# How to tell if your phone is hacked (and what to do next)

> Warning signs like battery drain, strange apps, pop-ups, unknown logins and missing OTPs. A 15-minute check for Android and iPhone, how to remove spyware, and how to stay safe.

- URL: https://2search.in/knowledge/articles/oct-26/how-to-tell-if-phone-is-hacked
- Genre: Technology
- Country: Everywhere
- Published: 2026-10-27
- Updated: 2026-10-27
- Publisher: 2search (https://2search.in)

> **Quick answer:** Common signs your phone may be hacked: **apps you didn't install**, **sudden battery drain or data use**, **pop-up ads everywhere**, **messages or calls you didn't make**, **alerts about logins you didn't do**, and **suddenly no signal** (a possible SIM swap). To fix it: **remove unknown apps**, check **app permissions and device admin / profiles**, **update the phone**, run **Google Play Protect** (Android) or **Safety Check** (iPhone), **change passwords from a safe device**, and **factory reset** if problems continue.

> **Key takeaways**
> - Most "hacks" are **malicious apps, phishing or stolen account passwords** — not someone remotely breaking into the phone.
> - **Sideloaded APKs** and apps a stranger asked you to install are the biggest risk on Android.
> - **Losing signal suddenly** while others have it can mean a **SIM swap** — call your carrier at once.
> - **Factory reset** removes almost all malware, but **back up photos only** — not apps — first.
> - If you're worried someone you know is tracking you (stalkerware), **plan for your safety** before removing anything.

A slow or hot phone doesn't always mean it's hacked — but some signs are worth taking seriously. This guide helps you tell the difference, walks you through a 15-minute check on Android and iPhone, and shows how to clean up and lock things down.

", displaying 2026 realistic price spectrums, hardware versus labor allocation, step-by-step workflow, clean modern UI cards, high precision vector layout.")



![How to tell if your phone is hacked (and what to do next) Breakdown & Visual Guide](/images/articles/how-to-tell-if-phone-is-hacked/diagram.svg)

## Warning signs, from most to least serious

| Sign | What it may mean |
| --- | --- |
| **No signal suddenly**, "SIM not valid", while others nearby have signal | **SIM swap** — someone moved your number to their SIM |
| **OTPs or password-reset messages** you didn't request | Someone is trying to get into your accounts |
| **Logins from unknown devices or places** (Google, Apple, WhatsApp, banking alerts) | An account password was stolen |
| **Messages, calls or posts you didn't send** | An account or the phone is compromised |
| **Apps you don't recognise**, especially with odd names or no icon | Malware or stalkerware |
| A **device admin app** or **configuration profile** you didn't add | Malware with deep control, or a work/school profile |
| **Pop-up ads** outside apps, or the browser redirecting to strange sites | Adware |
| **Battery drain, overheating or high data use** with normal use | Possible hidden apps — but also normal after updates or with heavy apps |
| **Unexpected charges** on your phone bill (premium SMS) | Malware subscribing you to services |

## Step 1: Check for SIM swap first (if you lost signal)

1. Restart the phone. If you still have **no service** while others on your network do, **call your carrier from another phone** immediately.
2. Ask them to **block any SIM change** and add a **port-out PIN / SIM lock**.
3. Then secure your **bank and email** accounts — SIM swaps are used to receive your OTPs.

## Step 2: 15-minute check on Android

1. **Update everything:** Settings → System → Software update; and Play Store → update all apps.
2. **Run Play Protect:** Play Store → profile icon → **Play Protect → Scan**.
3. **Review installed apps:** Settings → Apps → See all. Uninstall anything you don't recognise. Look for generic names like "System Service", "Update" or "Wi-Fi".
4. **Check device admin apps:** Settings → Security & privacy → **Device admin apps** (or "Other security settings"). Turn off any you don't recognise, then uninstall them.
5. **Check accessibility services:** Settings → Accessibility → **Installed apps / Downloaded apps**. Malware often abuses accessibility to read your screen. Turn off unknown ones.
6. **Check app permissions:** Settings → Security & privacy → **Privacy → Permission manager**. Review which apps have **SMS, location, microphone, camera** and **"Display over other apps"**.
7. **Turn off "Install unknown apps"** for browsers, file managers and messaging apps.

## Step 3: 15-minute check on iPhone

1. **Update iOS:** Settings → General → Software Update.
2. **Run Safety Check:** Settings → Privacy & Security → **Safety Check**. Review who you share location and data with, and which devices are signed in to your Apple Account.
3. **Check profiles:** Settings → General → **VPN & Device Management**. Remove any profile you didn't install (unless it's from your employer or school).
4. **Check your Apple Account devices:** Settings → your name → scroll to the device list. Remove unknown devices.
5. **Review apps** on the home screen and in the App Library; delete ones you don't recognise.
6. **Review permissions:** Settings → Privacy & Security — Location, Microphone, Camera, Photos.
7. Consider **Lockdown Mode** (Settings → Privacy & Security) if you think you're being targeted by advanced spyware — for example as a journalist or activist.

## Step 4: Secure your accounts — from a different, safe device

If any account might be compromised, change passwords **from a computer or phone you trust**:

1. **Email first** (Google, Outlook, Apple), then **banking, social media, WhatsApp, cloud storage**.
2. **Sign out of all other sessions** in each account's security settings.
3. Turn on **two-step verification** — preferably an **authenticator app or passkey**, not SMS. See [what are passkeys](/passkeys-explained).
4. On **WhatsApp**: Settings → Account → **Two-step verification** (set a PIN). Check **Linked devices** and log out of unknown ones.
5. Check your **email forwarding rules** — attackers often add one to secretly copy your mail.

A [password manager](/password-manager-guide) makes it easy to change many passwords quickly.

## Step 5: Factory reset if problems continue

If strange behaviour continues after the steps above, a factory reset removes almost all malware.

1. **Back up only what you need:** photos, contacts, important documents. **Don't restore apps from an old backup** if you think they were the problem.
2. Android: Settings → System → Reset options → **Erase all data (factory reset)**.
3. iPhone: Settings → General → Transfer or Reset iPhone → **Erase All Content and Settings**.
4. Set up as **new**, install apps fresh from the official store, and sign in with your **new passwords**.

> **Warning: stalkerware.** If you think a **partner, ex or family member** installed tracking software, removing it may alert them. Consider your safety first — contact a local domestic-violence helpline for advice on a safety plan. Use a different device to look for help.

## How phones actually get hacked

| How | How to avoid it |
| --- | --- |
| **Fake or malicious apps**, especially APK files sent on WhatsApp or Telegram | Install only from Google Play or the App Store |
| **Phishing links** in SMS, email or chat ("Your parcel is held", "KYC expired") | Don't tap links in unexpected messages; go to the app or site directly |
| **Screen-sharing apps** installed on a scammer's request | Never install remote-access apps for a caller |
| **Stolen or reused passwords** | Unique passwords via a manager; passkeys |
| **SIM swap** | Carrier SIM lock / port-out PIN; authenticator apps instead of SMS |
| **Physical access** by someone you know | Strong screen lock; don't share your PIN |
| **Old software** | Turn on automatic updates; replace phones that no longer get updates |
| **Public Wi-Fi** (much less of a risk today) | Use mobile data or a trusted VPN for sensitive tasks |

## Keep your phone safe going forward

- Turn on **automatic updates** for the system and apps.
- Use a **6-digit PIN or longer** plus fingerprint or face unlock.
- Keep **Play Protect** on (Android). Don't jailbreak or root your phone.
- Review **app permissions** every few months.
- Turn on **Find My Device / Find My** so you can locate or wipe a lost phone.
- In India, check numbers registered in your name on **Sanchar Saathi** and report fraud on **1930**. See [how to report cyber fraud](/report-cyber-fraud-1930).

## Frequently asked questions

### Can someone hack my phone by calling me?

Just answering a call almost never hacks a phone. Calls are used to trick you into sharing codes, installing apps or tapping links.

### Can my phone be hacked through a text message?

Clicking a link or installing something from a text can lead to problems. Very rare "zero-click" attacks exist but target high-profile people; updating your phone protects against known ones.

### Does a factory reset remove hackers?

It removes almost all malware from the phone. You also need to change passwords, because attackers may have your account logins.

### Is my iPhone safer than Android?

Both are secure when updated and when you install apps only from official stores. Most Android infections come from sideloaded apps.

### Can someone see me through my phone camera?

Only if a malicious app has camera permission. Check permissions; modern phones show a green or orange dot when the camera or microphone is in use.

### What does *#21# do?

On many networks it shows whether call forwarding is turned on. If calls are forwarded to an unknown number, turn it off with ##002# and contact your carrier.

### Should I install an antivirus app?

On Android, Play Protect covers most people. Reputable security apps can add extra checks. On iPhone, security apps are limited; keep iOS updated and use Safety Check.

## Sources

- [FTC — How to protect your phone and the data on it](https://consumer.ftc.gov/articles/how-protect-your-phone-hackers)
- [Apple Support — Safety Check for iPhone](https://support.apple.com/guide/personal-safety/safety-check-iphone-ios-16-ips2aad835e1/web)
- [Google — Play Protect](https://support.google.com/googleplay/answer/2812853)
- [Apple Support — About Lockdown Mode](https://support.apple.com/en-us/105120)
- [CISA — Mobile device security tips](https://www.cisa.gov/secure-our-world)