How to Know if Your Phone Is Hacked: Signs and a Step by Step Check

Your battery dies by lunch, the phone feels warm in your pocket, and a friend asks why you sent them a strange link last night. If you have typed "how to know if my phone is hacked" into a search bar, those are exactly the kinds of clues that matter. Most slow or glitchy phones are not compromised, but a few signs deserve a closer look, and both iPhone and Android include built in tools to check. This guide covers the red flags, a step by step check for each platform, and what to do if someone really did get in.

Warning signs your phone may be hacked

No single symptom proves anything on its own. A pattern of several, especially ones that started suddenly, is what should make you act. The FTC and FCC point to signs like these:

• Battery draining faster than usual with no change in how you use the phone.
• Unexpected data use, often from an app running quietly in the background.
• The phone running hot while it is idle.
• Random restarts, or the phone turning off and on by itself.
• Pop up ads in odd places, or a browser that redirects you to sites you did not choose.
• Messages or posts you did not write showing up in your sent folder or on your social accounts.
• Someone knowing things they should not, like your exact location or who you have been texting.
• No calls or texts while your phone shows no service, which can point to SIM swapping (more on that below).

The FTC's stalkerware guide notes that spying apps sometimes hide behind dull names such as "System Service," so an app you do not remember installing is worth a second look.

The step by step check on an iPhone

Apple builds most of the tools you need into Settings. Work through these in order.

1. Look for configuration profiles. Go to Settings > General > VPN & Device Management. Apple's Personal Safety guide says that if no profiles appear, none are installed. A profile you did not add (and that is not from your school or employer) can give someone control over settings. Select it, tap Delete Profile, then restart.
2. Run Safety Check. On iOS 16 or later, open Settings > Privacy & Security > Safety Check. "Manage Sharing & Access" lets you review which people and apps can see your location, photos and other data, and remove devices connected to your Apple Account. "Emergency Reset" stops all sharing at once and walks you through changing your Apple Account password.
3. Check your iOS version under Settings > General > About, and install any pending update. Updates close the security holes that hacking tools rely on.
4. Review your app list for anything unfamiliar and delete it.
5. Consider Lockdown Mode if you could be a target. Apple describes it as an extreme protection for the very few people who, because of who they are or what they do, might be targeted by the most sophisticated digital threats. Turn it on at Settings > Privacy & Security > Lockdown Mode. It is overkill for most people and limits some features.

The step by step check on Android

Menus vary a little between Samsung, Google Pixel and other brands, but Google's own tools work the same everywhere.

1. Use Google Play Protect. Open the Play Store, tap your profile icon, then Play Protect. Google says it scans your device periodically, including apps installed from outside the Play Store. Tap the gear icon and make sure Scan apps with Play Protect is on. If it flags an app, tap the notification and choose Uninstall.
2. Check your Google Account's devices. Go to myaccount.google.com, choose Security & sign-in, then Manage all devices under Your devices. Google's device access page says to watch for a device you do not recognize, a location you were not in, or a browser you do not use. Tap any stranger and sign it out.
3. Review recent security events in the same Security & sign-in section. If you see activity that was not you, select "No, it wasn't me" and follow the prompts.
4. Go through your installed apps and remove anything you did not install yourself.
5. Install system updates from your phone's Settings app.

Check the accounts tied to your phone

A hacked phone and a hacked account often look the same from the outside. Change the passwords for your email, Apple or Google account and banking apps, starting with email since it can reset everything else. Turn on two step verification while you are there. Our guide to protecting your online accounts in 10 minutes covers the order to do this in, and a password manager makes unique passwords painless.

In Gmail, Google also suggests checking for forwarding rules and filters you did not create, since attackers use them to quietly copy your mail.

Watch for SIM swapping

If your phone suddenly loses service in an area where it normally works, call your carrier from another phone. The FCC explains that in a SIM swap, a scammer convinces your carrier they are you and moves your number to their own SIM. Once they have it, they get your texts and calls, including login codes, and can reset passwords on your financial and social accounts. Ask your carrier what protections it offers against unauthorized number transfers.

What to do if your phone was hacked

If your checks turn up something real, move in this order.

1. Stop logging in to sensitive accounts from that phone, especially banking and shopping, until it is clean. This is the FTC's first step.
2. Change passwords from a different device you trust, and turn on two factor authentication.
3. Remove the problem: delete the unknown app or profile, run Play Protect on Android, and update the software.
4. Factory reset if it keeps happening. When you set the phone up again, reinstall apps from the App Store or Play Store rather than restoring them from a backup of the infected phone, as the FTC advises.
5. Call your carrier and bank if your number was moved or you see charges you did not make.
6. Report it to the agency that matches what happened.

Where to report in the US:

• The FBI's Internet Crime Complaint Center at ic3.gov for hacking, fraud and money lost online.
• IdentityTheft.gov if someone used your information, for a personal recovery plan.
• ReportFraud.ftc.gov for scams and malware.
• The FCC's complaint center at consumercomplaints.fcc.gov for carrier and SIM swap problems.

If you think a partner or ex is tracking you

Safety comes before deleting anything. The FTC warns that removing stalkerware can alert the person who installed it. Talk first with the National Domestic Violence Hotline at 1-800-799-7233, by chat at thehotline.org, or by texting START to 88788. The FTC also says the safest option may be a new phone with accounts the other person cannot reach.

Keep it from happening again

Many phone compromises start with a click, not with movie style code breaking. A text claiming a package is stuck, a "verification" link, or a call from someone who sounds like family are common openers, and our guides on deepfake scams and fake social media accounts show what those look like now. Keep a six digit or longer passcode, install updates when they arrive, and do not let anyone hold your unlocked phone unsupervised. For more practical security help, browse our tech section.

One last check worth making a habit: once a month, open Safety Check or your Google devices list and make sure every entry is one you recognize. It takes two minutes.