How to Check If Your Phone Has Spyware Installed: A Step-by-Step Guide

Your phone knows more about you than any other device you own — your messages, photos, banking, location, and private conversations all pass through it. So the suspicion that someone has planted spyware on it is genuinely frightening, and it deserves a calm, methodical response, not panic.

Spyware ranges from stalkerware installed by a controlling partner or acquaintance, to malicious apps disguised as games, utilities, or system updates. Both types try to stay invisible while sending your data to someone else.

This guide shows you the warning signs that actually matter, a step-by-step check for Android and iPhone, and the safest way to remove spyware without tipping off whoever installed it before you are ready.

Quick Answer

Check for unexplained battery drain, data use, and unfamiliar apps or device-admin permissions. Review app lists, accessibility services, and configuration profiles carefully.

On Android, run a reputable security scan and audit permissions. On iPhone, check for unknown profiles and sharing settings. If in doubt, back up photos and contacts, then factory reset and change passwords from a safe device.

Warning Signs That Are Worth Taking Seriously

No single symptom proves spyware — ageing batteries and buggy updates cause many of the same problems. Concern grows when several signs appear together, especially after someone else had physical access to your unlocked phone.

Watch for battery life collapsing without a change in your habits, the phone running hot while idle, or mobile data usage climbing even though you are mostly on Wi-Fi. These suggest something is recording, uploading, or tracking in the background.

Other clues include the screen lighting up on its own, strange noises or echoes during calls, apps you do not remember installing, and settings you did not change — such as accessibility features switched on. Delayed shutdowns and a camera or microphone indicator appearing when no app is in use also deserve investigation.

Trust context too. If a partner, ex, or colleague seems to know private details they could only learn from your phone — locations, messages, plans — treat that as a serious sign in itself, even before you find technical proof.

Safety First: Think Before You Delete Anything

This step matters most for people who suspect someone they know. Removing spyware immediately tells the person monitoring you that you have found it, which can escalate risk in controlling or abusive situations.

If that could be you, pause before changing anything. Use a safe device belonging to a trusted friend, library, or support service to seek advice first. In the UK and US, domestic abuse helplines can help you plan safely, including around technology.

Wherever possible, change important passwords from a different, clean device — never from the phone you suspect — and turn on two-factor authentication that does not rely solely on texts to that phone.

How to Check an Android Phone for Spyware

Android spyware usually needs powerful permissions to work. Your job is to audit exactly where those powers have been granted.

1. Open Settings, then Apps, then See All Apps. Sort through the full list, including system apps via the menu, and note anything you do not recognise.
2. Search the web for unfamiliar app names from a different device before touching them; some odd names are legitimate system components.
3. Go to Settings, Security, then Device Admin Apps. Remove admin rights from anything that is not your genuine security or work app — stalkerware often hides here to resist deletion.
4. Open Settings, Accessibility, then Installed Apps. Spyware abuses accessibility to read screens and log keystrokes, so revoke access from anything unexpected.
5. Check Settings, Apps, Special App Access, then Install Unknown Apps. Note which apps can install software from outside the Play Store, a common spyware delivery route.
6. Review notification access and display-over-other-apps permissions, both of which monitoring tools prize.
7. Run a scan with a reputable mobile security app installed fresh from the Play Store, then follow its removal guidance.
8. Check Settings, Battery and Data Usage for apps consuming resources out of proportion to your use of them.

Google’s own Android help on protecting your device from harmful apps explains how Play Protect works and how to confirm it is switched on — keep it enabled permanently.

How to Check an iPhone for Spyware

iPhones are harder to infect because of Apple’s app controls, but they are not immune. The realistic risks are malicious configuration profiles, a jailbroken device, someone knowing your Apple ID password, or physical access used to enable sharing.

1. Open Settings, General, then VPN and Device Management. Remove any configuration profile you or your employer did not deliberately install — this is the top thing to check.
2. Confirm the phone is not jailbroken by looking for unfamiliar apps such as Cydia and by checking whether unofficial app stores are present.
3. Go to Settings, tap your name, and review the list of devices signed into your Apple ID. Remove anything you do not recognise.
4. Check Settings, Privacy and Security, then Location Services and Safety Check. Safety Check lets you quickly review and reset who and what you are sharing with.
5. Review Family Sharing members and shared albums, calendars, and location sharing in Find My.
6. Look for unknown calendar invitations or subscribed calendars, a known trick for spamming and tracking engagement.
7. Keep iOS fully updated; Apple patches spyware exploits in security updates, sometimes urgently.

Apple documents these tools on its Personal Safety User Guide on Apple Support, which is written specifically for people worried someone is accessing their devices or accounts.

If You Find Spyware: Removal That Actually Works

If a scan or audit confirms monitoring software, a factory reset is the most reliable cure. Deleting one suspicious app often leaves hidden companions behind.

1. From a safe device, change passwords for email, banking, Apple or Google, and social accounts, in that order.
2. Back up only photos, contacts, and documents — not a full system backup, which could restore the spyware.
3. Perform a factory reset through Settings, then set the phone up as new rather than restoring an old backup.
4. Reinstall apps one by one from the official store only, and skip anything you cannot identify or no longer use.
5. Add a strong new passcode the other person cannot guess — avoid birthdays, anniversaries, and patterns they may have watched you enter.
6. Review and tighten location sharing, account recovery options, and two-factor authentication across your main accounts.

Our broader NetworkUstad mobile security guides walk through the post-reset hardening in more depth, including securing the accounts spyware most commonly compromises.

How Spyware Gets In — So It Never Happens Again

Most consumer spyware needs physical access to an unlocked phone for several minutes, or tricks you into installing it. Truly remote infections of up-to-date phones are rare and usually target high-profile individuals.

Protect yourself with a long passcode only you know, biometric unlock that you can quickly disable when needed, and a firm rule against lending your unlocked phone. Never install apps sent as file links, however convincing the message, and treat urgent prompts to install a profile or update outside the official store as a red flag.

Keep the operating system and apps updated, review permissions every few months, and audit your Apple or Google account’s signed-in devices at the same time. Prevention is unglamorous, but it works.

Common Mistakes to Avoid

The costliest mistake is confronting a suspected installer or wiping the phone before making a safety plan, where personal safety is involved. Get support and secure your accounts from a clean device first.

A second mistake is restoring a full backup after a reset. If the backup was taken while spyware was present, you may simply reinstall the problem you just removed.

People also download so-called spyware detector apps from random websites. Many are scams or spyware themselves. Use only well-known security tools from the official app stores.

Finally, do not ignore account compromise while focusing only on the handset. Changing the phone without changing a known Apple ID or Google password leaves the door wide open.

Conclusion

Checking your phone for spyware is mostly patient auditing: unfamiliar apps, device admin rights, accessibility access, and configuration profiles tell the real story, backed up by battery and data clues.

If you find something, secure your accounts from a safe device, reset the phone, and rebuild it cleanly with a passcode only you know. If someone close to you may be responsible, put your personal safety plan ahead of the technical clean-up, every time.

A well-updated phone with tight permissions is a hard target. A few careful checks today can give you back the confidence that your private life is private again.

Frequently Asked Questions

Can spyware be installed on my phone remotely?

For most people, no. Consumer stalkerware almost always requires physical access to the unlocked phone. Sophisticated remote spyware exists but is rare, expensive, and usually aimed at journalists, officials, and executives.

Does a factory reset definitely remove spyware?

A reset to factory settings, set up as new without restoring an old backup, removes virtually all consumer spyware. Secure your accounts afterwards, or the person can simply walk back in through a known password.

Will antivirus apps detect stalkerware?

Reputable mobile security apps detect much known stalkerware, though tools that were deliberately installed and given admin or accessibility rights can be harder to spot. That is why the manual permission audit in this guide matters alongside any scan.

What should I do if my partner installed it?

Prioritise your safety over the phone. Contact a domestic abuse support service from a safe device for tailored advice before removing anything, because sudden removal can increase risk in controlling relationships.

Can I check if someone is tracking me through my account instead?

Yes. Review signed-in devices, location sharing, and Find My or Google Timeline sharing in your Apple or Google account. Account-level access is actually more common than spyware apps and is fixed by changing the password and enabling two-factor authentication.