TL;DR: A fake hotspot often has a name nearly identical to a legitimate one (like "Starbucks_Free_WiFi" duplicated), requires no password when the real network normally does, or redirects you to a login page asking for unusually detailed personal information. Always confirm the exact network name with staff before connecting, avoid networks that ask for personal or payment details just to get online, use a VPN when on any public network, and disable WiFi auto-join for public networks in your device settings.
A fake hotspot often has a name nearly identical to a legitimate one (like "Starbucks_Free_WiFi" duplicated), requires no password when the real network normally does, or redirects you to a login page asking for unusually detailed personal information.
What Usually Causes This
Attackers set these up (often called "evil twin" networks) using inexpensive hardware to mimic a trusted network's name, hoping nearby devices connect automatically or users pick the fake one by mistake.
What to Do About It
Always confirm the exact network name with staff before connecting, avoid networks that ask for personal or payment details just to get online, use a VPN when on any public network, and disable WiFi auto-join for public networks in your device settings.
If this looks similar to something else you've seen, it's worth reading How to Spot a Fake VPN App.
This pattern shows up elsewhere too — see How to Tell If a Mobile App Is Spyware.
Frequently Asked Questions
What are the real warning signs?
A fake hotspot often has a name nearly identical to a legitimate one (like "Starbucks_Free_WiFi" duplicated), requires no password when the real network normally does, or redirects you to a login page asking for unusually detailed personal information.
What usually causes this?
Attackers set these up (often called "evil twin" networks) using inexpensive hardware to mimic a trusted network's name, hoping nearby devices connect automatically or users pick the fake one by mistake.
What should I do about it?
Always confirm the exact network name with staff before connecting, avoid networks that ask for personal or payment details just to get online, use a VPN when on any public network, and disable WiFi auto-join for public networks in your device settings.
Should I be worried if I only see one sign?
One sign alone (like a slower device) is usually not cause for alarm — most single symptoms have mundane explanations. Multiple signs together, especially unexpected data usage or unfamiliar apps, are worth investigating.