How to Tell If Your Phone Has Been Hacked: 10 Warning Signs

That weird text you didn’t send. The battery that suddenly can’t last till lunch. The data usage that doubled for no reason. If you’re wondering how to know if your phone has been hacked, you’re asking the right question — because the signs are usually there, just easy to dismiss.

Here’s the reassuring truth first: actual phone hacking is rarer than the internet makes it sound. Most ‘hacked phone’ symptoms turn out to be a buggy app or an aging battery. But real compromises do happen, usually through malicious apps, phishing links, or sketchy public Wi-Fi. Here’s how to tell the difference.

The short answer: signs your phone may be hacked include apps you didn’t install, texts or calls you didn’t make, sudden battery drain and data spikes, pop-ups outside your browser, and settings that change on their own. Check for unknown apps and profiles first, then run the cleanup steps below.

How Do I Know If My Phone Has Been Hacked? Watch for These Signs

Start with the obvious: look at your apps. On iPhone, swipe through every home screen and check Settings > General > VPN & Device Management for configuration profiles you didn’t install — that’s a classic spyware foothold. On Android, check Settings > Apps for anything you don’t recognize, especially apps with vague names like ‘System Update’ or ‘Device Health’ that you never downloaded.

Next, check your accounts. Texts or emails you didn’t send, password-reset emails you didn’t request, and logins from unfamiliar locations are red flags that someone has your credentials — which is far more common than actual device malware. Also watch for the phone behaving strangely on its own: the screen lighting up randomly, the camera or microphone indicator (the green/orange dot on iPhone, the green dot on Android) appearing when you’re not using them, or the device running hot while idle.

• Unknown apps or configuration profiles you didn’t install
• Texts, calls, or social posts you didn’t make
• Sudden battery drain, overheating, or data usage spikes
• Pop-ups appearing outside your web browser
• Camera/mic indicator lighting up unexpectedly
• Settings changing on their own (e.g., a new VPN or proxy)

The Most Common Ways Phones Actually Get Compromised

Almost nobody gets hacked by a movie-style remote attack. The real-world paths are boring: you installed a malicious app from outside the official app store, you tapped a phishing link in a text that installed a profile or stole your login, or you entered credentials on a fake site. On Android, sideloaded APKs from random websites are the number one source of malware. On iPhone, it’s usually a phishing text or a malicious configuration profile.

Public Wi-Fi is a lesser risk than it used to be (most traffic is encrypted now), but it’s still worth being careful — which is why it’s smart to know whether free public Wi-Fi at coffee shops is actually safe before you log into your bank on it. The short version: use your phone’s data or a VPN for anything sensitive.

What to Do If You Think Your Phone Is Hacked

Don’t panic — work the checklist. First, delete any apps you don’t recognize and remove unknown configuration profiles. Second, change your important passwords (email first, then banking, then everything else) from a different device you trust, and turn on two-factor authentication on your accounts everywhere it’s offered. Third, update your phone’s operating system — updates patch the exact vulnerabilities malware exploits.

If symptoms persist after that, back up your photos and important data, then do a full factory reset. That’s the scorched-earth option, and it works: wiping the phone removes virtually all consumer malware. After the reset, reinstall apps only from the official store and don’t restore from a backup made while the phone was compromised — set it up fresh for the important stuff.

How to Keep It From Happening Again

Prevention is genuinely simple, which is the good news. Only install apps from the Apple App Store or Google Play Store. Keep your OS updated — those ‘update tonight’ prompts are security patches, not annoyances. Use a password manager for your family so every account gets a unique password, because credential reuse is how one breached site becomes ten hacked accounts.

Be skeptical of urgent texts about packages, bank accounts, or prizes — that’s phishing, and it’s the delivery method for most phone compromises. And review your app permissions twice a year: does that flashlight app really need your contacts and location? Probably not. Ten minutes of permission hygiene beats ten hours of malware cleanup.

How Do I Know If My Phone Has Been Hacked? What Security Experts Check Next

If the basic checks came back clean but you’re still suspicious, dig one layer deeper. Review data usage per app over the last month — spyware has to send your data somewhere, and an app using gigabytes of background data that shouldn’t need any is a major red flag. On iPhone, check Settings > General > VPN & Device Management again for anything odd, and review which apps have access to your microphone, camera, and contacts under Privacy & Security — revoke anything questionable.

Also audit your account login sessions: Google (myaccount.google.com > Security > Your devices), Apple (appleid.apple.com > Devices), and Facebook/Instagram all show active sessions — boot anything you don’t recognize. And check your carrier account for call forwarding or SIM changes you didn’t authorize, since SIM-swapping is the attack that bypasses the phone entirely. If everything checks out but the weirdness continues, a Genius Bar or carrier store diagnostic is free and worth the trip for peace of mind.

The Bottom Line

Real phone hacking usually arrives via a bad app, a phishing link, or a rogue profile — not a remote movie-style attack. Check for unknown apps and profiles, change passwords from a clean device, enable two-factor authentication, and factory-reset if problems persist. Keep your OS updated and your app sources official, and you’ll avoid nearly all of it.

Sources: FTC guidance on hacked phones and accounts  ·  CISA mobile device security tips