Your phone holds more personal data than any other device you own — emails, banking apps, photos, location history, and saved passwords. If someone compromises it, they get access to nearly everything. The good news: hacked phones almost always show symptoms. Here are the ten warning signs to watch for and exactly what to do about each one.
Malware running in the background consumes processing power. If your battery suddenly drops much faster than usual without a change in your habits, something may be working behind the scenes. Check your battery usage settings to see which apps are consuming the most power.
A phone that heats up while sitting on your desk is a red flag. Background spyware, crypto miners, or data exfiltration processes keep the CPU busy even when you are not using the device.
Spyware needs to send your data somewhere. Check your mobile data usage breakdown. If an unknown app or process is consuming gigabytes, investigate immediately.
Messages you did not send, calls you did not make, or replies from people to messages you never wrote are clear signs of compromise. Some malware uses your phone to send premium-rate SMS messages.
Scroll through your full app list. Malware sometimes installs additional apps to maintain access or generate ad revenue. Remove anything you do not recognize.
If you see pop-up ads outside of your browser, or your browser keeps redirecting to strange sites, adware or malware is likely installed. This is especially common on Android devices.
If you suddenly cannot log into email, social media, or banking apps, an attacker may have changed your credentials. Check if your email has appeared in a data breach using our Email Breach Checker — leaked passwords are the most common entry point.
Modern phones show indicator lights when the camera or microphone is in use. If you see these indicators when you are not using any app, spyware may be recording you.
A phone that was fast last week but now lags could be running malicious processes. While aging hardware slows down gradually, a sudden drop in performance is suspicious.
Check your security settings. If permissions have been granted to unknown apps, developer mode was enabled without your knowledge, or your lock screen was changed, someone may have had physical or remote access.
If you spotted multiple warning signs above, take these steps immediately:
Start with a full security audit. Run your email through our Email Breach Checker to see if your credentials are already exposed. Then run a Privacy Checkup to evaluate your overall security posture — it checks your IP exposure, DNS leaks, browser fingerprint, and more, giving you a score from A+ to F with specific steps to improve.