Phone hacked? First aid for smartphone users

Odd activity, apps you never installed, a battery that drains by lunchtime? Here is how to tell whether your phone really is compromised – and how to stop a takeover, step by step.

Act now – these steps first
  1. Disconnect the phone (airplane mode or Wi-Fi off) to stop anything in progress.
  2. Secure your important accounts from another device: change the email password, turn on 2FA.
  3. Uninstall suspicious apps you did not install yourself.
  4. Install updates – many holes close the moment you do.

First, size it up: is it really hacked?

Plenty of “hacks” turn out to be duller causes: a full storage drive, an old battery, an aggressive ad-supported app. Real warning signs come in clusters:

  • The battery drains noticeably fast, and the phone runs warm while idle.
  • High data use you cannot explain.
  • Apps or icons you never installed.
  • Pop-ups and redirects in the browser.
  • Friends receive messages you did not write.
  • Accounts stop working or show logins from elsewhere.

These questions take you through it in the right order:

1Can you still use the phone normally?

Yes
  • Disconnect from the network, remove suspicious apps and permissions
  • Install system and app updates, run a security scan
  • Secure your important accounts from a second device you trust (password + 2FA)
No
  • From a second device you trust, change every important password
  • Call your carrier if you suspect a SIM swap
  • Factory reset the phone afterwards

2Was the phone used for banking, messaging or email?

Yes
  • Secure those accounts first - password plus 2FA, from the second device
  • Have banking access locked if you suspect misuse
  • Check email and messaging apps for hidden forwarding rules
No
  • Change the email password anyway if you used it there too

3Do you have a current backup of your data?

Yes
  • Reset the phone without hesitation and set it up clean
No
  • Save photos and contacts first, then reset the phone

Step by step

Secure the device and the accounts

  • Disconnect from the network and watch the device.
  • Secure email and other important accounts from a second device you trust (password + 2FA).
  • Remove suspicious apps and review permissions – microphone, location, accessibility services, device admin.
  • Install system and app updates.
  • Run a security scan with the built-in protection (Play Protect on Android).
  • If that does not help, factory reset – back up what matters first.
  • Check the SIM: if you suspect a SIM swap, call your carrier. See SIM swapping .

What not to do

  • Do not install “phone cleaner” or “antivirus” apps from pop-up ads – they are frequently malware themselves.
  • Do not type your new passwords into the possibly infected device. Use a second device you trust.
  • Do not leave unknown device-admin or accessibility permissions switched on.
  • Do not restore a backup from an already-infected state without checking it.

Who to contact

  • Your carrier if you suspect a SIM swap or see charges and subscriptions you did not order.
  • Your bank if banking apps or payment details are involved – see Online banking fraud .
  • The account providers (email, social media) if accounts were taken over – see Account hacked .
  • Police and IC3.gov in cases of extortion, identity misuse or financial loss.

Preserve the evidence

Before you reset, document what you saw: screenshots of unknown apps, unusual permissions, messages you did not send and login alerts. Note when it started and what you last installed or clicked. That is how you find the cause instead of repeating it.

Protecting yourself from now on

Usually phishing, not Hollywood hacking The most common cause of a “hacked” phone is not a sophisticated attack. It is a stolen password or a permission granted without a second thought. Updates, a password manager and 2FA prevent the vast majority of cases.

Frequently asked questions

How do I know my phone has been hacked?

Warning signs are a battery that suddenly drains much faster, unusually high data use, apps you did not install, pop-ups, calls or messages sent in your name, and behavior that changed overnight. One sign on its own means little – several together are suspicious.

Is deleting the app enough?

If you can pin the problem on one suspicious app, uninstalling it can be enough. If the picture is unclear or the problems continue, a factory reset is the reliable route – then secure your accounts again afterwards.

Are iPhones safer than Android phones?

Both are well protected as long as you install updates and only get apps from the official store. Genuine hacks are rare. Phishing, stolen passwords and permissions granted without thinking are far more common.

Topics: Devices, Emergency