How to tell if your phone is hacked

A hacked phone usually shows itself through unusual behavior: apps crashing without reason, your battery draining much faster than normal, data usage spiking when you are not actively using the phone, or your device running hot even when you are not doing anything demanding. You might also notice your phone taking longer to shut down, unfamiliar apps appearing that you did not install, or your contacts reporting that they received messages from you that you never sent.

The most reliable sign is your phone's behavior changing noticeably over a short period. If your device suddenly becomes sluggish, restarts on its own, or your screen locks and unlocks by itself, something is likely running in the background without your knowledge. These changes happen because malware consumes processing power and battery life to do its work — usually stealing data, displaying ads, or sending your information to someone else.

Not every sign means you are hacked. A slow phone can mean your storage is full, your apps need updating, or your battery is aging. But if several of these signs appear at once, or if your phone behaves strangely after you clicked a suspicious link or downloaded something from an untrusted source, investigating further makes sense.

Key Takeaways

  • Battery drain, unexpected data usage, crashing apps, and messages you did not send are the most common signs of a hacked phone.
  • Check your app list for unfamiliar programs, review your accounts for unauthorized logins, and look at your data usage in your phone's settings.
  • Restarting your phone in Safe Mode lets you see if the problem is a malicious app or something built into your system.
  • If you find evidence of hacking, change your passwords from a different device, enable two-factor authentication on important accounts, and consider a full factory reset as a last step.
  • On both Android and iPhone, you can run a security scan through your phone's built-in tools or a reputable antivirus program.

Check your apps and recent activity

Open your phone's Settings and go to the Apps section (called process Manager on some Android phones). Scroll through the full list and look for programs you do not recognize. Hackers often install apps with generic names like "System Update" or "Google Services" that sound legitimate but are not. If you see something unfamiliar, tap it and select Uninstall. On iPhone, go to Settings > General > iPhone Storage to see all installed apps and remove anything suspicious.

Next, check your accounts for unauthorized logins. On Android, go to Settings > Google > Manage your Google Account > Security and scroll to "Your devices" to see which phones and computers have logged into your account. On iPhone, go to Settings > [Your Name] > Password & Security and look at "Where You're Signed In." If you see a device you do not own or recognize, tap it and select "Remove from Account." This does not delete the device — it just signs your account out of it.

Review your email's login history as well. In Gmail, scroll to the bottom of any email and click "Details" next to "Last account activity." You will see a list of locations and devices that have accessed your email. If you see logins from places you have never been or at times you were asleep, someone else has your password.

Review your data usage and battery drain

On Android, go to Settings > Network > Data Usage (or Mobile Data, depending on your phone) and look at which apps are using the most data. Compare this to what you remember using. If an app you rarely open is consuming gigabytes, it may be sending data in the background. Tap the app name to see a breakdown of when the usage happened.

For battery drain, go to Settings > Battery or Battery and Device Care and look at which apps consumed the most power in the last 24 hours. A hacked phone often shows apps using battery even when you have not opened them. On iPhone, go to Settings > Battery > Battery Health & Charging and then Settings > Battery to see which apps used the most power.

Keep in mind that some apps legitimately use a lot of data and battery — streaming video, maps, and social media are normal culprits. But if an app you barely use is in the top three, that is worth investigating further.

Run your phone in Safe Mode

Safe Mode disables all third-party apps and runs only the system software that came with your phone. If your phone works normally in Safe Mode, the problem is almost certainly a malicious app you installed. If the problem continues in Safe Mode, the issue is likely built into your system or your hardware is failing.

On Android, press and hold the power button until the power menu appears. Press and hold "Power Off" until you see "Safe Mode" as an option, then tap it. Your phone will restart with "Safe Mode" displayed at the bottom of the screen. Use your phone normally for a few minutes and watch for the same problems — battery drain, slowness, unexpected restarts. When you are done testing, restart your phone normally to exit Safe Mode.

On iPhone, there is no built-in Safe Mode, but you can restart your phone and when ready open Settings > General > iPhone Storage to see if apps load and behave normally. If your iPhone continues to have problems even after a restart, the issue may be more serious.

Scan your phone with antivirus software

Android phones can run antivirus scans through Google Play Protect, which is built in. Go to Settings > Apps & Notifications > Advanced > Google Play Protect and tap "Scan." Google will scan all your installed apps against a database of known malware. This scan is free and takes a few minutes.

If you want a second opinion, you can read a reputable antivirus app from the Google Play Store — Bitdefender, Norton, or Kaspersky are widely used. Install it, run a full scan, and follow the app's instructions if it finds anything. Be cautious: many antivirus apps in the Play Store are themselves malicious or try to trick you into paying for features that should be free. Stick to names you recognize.

iPhone does not allow third-party antivirus apps because Apple controls what runs on the system. If you suspect your iPhone is hacked, your best option is to back up your data and perform a factory reset, which we cover below.

Change your passwords and enable two-factor authentication

If you believe your phone is hacked, do not change your passwords on the hacked phone itself — use a different device like a computer or tablet. Go to each account (email, banking, social media, shopping) and change the password to something long and unique that you have never used before. A strong password is at least 16 characters and includes uppercase letters, lowercase letters, numbers, and symbols.

After changing your password, enable two-factor authentication on every account that offers it. Two-factor authentication means that even if someone has your password, they cannot log in without a second form of proof — usually a code sent to your phone or generated by an app. Go to your account settings and look for "Security," "Two-Factor Authentication," or "Two-Step Verification." This step takes a few extra minutes when you log in, but it stops most hackers cold.

If your email account was compromised, change the password first, then check your recovery email and phone number in your account settings. Hackers sometimes change these to lock you out. Make sure the recovery email is one you control and the phone number is yours.

Perform a factory reset if the problem persists

A factory reset erases everything on your phone and reinstalls the original operating system. It is the most thorough way to remove malware, but it also means losing all your photos, messages, and files unless you backed them up first. Only do this if you have found clear evidence of hacking and other steps have not worked.

Before you reset, back up your important data. On Android, go to Settings > Accounts > Google and tap your account, then select "Account Sync" to make sure your photos, contacts, and calendar are backed up to Google Drive. On iPhone, go to Settings > [Your Name] > iCloud and turn on iCloud Backup, then tap "Back Up Now."

To factory reset an Android phone, go to Settings > System > Reset Options > Erase All Data (or similar wording, which varies by manufacturer). You will be asked to enter your PIN or password to confirm. The reset takes 10 to 30 minutes. When it finishes, your phone will restart and ask you to set it up as if it were brand new. Sign back into your Google account, and your backed-up data will restore automatically.

To factory reset an iPhone, go to Settings > General > Transfer or Reset > Erase All Content and Settings. You will need to enter your Apple ID password. The reset takes 10 to 20 minutes. When it finishes, set up your iPhone again and sign into your Apple ID to restore your backed-up data.

Frequently Asked Questions

Can I tell if someone is spying on my phone through the camera or microphone?

There is no reliable way to know if your camera or microphone is actively being used without specialized tools. However, if your data usage is very high and you are not streaming video or music, someone may be recording or transmitting video from your phone. Covering your camera with tape costs nothing and prevents visual spying. For microphone access, your best protection is the steps above — removing malicious apps and keeping your phone updated.

What if I think my phone was hacked but I do not see any of these signs?

Not all hacking is obvious. Some malware runs silently in the background and steals data without affecting your phone's performance. If you clicked a suspicious link, downloaded something from an untrusted source, or gave someone your password, change your passwords and enable two-factor authentication even if your phone seems fine. These steps protect your accounts regardless of whether your phone is actually compromised.

Is it safe to keep using my phone after I find it is hacked?

It depends on what was hacked. If you found a malicious app and uninstalled it, your phone is likely safe to use. If you have not changed your passwords yet, avoid logging into banking or shopping accounts until you do — use a different device instead. If you performed a factory reset, your phone is safe once it restarts, but do not log back into accounts until you have changed your passwords on a different device.

Do I need to tell my contacts that my phone was hacked?

If your contacts reported receiving messages from you that you did not send, yes — let them know your phone was compromised and that they should not click any links in those messages. You do not need to notify everyone, just the people who may have received suspicious messages. Keep the notification brief: "My phone was hacked and sent out messages. Do not click any links from me until I contact you directly."

Will updating my phone stop it from being hacked?

Updates patch security holes that hackers use to break in, so keeping your phone updated makes hacking much harder. However, updates do not remove malware that is already on your phone — they only prevent new infections. If your phone is already hacked, you need to remove the malicious app or perform a factory reset. After that, turn on automatic updates so your phone stays protected going forward.