Can you check to see if your phone is hacked?
How to check if your phone is hacked fast
how to check if your phone is hacked helps identify hidden tracking, malware, and unauthorized access before personal data spreads further. Strange behavior on your device often signals compromised security or unsafe apps. Learning the warning signs and checking key settings reduces privacy risks and protects accounts, messages, and stored payment information from ongoing exposure.
The Most Common Signs of a Phone Hack
Wondering, is my phone hacked? Theres no single test, but several red flags usually appear together. A hacked phone typically shows signs like sudden battery drain, overheating when idle, unexpected data usage spikes, or apps you dont remember installing.
Rapid Battery Drain and Overheating
Spyware runs continuously in the background, recording your activity and transmitting data. This constant processing consumes battery faster than usual and often causes the phone to feel warm even when youre not using it.(reference:0)(reference:1) If your phone used to last all day but now dies by midday with the same usage patterns, investigate further.
Check your battery settings. On iPhone, go to Settings > Battery to see which apps are consuming the most energy. On Android, go to Settings > Battery > Battery Usage. Look for unfamiliar apps appearing at the top of the list. Thats often the culprit.
Unexplained Data Usage Spikes
Malware needs to send stolen data somewhere, and that requires bandwidth. A sudden jump in cellular or Wi-Fi consumption, especially when your habits havent changed, is a measurable red flag.(reference:2) Spy apps often use your cellular network to transmit collected data, leading to unexpected increases on your phone bill.(reference:3)
Check your data usage in Settings. On iPhone, go to Settings > Mobile Service and review usage per app. On Android, go to Settings > Network & Internet > SIMs > App data usage. If an app you dont recognize is sending or receiving large amounts of data in the background, thats suspicious.
Unfamiliar Apps, Pop-Ups, and Strange Behavior
A hacked phone works for the attacker, and this activity often leaves visible traces.(reference:4) Unfamiliar apps you didnt install are major red flags. On Android, go to Settings > Apps and sort by Install Date to see whats been added recently.(reference:5) On iPhone, go to Settings > General > iPhone Storage and review the list for anything suspicious.(reference:6)
Pop-up ads appearing even when youre not browsing strongly suggest adware. Unexpected restarts, slow app launches, frequent crashes, or your phone making calls or sending messages on its own are also common signs my phone is hacked.(reference:7)(reference:8)
Strange Account Activity and Sent Messages
The first signs of compromise often appear in your online accounts. Friends or family may report strange messages or texts from your number containing suspicious links.(reference:9) You might also see unfamiliar calls or texts in your logs, sudden account lockouts, or password reset prompts you didnt request.(reference:10)
Check your emails sent folder for messages you didnt write. If you see login attempts from unknown locations or receive two-factor authentication codes you didnt request, someone is likely trying to take over your accounts.(reference:11)(reference:12)
How to Check Your Phone for Signs of a Hack
If youve noticed any of the warning signs above, knowing how to check if your phone is hacked systematically is essential. Heres how to check your phone on both Android and iPhone.
Check Call Forwarding with USSD Codes
Using codes to check if phone is hacked is another method. USSD codes are short number sequences you can dial to check if your calls are being secretly redirected. While no single code can confirm your phone is hacked, these codes can reveal call forwarding that might be set up by malware or social engineering.(reference:13)
Open your Phone app and enter these codes: Dial #21to check for unconditional call forwarding - if enabled, all your calls and texts are being redirected to another number.(reference:14) Dial #67to check for conditional forwarding (when youre busy or dont answer).(reference:15) Dial ##002to disable all forwarding immediately.(reference:16)(reference:17)
If any code shows a number you dont recognize, someone may be intercepting your communications. Disable forwarding immediately using ##002#, then change your passwords.
Run a Malware Scan (Android and iPhone)
On Android, Google Play Protect scans all apps on your device daily, regardless of where they were downloaded.(reference:18) Open the Play Store, tap your profile picture, select Play Protect, and tap Scan. This helps you check for malware on phone seamlessly.
On iPhone, iOS doesnt have a built-in malware scanner like Android. Instead, check for configuration profiles that could give hackers control. Go to Settings > General > VPN & Device Management. If you see any profiles you dont recognize, your iPhone might be managed externally, and this serves as your primary iphone hack check settings.(reference:19)(reference:20)
Also use Apples Safety Check feature: Go to Settings > Privacy & Security > Safety Check, then tap Manage Sharing & Access. This shows you what youre sharing with whom and allows you to revoke suspicious permissions.(reference:21)
Review App Permissions and Linked Devices
On both platforms, check which apps have access to sensitive features. On iPhone, go to Settings > Privacy & Security > App Privacy Report to see which apps accessed your location, microphone, or camera and which domains they contacted.(reference:22)
On Android, go to Settings > Apps and review permissions for each app. Pay special attention to apps requesting microphone, camera, location, or SMS access that dont need them.
Also check for unfamiliar devices linked to your accounts. On iPhone, go to Settings > (Your Name) and review the list of devices. Remove anything you dont recognize.(reference:23) On Android, check your Google Account security settings at myaccount.google.com for unfamiliar devices.
Comparison: Android vs iPhone Security Vulnerabilities
Both platforms face security threats, but their vulnerabilities differ significantly.
Android vs. iPhone: Security Risk Comparison
When it comes to phone hacking risks, the platform matters. Here's how Android and iPhone differ in vulnerability and protection.
Android
- Full USSD code access works reliably across most Android devices for checking call forwarding and device info.
- Google Play Protect scans apps daily but can be evaded. A 2026 framework evaded detection for 9+ days on stock Android.(reference:27)
- Android faces significantly more malware threats. Large-scale Facebook-account-stealing malware campaigns affecting hundreds of thousands of devices have been reported in prior years.
- Allows sideloading apps from third-party sources, which significantly increases malware risk. Hundreds of malicious apps have been identified on the Google Play Store, resulting in millions of downloads.
iPhone
- USSD codes work but may vary by carrier. Use 3001#12345for field test mode on iPhones.(reference:31)
- Stronger default protections but can be compromised via configuration profiles. Many iPhones remain exposed to known vulnerabilities due to delayed updates.
- iPhones face fewer widespread malware attacks but are not immune. A powerful iPhone-hacking technique called DarkSword can take over devices running iOS 18.(reference:28)
- Restricted to official App Store unless jailbroken, reducing malware risk. However, a significant portion of iPhone users often delay downloading the latest iOS updates, leaving them vulnerable.
Android faces higher malware volume due to sideloading and open-source nature, but iPhone users aren't immune - delayed updates and sophisticated zero-click attacks pose real risks. Both platforms require active security management. Regular updates are the single most effective protection on either platform.How Sarah Discovered Call Forwarding on Her iPhone
Sarah, a 34-year-old project manager from Chicago, noticed her phone bill had doubled for three consecutive months. She assumed it was a carrier error until her bank called about unusual login attempts from a device she didn't recognize.
She tried everything - changing passwords, running antivirus scans, even checking her iPhone for unfamiliar apps. Nothing showed up. The phone worked normally, no pop-ups, no strange behavior.
At 2 AM one night, she remembered reading about USSD codes. She dialed #21and was shocked to see her calls and texts were being unconditionally forwarded to a number in another state.
After disabling forwarding with ##002#, changing all her passwords, and updating her iPhone to the latest iOS version, the suspicious activity stopped. The hacker had been intercepting her 2FA codes through call forwarding for over a month.
Mark's Android: A Battery Drain That Took Weeks to Solve
Mark, a 28-year-old Android user from Austin, Texas, noticed his phone battery dropping from 100% to 15% by 2 PM. His phone would get uncomfortably warm in his pocket, even when he wasn't using it.
He checked battery usage and found nothing unusual. He uninstalled several recently downloaded apps, but the problem persisted. The heat was the real clue - his phone felt like it was working hard even while idle.
Finally, he ran a full Google Play Protect scan which flagged a QR code scanner app he'd downloaded three weeks earlier. The app had 100,000 downloads and good reviews, but Play Protect detected it was a banking trojan running continuous background processes.
After uninstalling the app, running a security scan, and factory resetting his phone just to be safe, his battery life returned to normal. Mark learned that popular apps with many downloads can still be malicious, and that unusual heat combined with battery drain is a critical warning sign.
Questions on Same Topic
Can I check if my phone is hacked using a code?
No single USSD code can definitively confirm a phone hack. However, dialing #21or #67can reveal if your calls or texts are being secretly forwarded to another number, which is a common hacking technique.(reference:32)(reference:33) If you see unfamiliar forwarding numbers, dial ##002to disable them immediately.
Does Google Play Protect detect all malware on my Android phone?
Google Play Protect scans all apps on your device daily, but it's not foolproof. Some malware frameworks and droppers have been observed evading initial Play Protect detection for periods of days on stock Android [6] devices.
Will a factory reset remove a hacker from my iPhone or Android?
Yes, a factory reset (Erase All Content and Settings) removes all apps, data, and settings - including most malware. Back up only essential data (not apps) before resetting, as malware can sometimes hide in backups.(reference:35) After resetting, restore from a clean backup or set up as new, then immediately update your operating system.
Why is my phone hot even when I'm not using it?
Spyware and malware often run continuous background processes that require processing power. If your phone feels warm while idle, especially if combined with rapid battery drain, it could indicate hidden malicious activity.(reference:36) Check your battery usage settings for unfamiliar apps consuming energy.
What should I do first if I think my phone is hacked?
Disconnect from the internet (turn on Airplane Mode) to stop data exfiltration.(reference:37) Then change passwords for your email, banking, and social media accounts using a different device. Run a security scan, check for unfamiliar apps, and update your operating system immediately.(reference:38)
Overall View
Battery drain + heat = investigate immediatelyIf your phone consistently drains faster than usual and feels warm when idle, malware running background processes is a likely cause. Check battery usage settings for unfamiliar apps at the top of the list.
USSD codes reveal hidden call forwardingDialing #21and #67can show if your calls or texts are being secretly redirected. Dial ##002to disable all forwarding if you spot anything suspicious.
Android and iPhone face different but real risksAndroid malware transactions increased 67% year-over-year, while iPhones face sophisticated zero-click attacks and delayed updates leaving over 200 million devices exposed.(reference:39)(reference:40) Both require active security management.
Regular updates are your best defenseMost successful attacks exploit known vulnerabilities that have already been patched. Install operating system updates as soon as they're available - delaying leaves you exposed.
Factory reset removes almost everythingIf you confirm a hack and can't remove the malware manually, back up only essential data (not apps) and perform a factory reset. This wipes all software, including most malware.
Reference Materials
- [6] Redsecuretech - A 2026 framework evaded Play Protect detection for 9+ days on stock Android.
- What are signs that my phone is being hacked?
- What are the symptoms if your phone is hacked?
- Does Android have a builtin virus cleaner?
- How do I check if my phone has a virus?
- What to do if your phone has been infected by a virus?
- How do I clear all viruses from my phone?
- Can I run a test to see if my phone is hacked on my iPhone?
- How to get rid of fake virus warning on phone?
- How do I know if my phone is being monitored?
- Is the virus warning on my phone real?
Feedback on answer:
Thank you for your feedback! Your input is very important in helping us improve answers in the future.