iPhone malware is rare, but not impossible
iPhones get malware far less often than Android phones because Apple controls what software can run on the device. Every app in the App Store is reviewed before it goes live, and the operating system itself is closed — meaning malware cannot install itself the way it can on other devices. That said, malware does occasionally slip through, usually hidden inside a legitimate-looking app or triggered by clicking a link in a text message or email.
You cannot run a separate malware scanner on an iPhone the way you can on a Windows computer. Instead, you look for signs that something is wrong, then take specific steps to remove the problem. The most common signs are apps crashing repeatedly, your phone running hot, the battery draining much faster than usual, or data usage spiking without explanation.
Key Takeaways
- iPhones rarely get malware because Apple reviews all App Store apps and controls what can run on the device, but it does happen.
- The most reliable sign of malware is an app that crashes repeatedly, your phone running hot, battery draining fast, or unexpected data usage spikes.
- Restart your iPhone in Safe Mode first to see if the problem goes away — this disables third-party apps and helps you identify the culprit.
- Delete any app you do not recognize or trust, then check your App Store purchase history to see what was installed without your knowledge.
- If the problem persists after deleting suspicious apps, back up your data and restore your iPhone to factory settings using a computer or iCloud.
Restart your iPhone in Safe Mode to isolate the problem
Safe Mode disables all third-party apps — meaning only Apple's built-in apps run. If your phone works normally in Safe Mode but crashes or runs hot when you restart normally, a third-party app is the problem. To enter Safe Mode, hold down the power button and either volume button together until the power-off slider appears. Drag the slider to turn off your phone. Wait 30 seconds, then hold the power button again until you see the Apple logo. Your phone will boot into Safe Mode.
Once in Safe Mode, use your phone normally for 10 to 15 minutes. Open Safari, check email, send a text. Watch for the same problems you noticed before — crashes, overheating, or unusual battery drain. If everything works fine in Safe Mode, the issue is almost certainly a third-party app. If the problem happens in Safe Mode too, the issue may be with iOS itself or a hardware problem, not malware.
Check your App Store purchase history for unfamiliar apps
Open the App Store and tap your profile icon in the top right corner. Tap Purchased, then My Purchases. Scroll through the list of every app you have ever installed on any iPhone linked to your Apple ID. Look for apps you do not recognize or do not remember downloading. Pay special attention to apps with generic names like "System Update", "Security Check", "Battery Saver", or anything that sounds like it is part of iOS itself — these are common malware disguises.
If you find an app you did not install, someone with access to your Apple ID downloaded it, or malware installed it without your knowledge. Either way, delete it immediately. Tap the app name, then tap the cloud icon with a minus sign to remove it from your account. Then go to your home screen, find the app, press and hold it, and select Remove App > Delete.
Delete suspicious apps from your home screen
Look at the apps on your home screen and in your App Library. Delete anything you do not use or do not recognize. Press and hold the app icon, then tap Remove App > Delete. You will be asked to confirm with Face ID or Touch ID. If you delete an app by mistake, you can reinstall it free from the App Store later using your purchase history.
Pay special attention to apps that ask for unusual permissions — for example, a flashlight app that wants access to your contacts, or a calculator that wants permission to use your camera. These are red flags. Even if the app is not malware, it is collecting data it should not need. Delete it and find a different one.
Clear your Safari browsing data and check your homepage
Open Settings and scroll down to Safari. Tap Clear History and Website Data. Choose All Time from the dropdown and tap Clear History and Data. This removes all browsing history, cookies, and cached files that malware may have left behind.
While you are in Safari settings, scroll down and check your Homepage and Search Engine settings. If either one has been changed to something unfamiliar, change it back. Malware often hijacks your search engine or homepage to show ads or redirect you to malicious websites. Set your search engine back to Google or your preferred choice, and set your homepage to a blank page or a site you trust.
Restore your iPhone to factory settings if the problem persists
If you have deleted suspicious apps, cleared Safari data, and the problem still happens, your best option is to restore your iPhone to factory settings. This erases everything on the device and reinstalls iOS fresh. Before you do this, back up your data. Open Settings, tap your name at the top, then iCloud > iCloud Backup. Make sure iCloud Backup is turned on, then tap Back Up Now. Wait for the backup to finish — this may take several minutes.
Once your backup is complete, go to Settings > General > Transfer or Reset > Erase All Content and Settings. You will be asked to enter your Apple ID password and confirm. Your phone will erase and restart. When it boots back up, you can restore from your backup by signing in with your Apple ID. This removes any malware that was hiding in your apps or system files.
Prevent malware from installing in the first place
Do not click links in text messages or emails from people you do not know, even if the message looks official. Malware often arrives this way. Do not jailbreak your iPhone — jailbreaking removes Apple's security controls and makes malware much easier to install. Only download apps from the official App Store, never from third-party app stores or websites.
Keep your iPhone updated. Go to Settings > General > Software Update and install updates as soon as they are available. Apple releases security patches regularly, and staying current closes the holes that malware exploits. Turn on two-factor authentication for your Apple ID so that even if someone gets your password, they cannot download apps without your approval on your phone.
Frequently Asked Questions
Can I get malware from visiting a website on Safari?
Visiting a malicious website alone will not install malware on your iPhone. However, if you click a link that prompts you to download something or install a profile, that is when malware can get in. Never tap Allow when a website asks to install a profile or certificate unless you are absolutely certain it is legitimate.
What does it mean if my iPhone keeps asking me to update?
Repeated update prompts can be a sign of malware, but usually just mean an update failed to install properly. Go to Settings > General > Software Update and try installing the update again while plugged into power and connected to Wi-Fi. If it keeps failing, back up your data and restore your iPhone.
Is it safe to use a free antivirus app from the App Store?
Most antivirus apps for iPhone do not actually scan for malware — they cannot, because Apple does not allow it. They mainly clean up junk files or manage storage. If you are concerned about malware, focus on deleting suspicious apps and restoring your phone instead. A reputable antivirus app will not hurt, but it is not a substitute for these steps.
What if I think my Apple ID was hacked?
Go to appleid.apple.com and sign in. Check Devices to see all phones and computers linked to your account. If you see devices you do not recognize, click them and select Remove from Account. Change your Apple ID password immediately. Turn on two-factor authentication if it is not already on.
Can malware survive an iPhone backup and restore?
If you restore from an iCloud backup, any malware that was in the backup will come back. If you are concerned, restore your phone as new without restoring from backup, then manually add back your photos and data from iCloud. This takes longer but ensures malware does not return.