Google has issued a new security alert urging smartphone users to “avoid using public Wi-Fi whenever possible,” cautioning that “these networks can be unencrypted and easily exploited by attackers.” With so many people relying on free networks at airports, cafés, hotels and malls, the warning raises an important question—just how risky are these hotspots?

The advisory appears in Google’s latest “Behind the Screen” safety guide for both Android and iPhone users, released as text-based phishing and fraud schemes surge across the U.S. and other countries. The threat landscape is alarming: according to Google, 94% of Android users are vulnerable to sophisticated messaging scams that now operate like “a sophisticated, global enterprise designed to inflict devastating financial losses and emotional distress on unsuspecting victims.”

With 73% of people saying they are “very or extremely concerned about mobile scams,” and 84% believing these scams harm society at a major scale, Google’s new warning highlights the growing need for simple, practical ways to stay safer online.

Previously, Google’s network-related cautions focused mostly on insecure 2G cellular connections, which lack encryption and can be abused for SMS Blaster attacks—where fake cell towers latch onto nearby phones to send mass scam texts. But stepping into the public Wi-Fi debate is unusual, especially for a company as influential as Google.

Earlier this year, the U.S. Transportation Security Administration (TSA) also advised travelers: “Don’t use free public Wi-Fi” as part of its airport safety guidelines, pairing it with a reminder to avoid public charging stations as well. Both recommendations have drawn their share of skepticism within the cybersecurity community.

Even the Federal Trade Commission (FTC) has joined the discussion. The agency acknowledges that while public Wi-Fi networks in “coffee shops, malls, airports, hotels, and other places are convenient,” they have historically been insecure. The FTC explains that in the past, browsing on a public network exposed users to data theft because many websites didn’t encrypt their traffic. However, encryption is now widespread: “most websites do use encryption to protect your information. Because of the widespread use of encryption, connecting through a public Wi-Fi network is usually safe.”

How to Stay Safe on Public Wi-Fi

• Turn off auto-connect for unknown or public Wi-Fi networks.

• When accessing a network through a captive portal, never download software or submit personal details beyond an email address.

• Make sure every site you open uses encryption — look for the padlock icon and avoid entering credentials if an unexpected popup appears.

• Verify the network name before joining to ensure you're connecting to the official Wi-Fi of the hotel, café, airport or store.

• Use only reputable, paid VPN services from trusted developers; free or unfamiliar VPNs—especially those based in China—can be riskier than not using one at all