Is Your Phone Hacked? 11 Real Warning Signs and How to Fix Each One
Date Published
Most "is my phone hacked" panic starts with something small and hard to explain — the battery drains faster than usual, or a friend says they got a weird text from your number. Most of the time it turns out to be nothing. But a handful of these signs are worth taking seriously, and knowing which ones actually matter (versus which ones are just an aging battery) saves you from either ignoring a real compromise or wiping a perfectly fine phone out of paranoia.
Battery drain and overheating with no obvious cause
A phone that's suddenly hot and losing charge fast while sitting idle is often just an app misbehaving in the background — but spyware and stalkerware apps also run constantly to capture location, messages, and audio, and that continuous activity shows up as exactly this pattern. Check Settings > Battery (both iOS and Android show per-app battery usage) for anything unfamiliar burning battery in the background, especially apps with generic names or no icon.
Data usage spikes you can’t account for
Spyware has to send what it collects somewhere, and that traffic shows up in your data usage stats even over Wi-Fi. On iPhone, check Settings > Cellular and scroll to see per-app data; on Android, Settings > Network & internet > Data usage. A single unfamiliar app consuming a disproportionate share of your data, especially one you don’t remember installing, is a stronger signal than battery drain alone.
Apps you don’t remember installing
This is one of the more reliable signs, especially on Android, where sideloading and third-party app stores make it easier for something to land on your phone without a clear installation prompt. Scroll through your full app list (not just your home screen — check Settings > Apps for everything installed) looking for anything you didn’t put there yourself. On iPhone this is rarer because of the App Store’s tighter control, but it can still happen via a configuration profile installed by someone with physical access to the device.
Pop-ups, redirects, and a browser that behaves strangely
Constant pop-ups, your browser homepage changing itself, or search results redirecting through unfamiliar sites usually point to adware rather than the more invasive spyware — annoying and worth removing, but generally not the same level of threat as something reading your messages. Uninstall any recently added browser extensions or apps, and if it's Chrome, check chrome://extensions for anything you don't recognize.
Texts, calls, or account activity you didn’t initiate
If contacts report getting messages from you that you never sent, or you see outgoing calls and texts in your log you don’t recognize, treat this as a serious sign rather than a minor one — it usually means either malware with SMS access or that your number has been SIM-swapped to another device entirely. Check with your carrier immediately if calls/texts are appearing that didn’t originate from your physical phone, since that points to SIM swapping rather than an app on your device.
Unusual permission grants
On both platforms, review which apps have access to your microphone, camera, location, and contacts (Settings > Privacy on iPhone, Settings > Privacy > Permission manager on Android). A flashlight app with microphone access, or a game with contacts and SMS permissions, has no legitimate reason for that access and is a red flag regardless of whether anything else seems wrong.
What to actually do if you find something
Start by deleting any app you don’t recognize or can’t justify the permissions of. Update your OS to the latest version — many spyware tools exploit vulnerabilities that get patched, and a full update can break their access outright. If you suspect stalkerware specifically (installed by someone with access to your device, like a partner or family member), be cautious about how you remove it: a sudden uninstall can alert the person monitoring you, which matters if your safety is a concern — organizations like the Coalition Against Stalkerware have specific guidance for that situation.
When a factory reset is the right call
If you've found genuine evidence of compromise — unfamiliar apps with deep permissions, unexplained account access, or SIM-swap symptoms — a full factory reset followed by restoring only your photos and contacts (not a full app backup, which can reinstall the same problem) is the most reliable fix. Change your passwords from a different, known-clean device before you do the reset, since anything malicious on the phone may have already captured what you type.
What doesn’t mean you’re hacked
An aging battery, a slow phone after a major OS update, or occasional ads in free apps are normal and don’t point to compromise on their own. The signal that actually matters is a cluster of these symptoms appearing together and suddenly, not a single one in isolation on a phone that’s otherwise a few years old.