The short answer: iPhone malware is rare, but you can spot signs of it yourself
iPhones get malware far less often than Android phones or computers, but it does happen — usually through apps from outside the official App Store, phishing links, or compromised Wi-Fi networks. You cannot run a traditional antivirus scan on an iPhone the way you would on a Windows computer. Instead, you look for signs that something is wrong: unusual battery drain, apps crashing, unexpected data use, or a phone that runs hot without reason.
If you find those signs, the fastest fix is usually to restart your phone, check your installed apps, and remove anything you do not recognize or no longer use. If the problem persists, backing up your data and restoring your iPhone to factory settings will remove any malware — but it also erases everything on the device, so this is a last resort.
Key Takeaways
- iPhones cannot be scanned with antivirus software the way computers can, so you watch for warning signs like battery drain, overheating, or apps that crash repeatedly.
- Most iPhone malware enters through apps downloaded outside the App Store, so deleting unfamiliar or unused apps is your first defense.
- Restarting your phone clears temporary files and stops many malware behaviors, and should be your first troubleshooting step.
- If restarting and removing suspicious apps does not help, backing up your data and restoring your iPhone to factory settings will remove malware but erases everything else on the device.
Signs your iPhone may have malware
Battery drain that happens suddenly and without explanation is one of the most common signs. Open Settings, then Battery, then Battery Health & Charging. If your battery health is above 80 percent but your phone dies much faster than it used to, something is running in the background and using power. Malware often does this.
Overheating is another red flag. If your iPhone feels hot to the touch when you are not using it heavily — not during a video call or while playing a game, but just sitting idle — a process is running that should not be. Malware consumes processor power, which generates heat.
Unexpected data use shows up in Settings under Cellular or Wi-Fi. If your data jumped dramatically without you streaming video or downloading large files, malware may be sending information from your phone. Apps that crash repeatedly, even after you restart your phone, can also indicate malware, though crashes are more often just a sign that an app is poorly made.
Pop-ups that appear even when you are not in a browser, or a home screen that looks different than you remember, are less common but still worth investigating. If you see apps you did not install, that is a strong sign something is wrong.
How to restart your iPhone and clear temporary files
Restarting your phone stops most malware from running and clears temporary files that malware may be using. The method depends on which iPhone model you have. On iPhone X and newer, press and hold the volume up button and the side button together until the power-off slider appears. Drag the slider to turn off your phone, wait 30 seconds, then press and hold the side button again until you see the Apple logo.
On iPhone 8 and earlier, press and hold the top (or side) button until the power-off slider appears, then follow the same steps. This is a hard restart, not a soft one — it clears more data from memory and is more likely to stop malware temporarily.
After your phone restarts, check whether the problem improved. If battery drain stops or your phone stops overheating, the malware may have been cleared. If the problem returns within hours or days, the malware is still on your device and you will need to take the next step.
Checking your installed apps and removing suspicious ones
Open Settings, then General, then iPhone Storage. This shows every app on your phone, sorted by size. Scroll through and look for apps you do not remember installing. Pay special attention to apps with generic names like "System Update", "Security Scan", or "Cleaner" — these are common malware disguises.
If you see an app you do not recognize, tap it and select "Remove App", then "Delete App". Do not worry about deleting something important by accident — if you delete an app that came with your iPhone, you can reinstall it from the App Store. If you delete a third-party app you actually wanted, you can read it again.
Also check your home screen for apps that should not be there. Swipe to the last page of your home screen and look for anything unfamiliar. Malware sometimes hides apps in folders with innocent names, so open any folder you do not recognize and check what is inside.
Pay special attention to apps you downloaded from outside the App Store. If you used a website or email link to install an app rather than going through Apple's official store, that app is a higher risk. If you are not certain you need it, delete it.
Checking your browser history and Safari settings
Malware often changes your browser settings or injects ads into web pages. Open Safari, tap the Bookmarks icon (the open book), then tap History. Look at the websites you have visited — if you see sites you did not go to, malware may be redirecting your browser.
Then check your Safari settings. Go to Settings, scroll down to Safari, and tap it. Look at the Search Engine setting — it should be Google, Bing, DuckDuckGo, or Yahoo, depending on your preference. If it is set to something you do not recognize, malware changed it. Tap it and change it back to your preferred search engine.
Also check the Home Page setting in the same menu. If it is set to a website you do not recognize, change it back to Google or leave it blank. Malware sometimes sets a fake home page to show ads or phishing pages.
When to back up and restore your iPhone to factory settings
If restarting, deleting suspicious apps, and checking your browser settings did not solve the problem, restoring your iPhone to factory settings will remove the malware. This erases everything on your phone — all your photos, messages, apps, and settings — so only do this as a last resort.
Before you restore, back up your data. Go to Settings, tap your name at the top, then iCloud, then iCloud Backup. Tap "Back Up Now" and wait for the backup to finish. This saves your photos, messages, contacts, and most app data to Apple's servers so you can restore them later.
To restore your iPhone, go to Settings, then General, then Transfer or Reset (the name varies by iOS version), then Reset, then Erase All Content and Settings. You will be asked to enter your Apple ID password and your phone's passcode — this is a security measure to prevent theft. After you enter both, your phone will erase itself and restart as if it were brand new.
When your iPhone restarts, you will see the setup screen. Follow the steps to sign back into your Apple ID, and when you reach the Apps & Data screen, choose "Restore from iCloud Backup". Select the backup you just created, and your photos, messages, contacts, and most of your apps will return to your phone. Your malware will be gone.
Preventing malware in the future
read apps only from the App Store. Apple reviews every app before it appears in the store, which is not a perfect system but is much safer than downloading from random websites or email links. If an app asks you to read it from a link instead of directing you to the App Store, that is a warning sign.
Do not click links in text messages or emails from people you do not know, and be suspicious of links even from people you do know if the message seems out of character. Phishing links are one of the most common ways malware reaches iPhones. If a message says "Click here to confirm your Apple ID" or "Verify your account", go to Settings and sign into your Apple ID directly instead of clicking the link.
Keep your iPhone updated. Go to Settings, then General, then Software Update, and install updates as soon as they are available. Updates patch security holes that malware exploits.
Use a strong, unique passcode and enable Face ID or Touch ID so your phone is harder to unlock if it is stolen. Malware sometimes spreads through physical access to your phone.
Frequently Asked Questions
Can I use antivirus apps from the App Store to scan for malware?
No. Apple does not allow antivirus apps to scan your entire phone the way they do on a computer. Apps in the App Store can only check themselves, not other apps or system files. Antivirus apps for iPhone are largely marketing — they do not provide real protection. Focus on the steps in this guide instead.
What if I think my Apple ID was hacked?
Go to appleid.apple.com on a computer, sign in, and check the Devices section to see what phones and computers are signed into your account. If you see a device you do not recognize, click it and select "Remove from Account". Then change your Apple ID password. If you cannot sign in, call Apple Support at 1-800-MY-APPLE.
Is it safe to use public Wi-Fi on my iPhone?
Public Wi-Fi is a common way malware spreads because the network is not encrypted. Avoid signing into sensitive accounts like your bank or email on public Wi-Fi. If you must use public Wi-Fi, use a VPN app from the App Store — it encrypts your data so malware on the network cannot see it. Avoid free VPN apps; paid ones are more trustworthy.
What should I do if I see a pop-up saying my iPhone has a virus?
Close Safari when ready — do not tap any buttons on the pop-up. These are fake warnings designed to scare you into clicking a link that installs malware. Apple does not send virus warnings through Safari. If you are concerned your phone has malware, follow the steps in this guide instead of clicking anything on the pop-up.
Can malware on my iPhone access my bank account?
Malware can steal your password if you type it into a phishing website, but it cannot directly access your bank account through the app because of how iOS is built. However, if malware steals your Apple ID password, it can change your payment methods or read apps using your account. This is why changing your Apple ID password when ready is important if you suspect malware.