You land at Dubai International after a long flight and open your phone to tell the family you’ve arrived. The free Wi-Fi page appears: enter your name, phone number and email to continue. You do it quickly, because all you want is to send one message. Then you do it again at the hotel, and again at the mall the next day.
Each time, your data passes through a network you don’t own, don’t manage, and know nothing about. That isn’t paranoia. It’s an accurate description of what happens the moment you tap “connect”.
Why public networks differ from your home network
At home, a handful of people you know share the connection. At the airport or the mall, hundreds of strangers share a single access point at the same time. Anyone on that network has more opportunities to interfere with traffic passing through it, particularly on sites and apps that don’t encrypt properly.
Three weaknesses come up again and again.
Fake hotspots. Anyone can set up a network with a name almost identical to the real one, “Mall_Free_WiFi” instead of “MallFreeWiFi”. You join it because the name looks right, and everything you send passes through their device first.
Captive portals. The page that asks for your email or phone number before letting you online. Some only log usage. Some quietly add you to a marketing list. The worst are fake portals that look identical to the real thing and harvest your details directly.
Password reuse. This is more dangerous than all the above. If your email password is the same one you use on another site, one leak is enough to reach everything connected to it. The US Federal Trade Commission notes that most websites now encrypt traffic, which helps a great deal, but it doesn’t help if your credentials are already out there.
More practical risks than you expect
This isn’t about rare hacks that happen to other people. Picture a few everyday situations in the UAE: paying a hotel bill from your banking app on the lobby Wi-Fi; opening your email at a mall café to read a transfer code; logging in to your work account from the airport lounge to send a file before a meeting; registering on a Wi-Fi portal with your phone number, then getting marketing messages weeks later from companies you’ve never dealt with.
The answer isn’t to stop using the internet in public. That’s not realistic in cities where residents and visitors work from cafés and business lounges. The answer is to route your traffic through an encrypted tunnel that nobody on the local network can read.
What the law in the UAE says
This deserves a precise answer, because a lot of inaccurate information circulates about it. Article 10 of Federal Decree-Law No. 34 of 2021 on combatting rumours and cybercrimes penalises using someone else’s IP address, or any other means, to commit a crime or to prevent its discovery. In other words, the offence is tied to the criminal act and the intent, not to the tool itself.
So when you use a vpn to encrypt your connection in a hotel, mall or airport, you’re using it for its primary purpose: protecting your data on a network you don’t trust. The risk arises only when the tool is used as cover for something the law already prohibits. If in doubt, check the current guidance from the Telecommunications and Digital Government Regulatory Authority (TDRA).
Practical steps before you connect
Use a trustworthy VPN. Choose a provider with a clear privacy policy and a no-logs policy confirmed by an independent audit, with apps for both phone and laptop. The Electronic Frontier Foundation’s Surveillance Self-Defense guide is a good independent primer on judging these tools.
Turn off auto-connect. Many phones automatically rejoin any network they’ve used before, including fake ones with the same name. Connect manually, and delete old networks from your saved list.
Avoid sensitive tasks on public networks. If you can complete the bank transfer over mobile data instead of mall Wi-Fi, do that. Mobile networks encrypt traffic by default.
Check the address before entering any details. Look for the padlock and “https”. If a page asks you to download an app or a browser extension to connect, close it immediately.
Turn on two-step verification. Even if a password is stolen, it won’t be enough on its own to get into your account.
Update your system. Most of the vulnerabilities exploited on public networks are known and patched months ago, but devices that are not updated stay exposed.
A small habit, a big difference
Nobody plans to be robbed on free Wi-Fi. It happens because connecting becomes automatic, and because speed matters more than caution in the moment you arrive. But the gap between a protected traveller and an exposed one is about a minute: switch on the VPN before opening any app, turn off auto-connect, and keep your banking off a network shared with hundreds of strangers.
The UAE has some of the best public Wi-Fi coverage in the world, and that’s a real advantage. It only becomes a risk when we stop thinking about it. Treat the VPN like the lock on your door: something you don’t think about until the moment you actually need it.
Do follow UAE stories on Instagram.
You might also like – UAE Day Trips You Can Take Without Taking Leave
