EV Charger Hacking: What the Evidence Shows

Updated 14 November 2026 · Standard formula, shown below

Yes, electric vehicle chargers are vulnerable to hacking, and the evidence includes real-world demonstrations and security research that show both public charging stations and home chargers can be compromised. However, the risk to an individual driver is currently low, and most known attacks require physical access or sophisticated skills, not just a nearby hacker with a laptop.

Background: Why Chargers Are Targets

EV chargers are essentially computers with a power-switching function. They run software, connect to the internet for billing and remote management, and communicate with the car and the grid. That combination makes them attractive targets for several reasons:

Internet connectivity: Many public chargers have a cellular or Wi-Fi link for payment processing and status updates, creating a remote attack surface.
Physical accessibility: Chargers sit in public places, so an attacker can often reach the ports, cables, and internal diagnostic interfaces without breaking into a building.
High value: A compromised charger could potentially disrupt a fleet, cause a fire, or be used to launch attacks on the power grid.
Inconsistent security: Charger manufacturers range from large automakers to small startups, and security practices vary widely.

How Charger Hacking Works

Security researchers have demonstrated several attack vectors over the past decade. The most commonly cited methods include:

Exploiting the OCPP protocol: The Open Charge Point Protocol (OCPP) is the standard used by most public chargers to talk to a central management system. Researchers have found that some implementations lack encryption or proper authentication, allowing an attacker to send commands like “stop charging” or “start charging for free.”
Physical tampering with the charging cable: The connector that plugs into the car has a set of control pilot pins. A malicious device inserted between the cable and the car can spoof the handshake and trick the car into drawing more power than it should, potentially damaging the battery or the charger.
Exploiting the Wi-Fi or Bluetooth: Home chargers often use Wi-Fi for app control. Weak passwords or unpatched firmware can let an attacker take over the charger and disable it, or in some cases, access the home network.
Man-in-the-middle on the charging session: On public chargers, the communication between the charger and the payment server can be intercepted if not properly encrypted, allowing an attacker to steal payment data or alter the billing amount.

What the Evidence Actually Shows

There have been several high-profile demonstrations, but few confirmed real-world attacks. Here is what is publicly documented:

In 2019, a team of researchers from a Chinese security firm demonstrated a hack on a popular DC fast charger that allowed them to remotely stop charging sessions and even change the price. They used a vulnerability in the charger’s management software, not the OCPP protocol itself.
In 2020, a security consultant showed how a $15 Raspberry Pi could be used to intercept the signal between a Tesla and a home charger, allowing the attacker to remotely stop charging or potentially overload the circuit.
In 2022, a group of academics published a paper detailing how they could hack a common type of charging station by exploiting a buffer overflow in its network interface, gaining full control of the device.
There have been no confirmed cases of a hacker causing a fire or a battery explosion through a charger, but the theoretical risk exists if an attacker can manipulate the charging current beyond safe limits.

Real-World Risk vs. Theoretical Risk

For the average EV owner, the practical risk is low. Most public chargers are operated by large networks that have security teams and push firmware updates. The more significant risks are:

Data theft: If you use a public charger that has been tampered with, an attacker might be able to skim your payment card information. This is similar to ATM skimming and is more likely than a full charger takeover.
Denial of service: A hacker could disable a charger or a whole network, but this is more of a nuisance than a safety issue.
Home network compromise: If your home charger is poorly secured, an attacker could use it as a gateway to your home Wi-Fi, then attack other devices like your laptop or smart lock.

How to Protect Yourself

You can reduce your risk with a few simple habits:

Use chargers from reputable networks that have a track record of security updates.
When using a public charger, inspect the cable and connector for any unusual attachments or damage before plugging in.
For home chargers, change the default password, enable two-factor authentication on the app if available, and keep the firmware updated.
Use a credit card with fraud protection rather than a debit card for public charging payments.
If you have a smart home setup, consider putting your charger on a separate Wi-Fi network from your main devices.

Common Misconceptions

Several myths circulate about EV charger hacking:

Myth: Hackers can remotely control any charger. Most chargers require physical access or a known vulnerability in a specific model. Remote attacks are rare and usually patched quickly.
Myth: Charging your EV can brick your car’s battery. While a malicious charger could theoretically send incorrect signals, modern EVs have multiple layers of protection in the battery management system that would reject unsafe charging profiles.
Myth: All public chargers are insecure. Many are, but the major networks invest heavily in security because a breach would be a public relations disaster.

Frequently Asked Questions

Can someone hack my home EV charger from the internet?

Yes, if your charger has Wi-Fi and you haven’t changed the default password, or if the manufacturer has a known vulnerability that hasn’t been patched. To be safe, use a strong password, keep the firmware updated, and consider using a smart plug with a timer to cut power when not in use.

Is it safe to use public charging stations?

Generally, yes. The risk of a physical tamper or a remote hack is low, but you should still inspect the cable for any unusual attachments and use a credit card rather than a debit card for payment. Also, avoid using a public charger that looks damaged or has an unlocked access panel.

Can a hacked charger damage my car’s battery?

In theory, yes, if the charger sends an overvoltage or overcurrent signal. However, modern EVs have battery management systems that monitor and limit charging parameters, so the car would likely reject the malicious signal and stop charging. The risk is higher for older EVs with less sophisticated protection.

What should I do if I suspect a charger has been tampered with?

Stop using it immediately and report it to the charging network operator. If you notice any unusual behavior, like the charger starting or stopping on its own, or the app showing incorrect data, disconnect your car and contact the network’s customer support. Also, check your payment card statements for any unauthorized charges.

Are there any government regulations for charger cybersecurity?

As of now, there are no binding federal regulations specifically for EV charger cybersecurity in the United States, but the Department of Energy has published voluntary guidelines. The European Union has similar recommendations under its cybersecurity act. The industry is moving toward self-regulation, with many manufacturers adopting security standards like ISO 15118 for secure communication between the car and charger.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.