How to Tell If Your Phone Has Been Hacked

The word “hacked” sounds dramatic, but phone security issues are more common than most people realise — and they do not always come with obvious warning signs. Knowing what to look for can help you catch a problem early and protect yourself before things get worse.

Signs Something Might Be Wrong

No single sign is definitive proof, but several of these happening together is a strong reason to investigate further:

  • Battery draining much faster than usual — malicious software running in the background can use a lot of power
  • Phone getting hot even when you are not using it — again, background processes may be running
  • Mobile data being used up quickly — suspicious apps may be sending data without your knowledge
  • Strange messages sent from your accounts — friends tell you they received odd texts or emails from you
  • New apps you did not install — check your installed apps for anything unfamiliar
  • Phone behaving oddly — crashing, freezing, or restarting on its own more than usual

Check Which Apps Have Access to What

On both Android and iPhone, you can see exactly which apps have permission to access your camera, microphone, location, and contacts. Go to your phone’s settings and look for Privacy or App Permissions. If an app has access to things it has no reason to use — for example, a flashlight app asking for access to your contacts — that is suspicious and you should revoke the permission or remove the app entirely. Once the permission is removed, the app should no longer be able to use that access.

Check for Unfamiliar Accounts or Logins

In your email or social media account settings, look for a list of recent logins or active sessions. Many services — including Gmail, Facebook, and Instagram — show you which devices are currently logged in and where they are located. If you see a device or location you do not recognise, change your password immediately and log out all other sessions. Afterwards, only the device you are using should stay signed in.

What to Do If You Suspect a Problem

  • Change the passwords for your most important accounts — email first
  • Delete any apps you do not recognise or trust
  • Review your phone’s built-in security options. On an iPhone, Apple’s Safety Check is a built-in feature for reviewing sharing and account access. It does not scan your phone for malware. On Android, look in your phone’s security settings for its own options, as names and places vary by device.
  • Look in your phone’s settings for any configuration profiles (settings packages that can change how the phone works), device management (settings that let an organisation control parts of the phone) or device administrator entries (apps or settings given extra control over the phone) that you do not recognise. Names and places vary by device and version, so look for words such as profile, management or administrator. If you find one you do not recognise, do not remove it yourself. Get help first from the phone’s maker, a repair service, or the IT team that manages the phone if it belongs to your work or school.
  • As a last resort, a factory reset wipes the phone entirely and removes any malicious software — but make sure you have backed up your important data first. After the reset, you will need to set the phone up again.

Get help if money or accounts have been affected, or if the phone still misbehaves after you have done these checks and a factory reset. Contact your bank or card issuer if money has been taken, and your mobile provider if your phone number or accounts are affected. If the phone still misbehaves, take it to a repair service or contact the phone’s maker.

Staying Safe Going Forward

The most common way phones get compromised is through downloading apps from outside the official app stores, clicking suspicious links, or connecting to public Wi-Fi without care. Sticking to the official App Store or Google Play for downloads, being cautious about links, and keeping your phone’s software updated covers the vast majority of risks.

Last updated: October 9, 2026