Most “my phone is hacked” worries turn out to be a misbehaving app, an old battery or a storage problem. But phone spyware and account takeovers are real, and the warning signs are specific. This guide lists what actually indicates a compromise, how to check your phone step by step, and exactly what to do if you find something. If you want the fundamentals first, read our cybersecurity basics guide.
10 warning signs your phone may be hacked
No single sign proves a hack. Look for several happening together, especially if they started suddenly.
1. Battery drains much faster than usual
Spyware runs in the background, tracking location, messages or microphone activity. A sudden drop from a full day to a few hours, with no change in usage or battery health, is worth investigating.
2. Mobile data usage spikes
Malicious apps send stolen data to a server. Check your data usage by app in Settings. An app you barely use consuming hundreds of megabytes is a red flag.
3. The phone overheats when idle
Constant background processing generates heat. Some overheating is normal during gaming or charging, but a hot phone sitting on a desk is not.
4. Unknown apps appear
Look for apps you did not install, especially ones with generic names, no icon or no listing in the app store. On Android, also check for apps with device administrator or accessibility permissions.
5. Pop-ups and redirects in the browser
Aggressive pop-ups usually mean adware rather than a full hack, but they still need removing. If the browser opens pages on its own, treat it as a security problem.
6. Strange account activity
Password reset emails you did not request, logins from unfamiliar locations, or messages sent from your account that you did not write.
7. Friends receive messages or calls from you
If contacts get links or requests you never sent, your messaging account or SIM may be compromised. This is a common pattern in OTP and WhatsApp scams. See our guide to scam calls and OTP fraud in India for the first-hour steps.
8. Calls drop or sound strange
Some intercept malware and SIM-swap fraud affect calls and texts. Persistent call failures plus missing SMS verification codes is a serious combination.
9. The phone is slow or crashes
Malware competes for processing power. But age, low storage and too many apps cause the same symptoms, so check those first.
10. Camera or microphone indicator turns on by itself
Modern Android and iOS show a green or orange dot when the camera or mic is active. If it appears while you are not using an app that needs it, investigate immediately.
How to check your phone step by step
Step 1: Review installed apps
Open Settings and sort apps by install date. Anything you do not recognise, especially installed around the time problems started, should be removed. Be careful with apps that claim to be “system update” or “Wi-Fi booster”.
Step 2: Check device administrators (Android)
Go to Settings > Security > Device admin apps. Legitimate entries are usually Find My Device and your work profile. An unknown app with admin rights can lock your screen, wipe data or prevent uninstallation.
Step 3: Check accessibility services (Android)
Settings > Accessibility > Downloaded apps. Accessibility access lets an app read the screen, tap buttons and capture passwords. Only trusted apps such as screen readers should be there.
Step 4: Check configuration profiles (iPhone)
Settings > General > VPN & Device Management. A profile you did not install can route traffic or install certificates that intercept encrypted data. Remove anything unfamiliar.
Step 5: Review logged-in devices
For Google: myaccount.google.com > Security > Your devices. For Apple: Settings > your name > the device list. Sign out anything you do not recognise, then change your password.
Step 6: Check data usage per app
On Android: Settings > Network > Data usage. On iPhone: Settings > Cellular. Look for apps with high background usage that you rarely open.
Step 7: Run a security scan
On Android, open the Play Store, tap your profile, then Play Protect > Scan. On iPhone, there is no equivalent built-in scanner because iOS restricts app installation, but check for suspicious profiles and unusual battery or data use.
Step 8: Look for signs of rooting or jailbreaking
If you did not root or jailbreak the phone yourself, find out whether someone else did. Root access removes the security protections that stop malware from taking full control.
What to do if your phone is hacked
- Disconnect from the internet. Turn on airplane mode to stop data being sent out.
- Change passwords from a different device. Use a clean computer or tablet. Start with email, banking and social accounts.
- Enable two-factor authentication. Prefer an authenticator app or hardware key over SMS, which can be intercepted by SIM swap.
- Revoke active sessions. In each account’s security settings, sign out of all devices.
- Remove suspicious apps and profiles. If you cannot uninstall an app, boot into safe mode on Android or remove the profile on iPhone.
- Run a reputable mobile security scan. Use Play Protect or a well-known security app from the official store.
- Factory reset if the compromise is serious. Back up photos and documents first, but do not restore a full backup that may contain the malware.
- Contact your bank if banking apps, UPI or card details were exposed. Freeze cards and dispute unfamiliar transactions.
- Report it. In India, file a complaint at cybercrime.gov.in or call 1930. In the US, report to the FTC at IdentityTheft.gov and the FBI at ic3.gov.
- Replace the SIM if you suspect SIM-swap fraud, and ask your carrier to add a port-out PIN.
How to prevent it happening again
- Install apps only from the Play Store or App Store, never from links or APK sites.
- Keep Android, iOS and all apps updated. Most real-world attacks exploit patched flaws.
- Use a screen lock with a strong PIN or biometrics.
- Turn on Google Play Protect and Find My Device.
- Review app permissions every few months and remove access that does not make sense.
- Do not click links in unexpected SMS, email or WhatsApp messages, even from contacts. Our guide to phishing warning signs explains what to look for.
- Use a password manager so every account has a unique password.
- Avoid sensitive logins on public Wi-Fi, or use a trusted VPN.
- Set a SIM PIN and a carrier port-out lock.
Frequently asked questions
Can someone hack my phone without touching it?
Yes, but it is harder than films suggest. Attacks usually need you to install a malicious app, click a crafted link or connect to a compromised network. Zero-click exploits exist but are rare and typically used against high-value targets.
How do I know if my camera is being used without permission?
On both Android and iPhone, a green or orange indicator appears when the camera or microphone is active. Open the control centre or privacy dashboard to see which app used it. If it is an app you were not using, revoke its permission and uninstall it.
Does a factory reset remove spyware?
A full factory reset removes almost all malware from the phone itself. The exception is sophisticated firmware-level spyware, which is rare. Do not restore a backup that contains the malicious app, and change your account passwords afterwards.
Can a hacked phone be fixed?
In most cases, yes. Remove the malicious app or profile, change passwords, enable two-factor authentication and update the system. If the phone is rooted or the compromise keeps returning, a factory reset or replacement is the safer option.
Is my phone hacked if it is slow?
Usually not. Slow performance is far more often caused by low storage, an old battery, too many background apps or an outdated device. Check the specific signs above before assuming a hack.
