How to Check If Your Android Phone Has a Virus (And Remove It)

Your phone holds photos, banking apps, messages, and passwords, so worrying about a virus is understandable.

Real Android malware is less common than scare stories suggest, especially if you install apps only from Google Play.

Still, it does happen. Sudden pop-ups, fast battery drain, overheating, and redirects are worth checking properly.

This guide shows you how to check step by step, using tools already on your phone. No paid software is needed.

Quick Answer

Run a Google Play Protect scan from Play Store > Profile > Play Protect > Scan, review unfamiliar apps in Settings > Apps, check sensitive permissions and device admin access, then restart in Safe Mode. If problems stop in Safe Mode, a third-party app you installed is the cause — uninstall it.

Signs Your Android Phone Might Have Malware

Malware rarely announces itself. Fake virus warnings are actually a common trick to scare you.

Real infections show as a pattern of small changes happening together, not one dramatic alert.

Unusual Battery Drain and Overheating

If your battery suddenly drops from full to low by lunchtime, something has changed.

Malicious apps run constantly in the background. They contact servers, show hidden ads, and use power.

Check Settings > Battery > Battery usage. An unfamiliar app at the top is a red flag.

Pop-Ups, Ads, and Browser Redirects

Ads inside a free game are normal. Ads on your home screen or over other apps are not.

The same applies if your browser opens by itself. A changed homepage or redirected searches also point to adware.

Adware may not steal passwords, but it slows your phone. It can also lead to more dangerous downloads.

Apps You Did Not Install and Data Spikes

Look carefully through your full app list. Note any app with a generic name or blank icon.

Also check data use in Settings > Network & internet > Internet on Pixel phones.

On Samsung, use Settings > Connections > Data usage. A sudden spike from a simple app is suspicious.

Strange Permissions and Poor Performance

Frequent crashes can mean low storage, not malware. The warning sign is crashes combined with other symptoms above.

Be alert if a simple app asks for odd access. A torch app should never need your contacts or messages.

How to Check If Your Phone Has a Virus

Work through these steps in order. They move from quick built-in checks to deeper tests.

You may find the problem early. If so, you may not need the later steps at all.

Step 1: Run a Google Play Protect Scan

1. Open the Google Play Store app.
2. Tap your profile picture in the top right corner.
3. Tap Play Protect to see the last scan result.
4. Tap Scan to run a fresh check right now.
5. Turn on both scan options shown on that screen.

Play Protect scans apps from Play and other sources. It can warn you about or disable harmful apps.

Google explains this protection in its Google Play Protect help guide for Android users. Keep this feature on at all times.

Step 2: Review Your Installed Apps

1. Open Settings on your phone.
2. Tap Apps, then tap See all apps on Pixel or stock Android.
3. On Samsung One UI, go to Settings > Apps directly.
4. Scroll through the full list, not just your home screen.
5. Tap any unfamiliar app to see its install date, data use, and permissions.

Malicious apps often hide their home screen icon. The full Settings list is harder for them to hide from.

Write down suspicious names before removing anything. That helps if more than one app is involved.

Step 3: Check App Permissions

1. Go to Settings > Security & privacy > Privacy > Permission manager on Pixel.
2. On Samsung, go to Settings > Security and privacy > Permission manager.
3. Open Location, Contacts, SMS, Phone, Camera, and Microphone one by one.
4. Tap any app that should not have that access.
5. Select Don’t allow to revoke the permission immediately.

Permissions reveal what an app really does. A game rarely needs SMS access to work.

Review this screen every few months. It takes only a few minutes and prevents quiet misuse.

Step 4: Check Device Admin and Accessibility

1. Go to Settings > Security & privacy > More security settings > Device admin apps.
2. Review every active app in the list carefully.
3. Turn off admin access for anything you do not recognise or trust.
4. Go to Settings > Accessibility > Installed apps.
5. Turn off accessibility access for any unfamiliar app.

Admin and accessibility access are powerful. They let an app control the screen and block uninstalling.

Only Find My Device or a known work app should normally have admin rights. Anything else needs a clear reason.

Step 5: Test Your Phone in Safe Mode

1. Press and hold the power button.
2. Press and hold Power off on the screen.
3. Tap OK when Reboot to safe mode appears.
4. Use your phone normally for a while in Safe Mode.
5. Restart normally to leave Safe Mode when finished.

Safe Mode runs only pre-installed apps. Third-party apps are paused completely.

If pop-ups and drain stop in Safe Mode, an installed app is responsible. That is a very useful result.

How to Remove a Suspicious App Safely

Remove a suspect app properly. Simply revoking one permission is rarely enough.

Follow this order so the uninstall button is not blocked:

1. Turn off its device admin access first, if it has any.
2. Go to Settings > Apps and tap the suspicious app.
3. Tap Uninstall and confirm.
4. If Uninstall is greyed out, tap Force stop, then Disable, then clear its storage.
5. Restart your phone and run another Play Protect scan.

Watch battery and data use for a day after removal. Most problems should improve quickly.

If behaviour returns, repeat Safe Mode. Sometimes two unwanted apps were installed together.

Change important passwords if banking or email may have been exposed. Do this from a clean device if possible.

As a last resort, back up photos and files, then factory reset. On Pixel use Settings > System > Reset options > Erase all data.

On Samsung use Settings > General management > Reset. Afterwards, reinstall apps manually from Play only.

For more clear guides like this, explore Network Ustad for practical Android and smartphone tutorials you can follow at your own pace.

Common Mistakes and Tips to Stay Protected

Never tap a pop-up that says you are infected and must call a number. Real Android warnings do not work that way.

Close the browser tab instead. Then clear that browser’s cache from Settings > Apps.

Do not install antivirus apps from ads or unknown websites. If you want one, get a well-known app from Play only.

Run only one security scanner at a time. Several scanners together can slow your phone and cause false alarms.

Avoid APK files from forums and message links. Free versions of paid apps are a common malware route.

Keep your phone updated. Use Settings > System > System update, or Settings > Software update on Samsung.

Conclusion

Checking for a virus is mostly about looking in the right places. Scan with Play Protect, review apps and permissions, and check admin access.

Safe Mode then confirms whether a third-party app is to blame. Most strange behaviour is a bad app or adware, not a serious infection.

Remove the culprit, tighten permissions, and keep software updated. That calm, step-by-step approach protects your phone far better than any scare pop-up.

Frequently Asked Questions

Can an Android phone get a virus from a website?

Visiting a site rarely installs malware by itself. A malicious site can trick you into downloading an APK or allowing spam notifications. Clear browser data and check notification permissions if pop-ups start after a visit.

Does Android need a separate antivirus app?

For most people, no. Play Protect, regular updates, and careful installing are enough. A reputable app from Google Play can add extra tools, but it is optional and should never come from a pop-up.

How can I tell a real warning from a fake warning?

A real finding appears in Play Store or Settings and names the app. A fake warning appears in a browser, uses timers and urgent language, and shows a phone number. Treat anything with a timer as a scam.

Will a factory reset remove all malware?

In almost all everyday cases, yes, because it erases installed apps and data. Back up first, then reinstall apps one by one from Play. Restoring everything automatically can bring the harmful app back.

How often should I scan my phone?

Play Protect scans automatically. Run a manual scan monthly, after installing new apps, or whenever behaviour changes. Each scan takes less than a minute.