takeaway

There is no need to assume that every in-flight WiFi network is dangerous.

Modern encryption has made ordinary internet use on public networks much safer than it once was.

Fake networks and phishing, however, remain separate risks.

Remember these five points:

• A convincing WiFi name does not prove who operates it.

• Verify the network through official airline information.

• Do not bypass browser security warnings.

• Recheck the site before entering passwords or payment details.

• If something goes wrong, respond according to what information you actually entered or installed.

The most useful security habit is surprisingly simple.

Before tapping the first convincing WiFi name you see, ask:

"Is this the network my airline actually told me to use?"

That one check can prevent many avoidable problems.