How to Tell If Your Phone Has Been Hacked

Most phones that feel “hacked” are actually just slow, low on storage or running a misbehaving app. Real compromises do happen, though, and the signs are usually account-related: logins you didn’t make, messages you didn’t send, or settings that changed on their own. Here’s how to tell the difference and what to do if something really is wrong.

Common signs your phone may have been hacked

No single symptom proves a phone is compromised, but these deserve a closer look, especially if several happen at once:

• Account activity you didn’t do. Sign-in alerts from new locations, password-reset emails you didn’t request, or sent emails and social posts you don’t recognize.
• Apps you didn’t install. An unfamiliar icon, or an app with a generic name like “System Service” that you can’t remember adding.
• Texts or calls you didn’t make. Friends saying they got strange links from you, or charges on your phone bill for premium-rate messages.
• Pop-ups everywhere. Full-screen ads appearing outside your browser, or your browser home page changing by itself. This is more common on Android when an adware app is installed.
• Settings that changed on their own. A new VPN, a configuration profile, a different default keyboard, or an app suddenly having accessibility or device admin permissions.
• Camera or microphone indicators at odd times. Both iPhone and recent Android versions show a small coloured dot or icon in the status bar when an app is using the camera or mic.

Signs that usually aren’t a hack

Plenty of symptoms people blame on hackers have ordinary causes:

• Battery draining fast. An ageing battery, a bad signal, a new software update still indexing photos, or one app stuck running in the background is far more likely. See how to check battery health on iPhone and Android.
• Running warm. Charging, gaming, video calls and hot weather all heat a phone up.
• Slowness. Full storage and old software are the usual suspects. Our guide on why your phone is slow walks through the fixes.
• Data use spikes. Cloud photo backup, app updates and streaming can use a lot of mobile data without you noticing.

Check the obvious explanations first. If a specific app is using a surprising amount of battery or data and you don’t recognize it, that’s when to dig deeper.

How to check an iPhone

1. Update iOS. Go to Settings > General > Software Update. Updates fix security holes that attackers rely on.
2. Look for configuration profiles. Go to Settings > General > VPN & Device Management. If you see a profile you didn’t install (and it isn’t from your employer or school), remove it.
3. Review your Apple Account devices. Tap your name at the top of Settings and scroll down to the list of devices. Remove any you don’t own.
4. Check app permissions. Under Settings > Privacy & Security, look at which apps have access to your location, camera, microphone and photos.
5. Use Safety Check. On iOS 16 and later, Settings > Privacy & Security > Safety Check lets you review and reset who and what has access to your information.

iPhones only install apps from the App Store unless someone has used a work profile or, in some regions, an approved alternative app marketplace, so an unknown app is a strong red flag.

How to check an Android phone

Menu names vary between Samsung, Google Pixel and other brands, so if a path below doesn’t match, use the search bar at the top of Settings.

1. Update Android and Google Play system updates. Search Settings for “update” and install anything available.
2. Run Google Play Protect. Open the Play Store, tap your profile picture, choose Play Protect and run a scan.
3. Review your installed apps. In Settings > Apps, scroll the full list and uninstall anything you don’t recognize.
4. Check special permissions. Search Settings for “device admin” and “accessibility”. Malicious apps often ask for these because they allow wide control of the phone. Revoke access for anything you don’t trust.
5. Check where you’re signed in. Google’s Security Checkup (in your Google Account settings) shows recent security events and every device signed in to your account.

What to do if you think you’ve been hacked

1. Secure your main email first. Your email account is the key to resetting everything else. Change its password from a device you trust.
2. Change important passwords. Banking, Apple Account or Google Account, social media and shopping sites. Use a different strong password for each; a password manager makes this practical.
3. Turn on two-factor authentication. Use an authenticator app or passkeys where offered, rather than text messages alone.
4. Sign out of unknown sessions. Most major services let you see and end active logins in their security settings.
5. Remove suspicious apps, profiles and permissions using the checks above.
6. Call your bank and carrier if you see transactions or charges you didn’t make, or if your phone suddenly loses service (which can be a sign of a SIM-swap attempt). Ask your carrier about adding a PIN to your account.

If you suspect someone you know is monitoring your phone, think about your safety before removing their access, since they may notice. Apple’s Personal Safety User Guide has guidance for this situation, and local support services can help you plan.

When a factory reset makes sense

If the problem keeps coming back after you’ve removed apps and changed passwords, a factory reset is the most thorough fix. It erases everything, so back up first, and be careful about what you restore: restoring a full backup can bring a problem app back with it. Reinstalling apps one at a time from the official store is safer.

Before resetting, make sure you know your Apple Account or Google Account password. Activation Lock and Google’s Factory Reset Protection will ask for it afterwards. If you’ve lost track of it, our post on what to do if you forget your passcode explains your options.

How to keep your phone from being hacked

• Install updates promptly and replace phones that no longer get security updates.
• Only download apps from the App Store or Google Play, and read the permissions they ask for.
• Don’t tap links in unexpected texts about parcels, tax refunds or account problems. Go to the company’s site or app directly.
• Use a strong screen lock and never share your passcode.
• Avoid charging from unknown USB ports or cables; a wall charger of your own is the safer choice.
• Be careful on public Wi-Fi and stick to sites and apps that use encrypted connections.

Need help with your phone in Vancouver?

If your phone is acting strangely and you’d rather have someone look at it in person, Davie Mobile at 1717 Davie Street in the West End can help with software problems, updates and backups, and hardware issues like a worn-out battery that may be behind the symptoms. Call (672) 208-6756 or request a quote online and tell us your phone model.