How to Check If Your Phone Is Hacked: 12 Warning Signs

Your phone holds your messages, photos, banking apps, passwords and much of your digital life. So when it starts acting strangely, such as draining battery fast, showing pop-ups or sending messages you did not write, it is natural to wonder whether it has been hacked. True phone hacks are less common than people fear, but they do happen, usually through malicious apps, phishing links or compromised accounts. This guide explains how to check if your phone is hacked, the twelve most common warning signs and exactly what to do next on iPhone and Android.

How phones usually get hacked

Method	How it works
Malicious apps	Fake or harmful apps steal data or show ads
Phishing links	Texts or emails trick you into entering passwords or installing malware
Account takeover	Hackers access your Apple ID, Google account or social media, not the phone itself
SIM swapping	Criminals transfer your number to their SIM to receive your codes
Public WiFi attacks	Insecure networks expose unencrypted data
Physical access	Someone installs spyware when they have your unlocked phone
Advanced spyware	Rare, targeted attacks against high-risk people such as journalists or activists

12 warning signs your phone may be hacked

1. Battery drains unusually fast without explanation.
2. Phone runs hot even when idle. See why your phone gets hot.
3. Data usage spikes that you cannot explain.
4. Unknown apps appear on your phone.
5. Pop-up ads appear outside of apps or on the home screen.
6. Messages or calls you did not make show in your history.
7. Friends receive strange messages from your accounts.
8. Account alerts about logins or password changes you did not request.
9. Settings change without your input, such as a new home page or VPN.
10. Phone becomes slow or crashes frequently.
11. Loss of cell service suddenly, which could indicate SIM swapping.
12. Unknown charges on your phone bill or linked payment methods.

None of these alone proves a hack. Battery drain is often caused by updates, and slowdowns by full storage. See battery drain after updates. Look for patterns of several signs.

How to check an iPhone

1. Review installed apps. Swipe to the App Library and look for unfamiliar apps.
2. Check configuration profiles. Go to Settings, General, VPN and Device Management. If you see a profile you did not install and your phone is not managed by work or school, remove it.
3. Review Apple ID devices. Go to Settings, your name and scroll to see devices signed in. Remove any you do not recognize.
4. Run Safety Check. Go to Settings, Privacy and Security, Safety Check to review who has access to your information and location, and reset access if needed.
5. Check battery and data usage in Settings for unusual apps.
6. Update iOS in Settings, General, Software Update.
7. Consider Lockdown Mode if you believe you are targeted by sophisticated spyware: Settings, Privacy and Security, Lockdown Mode.

How to check an Android phone

1. Review apps. Go to Settings, Apps and look for unfamiliar apps, especially those with generic names.
2. Check device admin apps. Search Settings for Device admin apps and disable any you do not recognize.
3. Run Google Play Protect. Open the Play Store, tap your profile, then Play Protect and Scan.
4. Review app permissions. Settings, Security and privacy, Privacy, Permission manager. Look for apps with access to SMS, accessibility, microphone or location that do not need it.
5. Check accessibility services. Malicious apps often abuse accessibility to control your phone. Go to Settings, Accessibility and review installed services.
6. Check Google account security at myaccount.google.com, Security, and review devices and recent activity.
7. Update Android and apps.

What to do if you think your phone is hacked

1. Disconnect from the internet temporarily if you see active suspicious behavior.
2. Delete suspicious apps.
3. Update your phone software.
4. Change passwords from a different, trusted device, starting with email, Apple ID or Google account, banking and social media.
5. Turn on two-factor authentication using an authenticator app or passkeys rather than SMS where possible. See how to set up two-factor authentication on Gmail.
6. Check bank and card accounts for unauthorized activity.
7. Contact your carrier if you lost service suddenly, and ask about a SIM lock or port-out protection.
8. Back up your important data (photos and contacts) and factory reset if problems continue. Do not restore suspicious apps afterward.
9. Get help from the manufacturer, your carrier or a professional if you suspect targeted spyware.

If your social media account was taken over, see what to do if your Instagram account is hacked.

How to prevent phone hacks

• Install apps only from official app stores.
• Keep your phone and apps updated.
• Use a strong passcode and biometric lock.
• Never click links in unexpected texts or emails. See how to tell if an email is a phishing scam.
• Use two-factor authentication on important accounts.
• Avoid jailbreaking or rooting your phone.
• Turn off Bluetooth and WiFi auto-connect in public when not needed.
• Set a carrier account PIN to prevent SIM swaps.
• Review app permissions regularly.

Real examples

The fake flashlight app. Tom installed a free flashlight app that showed constant ads. Removing it stopped the pop-ups.

The account takeover. Ana’s friends got strange messages from her Instagram. Her phone was fine, but her password had been stolen in a phishing scam. Changing passwords and enabling two-factor authentication fixed it.

The SIM swap. Rob suddenly lost service, then got password reset emails. His carrier confirmed a SIM swap. He regained his number, changed passwords and added a carrier PIN.

Frequently asked questions

Can someone hack my phone just by calling me?

Ordinary calls do not hack phones. However, scammers use calls to trick people into sharing codes or installing apps.

Can iPhones get hacked?

Yes, but it is uncommon for ordinary users. Most iPhone compromises involve stolen Apple ID credentials or phishing rather than malware.

Does a factory reset remove hackers?

A factory reset removes most malware. Change account passwords as well, since account access is separate from the device.

Can someone see me through my camera?

It is possible with certain malware, but rare. iPhone and Android show indicators when the camera or microphone is in use.

Should I install antivirus on my phone?

On Android, Google Play Protect is built in, and reputable security apps can add protection. On iPhone, keeping iOS updated is the most important step.

Hacked phone vs hacked account: know the difference

Many people who think their phone is hacked actually have a hacked account. The difference matters because the fix is different.

Situation	What’s compromised	Main fix
Friends get strange messages from your Instagram or Facebook	Social media account	Change password, enable 2FA, log out other sessions
Password reset emails you didn’t request	Email or online account being targeted	Change password, enable 2FA, check recovery options
Purchases on your Apple ID or Google account	Apple ID or Google account	Change password, review devices, contact Apple or Google
Pop-ups on home screen and unknown apps	Phone has adware or malware	Delete apps, scan, update, reset if needed
Lost cell service suddenly	Phone number via SIM swap	Contact carrier immediately
Location shared without consent	Account sharing settings or a tracking device	Run Safety Check, review sharing, scan for trackers

If only one account is affected, resetting your phone alone will not help. Securing the account is what stops the attacker.

Stalkerware and tracking concerns

Stalkerware is software secretly installed to monitor someone’s messages, location or calls, often by a partner or family member with physical access to the phone. Warning signs include a partner knowing things they should not, unfamiliar apps with vague names, unexpected device admin or accessibility permissions, and location sharing you did not set up. Physical trackers, such as small Bluetooth tags, can also be used to follow someone.

If you suspect stalkerware or tracking, think about your safety before removing anything, since removing it may alert the person who installed it. iPhones include Safety Check, and both iPhone and Android can alert you to unknown Bluetooth trackers traveling with you. Organizations such as the National Domestic Violence Hotline (1-800-799-7233 in the US) can help you plan safely.

Simple security habits that block most attacks

• Use a unique password for every important account, stored in a password manager.
• Turn on two-factor authentication or passkeys for email, banking and social media.
• Keep automatic updates on for the operating system and apps.
• Lock your phone with a six-digit or longer passcode.
• Review installed apps every few months and delete what you do not use.
• Never share one-time codes with anyone who contacts you.

These habits are simple, free and stop the vast majority of attacks against ordinary users.

When in doubt, remember that updating your phone, removing suspicious apps and securing your main email account fixes most problems, because your email is the key that unlocks almost every other account.

The bottom line

To check if your phone is hacked, look for multiple warning signs such as unknown apps, pop-ups, unexplained battery or data use and account alerts. Review apps, profiles, permissions and connected devices, update your software, change passwords from a trusted device and enable two-factor authentication. If problems continue, back up and factory reset.