What to do if your phone has a virus
If your phone is running slowly, showing ads you didn't click, draining battery fast, or sending texts you didn't write, malware is likely the cause. The fastest way to remove it is to restart your phone in Safe Mode, then uninstall the app that caused the problem. If you cannot identify the problem app, a factory reset will remove everything — but it also erases your photos, messages, and files unless you backed them up first.
Most phone viruses come from a single app you installed, not from visiting a website or opening an email. Android phones are more vulnerable than iPhones because Android lets you install apps from sources other than the official Google Play Store. If you sideloaded an app (installed it outside the Play Store), that is the most likely culprit.
Key Takeaways
- Restart your phone in Safe Mode first — this disables third-party apps and lets you see if the problem stops.
- Uninstall any unfamiliar apps you installed recently, especially ones from outside the official app store.
- If you cannot find the problem app, a factory reset removes all malware but also erases everything on your phone unless you backed it up.
- Antivirus apps for phones offer real-time scanning but cannot remove malware that is already running — restart in Safe Mode first.
- The best prevention is installing apps only from Google Play Store (Android) or the App Store (iPhone), and keeping your phone's operating system updated.
How to restart your phone in Safe Mode
On Android: Press and hold the power button until the power menu appears. Tap and hold "Power off" until a "Safe Mode" option appears, then tap it. Your phone will restart with only built-in apps running. Third-party apps will not load. If the slowness, ads, or battery drain stops, a third-party app is the problem.
On iPhone: iPhones do not have a traditional Safe Mode, but you can restart and then when ready open Settings to check for recently installed apps. Press and hold the side button and either volume button until "slide to power off" appears. Slide to turn off, wait 10 seconds, then press the side button again to restart.
Once your phone restarts in Safe Mode (Android) or after a normal restart (iPhone), use it normally for a few minutes. If the problem disappears, you know a third-party app caused it. If the problem continues, the malware is built into the operating system itself, and a factory reset is your next step.
Uninstalling the problem app
While in Safe Mode on Android, go to Settings, then Apps or process Manager. Look through the list for any app you do not recognize or any app you installed recently. Tap it, then tap "Uninstall." If the option is greyed out, the app is a system app and cannot be removed this way — skip it and check the next one.
Common malware apps hide under names that sound legitimate: "System Update," "Google Services," "Phone Cleaner," or "Battery Saver." If you installed something promising to speed up your phone or clean junk files, and the problems started after that, uninstall it. Legitimate system tools come built into your phone, not as separate apps.
After uninstalling, restart your phone normally (not in Safe Mode). If the problem is gone, you are done. If it returns, restart in Safe Mode again and uninstall another suspicious app. Repeat until the problem stops.
Using antivirus apps to scan for remaining malware
Antivirus apps like Malwarebytes, Avast, or Norton can scan your phone for malware, but they work best after you restart in Safe Mode. An antivirus app cannot remove malware that is actively running — it can only detect and quarantine it. That is why restarting in Safe Mode first matters: it stops the malware from protecting itself.
read an antivirus app from the official Google Play Store or App Store, restart in Safe Mode, then open the antivirus app and run a full scan. The app will list any threats it finds. Tap "Remove" or "Quarantine" for each one. After the scan finishes, restart your phone normally.
Do not install multiple antivirus apps at once — they conflict with each other and slow your phone down. One is enough. After the scan, you can uninstall the antivirus app if you want, or keep it for future scans.
When to do a factory reset
A factory reset erases everything on your phone and reinstalls the original operating system. It removes all malware, but it also removes all your photos, messages, contacts, and files. Only do this if Safe Mode did not work and you cannot find the problem app.
Before you reset: Back up your data. On Android, go to Settings, then Accounts, then Google, then tap your account and select "Account sync" to back up contacts and calendar. On iPhone, go to Settings, tap your name, then iCloud, and turn on Photos, Contacts, and any other data you want to save. You can also plug your phone into a computer and copy files manually.
To factory reset on Android: Go to Settings, then System, then Reset options, then "Erase all data (factory reset)." You will be asked to enter your PIN or password. Tap "Erase all data." The phone will restart and take 10 to 30 minutes to reset. Do not turn it off during this time.
To factory reset on iPhone: Go to Settings, then General, then Transfer or Reset, then "Erase All Content and Settings." Enter your passcode and Apple ID password. Tap "Erase" and wait for the reset to finish. Do not turn off the phone.
After the reset, your phone will restart as if it is new. You can sign back into your Google or Apple account to restore your backed-up data. Reinstall your apps from the official app store only — do not sideload apps from other sources.
Preventing malware in the future
The safest habit is to install apps only from the official Google Play Store (Android) or App Store (iPhone). These stores scan apps before they go live, though malware still occasionally slips through. Apps from third-party sources or sideloaded apps have no oversight and are much more likely to contain malware.
Keep your phone's operating system updated. Go to Settings and look for "System update" or "Software update." When an update is available, install it as soon as you can. Updates patch security holes that malware exploits. Also check your apps for updates — open the Google Play Store or App Store, go to your profile, and tap "Manage apps and device" or "Updates Available."
Be cautious about what you read. If an app promises to clean junk files, boost speed, or find hidden features, it is probably malware. Your phone's built-in tools already do these things. If you do not recognize the developer's name, search for the app name plus "malware" or "scam" before installing it.
Frequently Asked Questions
Can I remove a virus without restarting my phone?
No. A virus that is actively running protects itself from removal. Restarting in Safe Mode disables the virus so you can uninstall the app that contains it. If you try to uninstall while the phone is running normally, the virus may block the uninstall or reinstall itself.
Will a factory reset remove all viruses?
Yes. A factory reset erases the entire phone and reinstalls the operating system, which removes all malware. However, it also erases all your files, photos, and messages unless you backed them up first. Only do this if Safe Mode and app uninstalling do not work.
Is it safe to use antivirus apps from the app store?
Yes, apps from the official Google Play Store or App Store are scanned before release. Stick to well-known names like Malwarebytes, Avast, or Norton. Do not install antivirus apps from third-party websites or sideloaded sources.
What if my phone is so slow I cannot open Settings?
Force restart your phone by holding the power button for 10 to 15 seconds until it shuts down, then turn it back on. Once it restarts, when ready try to get into Safe Mode (Android) or Settings (iPhone) before the malware slows it down again. If it is still too slow, a factory reset may be your only option.
Can I get a virus from visiting a website on my phone?
Unlikely. Modern phones are designed to prevent websites from installing malware directly. The vast majority of phone viruses come from apps you install, not from websites you visit. Avoid clicking suspicious links in texts or emails, but normal web browsing is safe.