What spyware looks like on your phone, and how to spot it
Spyware is software installed on your phone without your knowledge to watch what you do — read your messages, track your location, record calls, or capture what you type. You cannot always see it running, but you can watch for signs that something is wrong: your phone gets hot for no reason, the battery drains much faster than it used to, your data usage spikes without explanation, or your phone becomes sluggish even when you are not using apps.
The most reliable sign is behaviour you did not cause. If your phone restarts on its own, opens apps you did not tap, or shows notifications from apps you do not remember installing, something is likely running in the background. Text messages might fail to send or arrive late. Your phone bill might show data usage that does not match what you remember doing.
These signs do not always mean spyware — a failing battery, a software update, or a buggy app can cause the same things. But if several of these happen at once, or if they started after you clicked a link in a text message or downloaded something from an unfamiliar source, spyware is worth investigating.
Key Takeaways
- Check your installed apps against what you remember downloading, because spyware often hides under names that look like system software or legitimate tools.
- Look for apps with permissions they should not need — a flashlight app that wants access to your location, or a calculator that wants to read your messages.
- On iPhone, check Settings > General > iPhone Storage to see what is taking up space; on Android, go to Settings > Apps to see what is installed and how much data each one uses.
- If you find something suspicious, uninstall it, then change your passwords from a different device in case the spyware captured them.
- The most common entry point is a text message link or an email attachment, so be cautious about what you click, especially from numbers or addresses you do not recognize.
How to look at what apps are actually installed on your phone
Start by looking at what is on your phone right now. On an iPhone, go to Settings, tap General, then iPhone Storage. You will see every app installed, how much space it uses, and when you last opened it. Look for apps you do not remember downloading. Spyware often disguises itself as something harmless — a system update, a battery saver, a file manager, or a security app — so pay attention to anything with a generic name or anything you do not recognize.
On Android, go to Settings, then Apps (or process Manager, depending on your phone). You will see a list of everything installed. Tap each app to see when it was installed and how much data it has used. Look for the same red flags: apps with names that sound like they belong to the system, apps you do not remember installing, or apps that use a lot of data without explanation.
If you find an app you do not recognize, search for its name online before you do anything else. Spyware sometimes uses names that are close to real apps — for example, "Google Play Services" is real, but "Google Play Service" (without the s) might not be. A quick search will tell you whether the app is legitimate.
Check what permissions each app is asking for
Even legitimate apps sometimes ask for more access than they need. A flashlight app should not need to know your location. A calculator should not read your contacts. A weather app should not access your camera. Go through the apps you use most often and check what they are allowed to do.
On iPhone, go to Settings, then Privacy. You will see categories like Location Services, Contacts, Calendar, Camera, Microphone, and Photos. Tap each one and look at which apps have permission. If an app has access it should not need, tap it and change the permission to "Never" or "Only While Using the App".
On Android, go to Settings, then Apps & Notifications, then Permissions. You will see the same categories. Tap each one to see which apps have that permission. Remove permissions that do not make sense. You can also go into each app's settings individually — tap Settings, then Apps, then the app name, then Permissions — to see and change what it can access.
Look for hidden apps and system-level spyware
Some spyware hides itself by not showing an icon on your home screen. On iPhone, go to Settings, then General, then iPhone Storage again. Look at the full list of apps. If you see something installed that does not appear on your home screen or in your app library, that is suspicious. Tap it to see what it does, then uninstall it if you do not recognize it.
On Android, the process is similar but slightly different. Go to Settings, then Apps, and make sure you are viewing all apps, not just the ones you use frequently. Some Android phones have a setting that hides certain apps — if you see an option that says "Show system apps" or "Show all apps", turn it on so you can see everything. Look for anything unfamiliar.
Some spyware runs at the system level, which means it is harder to see and harder to remove. If your phone is jailbroken (iPhone) or rooted (Android), it is more vulnerable to this kind of spyware. If you do not remember jailbreaking or rooting your phone, and your phone shows signs of spyware, that is a strong indicator that something was installed without your permission.
Check your phone's data and battery usage
Spyware uses data to send information about you to whoever installed it. Go to your phone's settings and look at data usage over the past month. On iPhone, go to Settings, then Cellular, and scroll down to see which apps have used the most data. On Android, go to Settings, then Network & Internet, then Mobile Network, then App Data Usage.
Compare what you see to what you remember doing. If an app you barely use has consumed a lot of data, or if your total data usage is much higher than usual, something in the background might be running. Spyware also drains the battery because it is constantly working. If your battery goes from full to empty much faster than it used to, and you have not changed how you use your phone, that is worth investigating.
Check your battery usage the same way. On iPhone, go to Settings, then Battery, then Battery Health & Charging. On Android, go to Settings, then Battery, then Battery Usage. Look for apps that are using an unusual amount of power. If an app you do not use much is near the top of the list, that is suspicious.
What to do if you find something suspicious
If you find an app you do not recognize or that has permissions it should not have, uninstall it. On both iPhone and Android, press and hold the app icon, then select Remove App or Uninstall. If the app will not uninstall, it may have been installed as a system app or may have administrator access. On Android, go to Settings, then Security, then Device Admin Apps, and look for anything unfamiliar. Tap it and select Deactivate, then go back and uninstall it.
After you uninstall anything suspicious, change your passwords — but do it from a different device, like a computer or tablet. If spyware was on your phone, it may have captured your passwords as you typed them. Use a password manager to create new, strong passwords for your email, banking, and other important accounts. Your email account is the most important one, because someone who controls your email can reset passwords for everything else.
If you find spyware and cannot remove it, or if you are not sure whether what you found is actually spyware, consider backing up your important data and then doing a factory reset. On iPhone, go to Settings, then General, then Transfer or Reset, then Erase All Content and Settings. On Android, go to Settings, then System, then Reset Options, then Erase All Data. This will remove everything on your phone, including any spyware. After the reset, restore your data from a backup, but only from a backup you made before you think the spyware was installed.
How spyware usually gets onto your phone in the first place
Most spyware arrives through a link in a text message or email, or through an attachment you read. Someone sends you a message that looks like it is from your bank, a delivery service, or a friend, with a link that says to click it. When you click, it installs spyware without asking permission. Sometimes the message is convincing enough that you do not realize it is fake.
Spyware can also come from downloading an app from somewhere other than the official App Store (iPhone) or Google Play Store (Android). If you read an app from a website or a third-party app store, you are taking a bigger risk. Stick to the official stores, and read the reviews and permissions before you read anything.
If someone has physical access to your phone, they can install spyware directly. This is less common, but it happens — a partner, family member, or someone else with access to your phone could install it while you are not looking. If you are concerned about this, use a strong passcode and do not leave your phone unattended.
Frequently Asked Questions
Can I check for spyware without taking my phone to a repair shop?
Yes. Start with the steps in this guide — check your installed apps, look at permissions, and watch your data and battery usage. If you find something suspicious, uninstall it and change your passwords. If you cannot find anything but your phone still behaves strangely, a factory reset is the most reliable way to remove spyware you cannot see.
What if I think my phone is spyware but I cannot find it?
Spyware that runs at the system level is hard to spot. If your phone shows multiple signs — battery drains fast, data usage is high, it gets hot, it restarts on its own — and you cannot find the cause, a factory reset will remove it. Back up your important data first, then erase everything and restore from a backup made before you think the spyware arrived.
Is it safe to uninstall apps I do not recognize?
Yes, as long as they are not system apps that came with your phone. If you cannot uninstall something, it may be a system app or may have administrator access. Check your device admin apps first, deactivate anything unfamiliar, then try uninstalling again. If you are still stuck, a factory reset will remove it.
How do I know if a text message link is safe to click?
Do not click links in unsolicited text messages, even if they look like they are from your bank or a service you use. Instead, go directly to the website or app and log in yourself. If there is a real issue, you will see it there. If you are not sure, call the company using a phone number from their official website.
Will a factory reset remove all my data?
Yes, a factory reset erases everything on your phone. Before you do it, back up your photos, contacts, and other important data to a cloud service like iCloud (iPhone) or Google Drive (Android), or to a computer. After the reset, you can restore your data from the backup.