Public Wi-Fi in Casino Resorts and Hotels: What to Watch For
A large casino resort can have tens of thousands of guests on its network at once, most of them carrying phones full of payment details and many of them logged in to gambling accounts. That makes resort Wi-Fi a target. The networks themselves are generally well run. The risk is everything that looks like them.
The evil twin problem
The most common attack in hotels and resorts is not breaking into the real network. It is setting up a fake one next to it with a convincing name, "Resort_Guest_Free" next to the real "Resort Guest", and waiting for phones to join. Anything sent over an unencrypted connection can then be read or altered. Ask the front desk for the exact network name, join only that one, and turn off auto-join for open networks in your phone settings.
HTTPS helps, but not with everything
Licensed casino and betting apps encrypt their traffic, so a password typed into the app is not readable on the network. What an attacker can still do is redirect you to a lookalike login page through a captive portal, or watch which services you use. If a page asks you to log in to your casino account in order to "activate" Wi-Fi, close it. No legitimate network needs your gambling credentials.
Use cellular data for money
For deposits, withdrawals and logins, switch Wi-Fi off and use your mobile data connection. It is encrypted between the phone and the carrier and is far harder to impersonate. A reputable VPN is the next best option on Wi-Fi. Leave Bluetooth off when you are not using it; PDA Defense Enterprise added an administrator lock for Bluetooth and Wi-Fi in 2004 for exactly this reason, and the advice has aged well.
A note on location rules
Online gambling apps check your location, and many jurisdictions only allow real-money play inside their borders. Using a VPN to appear somewhere else breaks most operators' terms and can get an account closed with the balance frozen. Use a VPN for privacy on hotel networks, not to change where you appear to be playing from.
At the resort. Confirm the network name at the desk, disable auto-join, never enter casino credentials into a Wi-Fi login page, use cellular data for anything involving money, keep Bluetooth off.