How to Know If Your Phone Has Been Hacked
Recognize credible warning signs, secure your accounts and avoid common phone-hacking myths.
Recognize credible warning signs, secure your accounts and avoid common phone-hacking myths. Start with the checks below and confirm the effect of each change before moving on.
Table of contents
Warning signs that deserve attention
Unexpected account-login alerts, unknown administrator profiles, unfamiliar apps, changed security settings and messages you did not send are stronger signals than ordinary battery drain alone.
Secure the phone and accounts
Use a trusted device to change the password for your primary email, enable multi-factor authentication and contact your carrier if your number loses service unexpectedly. Update the phone and remove unknown apps or profiles.
Avoid false fixes
Do not install random “hacker detector” apps or call numbers from pop-up warnings. Learn to create safer credentials in our strong-password guide.
Investigate in a safe order
First separate an account compromise from a compromised phone. An unfamiliar email login, password-reset message or sent message may mean an online account was accessed even when the device itself is clean. From a trusted device, review recent sessions for your primary email, Apple or Google account and social accounts. Capture screenshots of unknown activity before signing those sessions out.
Check the device
- Review installed apps and remove anything you do not recognize after confirming it is not a system component.
- Check device-administrator, accessibility, VPN and configuration-profile lists for unexpected entries.
- Install operating-system and app security updates from official stores.
- Review forwarding rules in email and call-forwarding settings with your carrier.
- Ask the carrier about an unexpected loss of service, which can indicate a SIM-swap attempt.
Battery drain, warmth and data use are clues, but each has ordinary causes. Look for several independent signs before concluding that the phone is hacked.
Contain serious cases
Change the primary email password first because it can reset other accounts, then enable phishing-resistant authentication or an authenticator app where available. Contact banks through official numbers if money or card data is involved. A factory reset can remove many software problems but should come after evidence is saved, accounts are secured and important files are backed up. Restore only trusted apps and avoid restoring suspicious device-management profiles. For stalking, domestic abuse or targeted surveillance, use a safe device and contact a qualified local support organization before making changes that could alert another person.