How to tell if your phone is hacked right now

A hacked phone usually shows itself through behavior changes you'll notice before anything else: the battery drains much faster than normal, the phone gets hot during normal use, or apps crash repeatedly. You might see unfamiliar apps you didn't install, find your data usage spiking without explanation, or notice the phone is slow even after a restart. Text messages might arrive that you didn't send, or your contacts report receiving messages from you that you never typed.

The most reliable sign is when your phone does things without your input — opening apps on its own, making calls or sending texts you didn't authorize, or showing login attempts from places you've never been. If your email or social media accounts are changing passwords on their own, or you're locked out of accounts you know the password to, someone has likely gained access to your phone itself.

Not every slow phone or dead battery means you're hacked. But if you see multiple signs at once — especially unauthorized messages or account lockouts — you should assume the worst and act immediately.

Key Takeaways

  • Battery drain, unexpected heat, and repeated app crashes are the most common signs that malware or spyware is running on your phone.
  • Unauthorized text messages, calls, or social media posts from your account are a strong indicator that someone has control of your device.
  • The fastest response is to change your passwords from a different device, then restart your phone in Safe Mode to see if the strange behavior stops.
  • If you confirm you're hacked, back up your important photos and contacts to cloud storage, then perform a factory reset to remove the malware completely.
  • After a reset, restore only your photos and contacts — not your apps — and update your phone's operating system before downloading apps again.

Check your battery, heat, and data usage first

Open your phone's Settings and look at Battery or Battery Usage (the exact name varies by phone type). Look for apps you don't recognize using large amounts of power, or for the battery percentage to drop 10 to 15 percent per hour during normal use. If your phone is hot to the touch during light tasks like texting or browsing, that's a sign something is running in the background consuming resources.

Next, check your data usage in Settings under Data Usage or Mobile Data. Look at the total amount used this month and compare it to previous months. A sudden spike — especially if you haven't changed your habits — suggests malware is uploading data from your phone without your knowledge. Some phones let you tap individual apps to see their data use; unfamiliar apps using large amounts of data are a red flag.

These signs alone don't prove you're hacked, but they narrow down whether something is actually wrong or whether you're just noticing normal phone behavior for the first time.

Restart your phone in Safe Mode to isolate the problem

Safe Mode disables all third-party apps and runs only the phone's core system. If the strange behavior stops in Safe Mode, a downloaded app is causing the problem. If the behavior continues, the issue is deeper in the phone's system itself.

To enter Safe Mode on Android: press and hold the power button until the power menu appears, then press and hold "Power off" until a Safe Mode option appears. Tap it. On iPhone: there is no traditional Safe Mode, but you can restart the phone by holding the power button and volume down simultaneously until the power-off slider appears, then slide to power off. Turn it back on normally.

Once in Safe Mode, use your phone normally for 10 to 15 minutes. Watch for the same problems — battery drain, heat, unexpected messages, or app crashes. If everything works normally, restart your phone again to exit Safe Mode. The problem app is likely one you installed recently.

Look for unfamiliar apps and check your accounts

Go to Settings and find Apps or Application Manager. Scroll through the full list and look for anything you don't remember installing. Legitimate apps have recognizable names and icons; malware often disguises itself with generic names like "System Update," "Google Play Services," or "Settings." If you find something suspicious, tap it and select Uninstall. If the Uninstall button is grayed out, that's a warning sign — the app has device administrator access and is actively protecting itself.

Next, check your email and social media accounts from a different device — a computer or tablet, not the phone you suspect is hacked. Log into your email, Facebook, Instagram, or any account you use on the phone. Look at the login history or active sessions. Most accounts show you where and when you last logged in. If you see logins from cities you've never visited or devices you don't own, someone else has your password.

While you're in your accounts, check the recovery email and phone number on file. If they've been changed to something you don't recognize, change them back immediately. This is how hackers lock you out of your own accounts.

Change your passwords from a different device

Do not change passwords from the phone you suspect is hacked. If malware is running on it, the hacker will see your new password the moment you type it. Instead, use a computer, tablet, or a friend's phone.

Start with your email account, since email is the master key to everything else — password resets for other accounts go to your email. Go to your email provider's website (Gmail, Outlook, Yahoo, etc.) and change your password to something long and unique that you've never used before. Use a mix of uppercase and lowercase letters, numbers, and symbols.

Then change the passwords for any account that matters: banking, social media, work email, cloud storage. Do this one account at a time so you don't get locked out of anything. If you use the same password across multiple accounts, you need to change all of them.

Perform a factory reset if the problem persists

A factory reset erases everything on your phone and reinstalls the original operating system. It removes malware completely, but it also deletes all your apps, photos, messages, and settings. Before you do this, back up your photos and contacts to cloud storage — Google Photos for Android, iCloud for iPhone.

To back up on Android: open Google Photos, tap your profile icon, go to Photos settings, and make sure "Backup and sync" is turned on. Wait for all your photos to upload. For contacts, open the Contacts app, tap the menu, and look for an Export or Backup option. On iPhone: open Settings, tap your name, go to iCloud, and turn on Photos and Contacts. Wait for the upload to finish.

Once your photos and contacts are backed up, go to Settings, find Reset or Factory Reset (the exact location varies), and select "Erase all data" or "Reset to factory settings." The phone will restart and ask you to set it up again as if it were brand new. This process takes 10 to 30 minutes.

Restore your data and update your phone

After the reset completes, set up your phone again. When prompted to restore data, choose to restore only your photos and contacts from the cloud backup — not your apps. This is important: if you restore all your apps at once, you might restore the malware along with them.

Once your photos and contacts are restored, go to Settings and check for system updates. Tap "About phone" or "About," then look for "System update" or "Software update." Download and install any available updates. These updates patch security holes that malware exploited to get onto your phone in the first place.

After the updates finish, you can start downloading apps again — but do it slowly and only download apps you actually use. Avoid app stores other than Google Play (Android) or the App Store (iPhone), since third-party stores have less security screening.

Prevent future hacks with these habits

Keep your phone's operating system updated by checking for updates monthly. Turn on automatic updates if your phone offers that option. Never click links in text messages or emails from people you don't know, and never download files from untrusted websites. Be cautious about which apps you install — read the permissions each app requests before you tap install, and uninstall apps you no longer use.

Use a strong, unique password for every account, especially email and banking. If you can't remember multiple passwords, use a password manager like Bitwarden or 1Password. Turn on two-factor authentication for any account that offers it — this adds a second verification step that makes it much harder for hackers to get in even if they have your password.

Avoid connecting to public WiFi networks without a VPN, since public WiFi is easy for hackers to intercept. If you must use public WiFi, use only apps that require login — don't check banking or email on public networks. These habits won't make you unhackable, but they make you a harder target than most people.

Frequently Asked Questions

Can I get hacked just by visiting a website?

Yes, but it's rare on modern phones. Visiting a malicious website can expose vulnerabilities in your browser, especially if your phone's operating system is outdated. The more common route is downloading an app that looks legitimate but contains malware, or clicking a link in a text message that installs malware when you tap it.

What if I can't uninstall a suspicious app?

If the Uninstall button is grayed out, the app has device administrator access. Go to Settings, find Security or Apps, look for Device Administrator or Device Admin Apps, and revoke access for that app. Then go back to Apps and uninstall it. If you still can't uninstall it, you likely need a factory reset.

Will restarting my phone remove malware?

A simple restart won't remove malware, but it can slow it down temporarily. Malware usually starts running again the moment your phone finishes restarting. A factory reset is the only way to remove it completely, unless you can identify and uninstall the specific app causing the problem.

Is my phone hacked if I see ads popping up constantly?

Constant ads usually mean you installed an app with adware, not that your phone is hacked. Go to Apps in Settings and look for recently installed apps you don't use. Uninstall them one at a time and see if the ads stop. If ads continue after uninstalling everything suspicious, a factory reset will clear it.

Can I get hacked through text message without clicking anything?

On older Android phones, yes — a malicious text could exploit a vulnerability in the messaging app itself. On modern phones with current updates, this is extremely rare. The bigger risk is clicking a link in a text message that looks like it's from your bank or a delivery service but actually installs malware.