What spyware is and why you should check for it

Spyware is software installed on your device without your knowledge that watches what you do — your messages, passwords, location, browsing history, photos. Unlike viruses that damage files or lock you out, spyware hides in the background and reports back to whoever installed it. You won't see it running, but it's using your battery, your data plan, and your processing power while someone else watches.

You should check for spyware if you notice your phone or computer running slowly, draining battery faster than usual, getting hot during normal use, or if you see unfamiliar apps you don't remember installing. You should also check if someone with access to your device (a partner, family member, or employer) has shown controlling behavior, or if you've been targeted by someone who might have the technical skill to install it.

The hard truth: there is no single tool that catches all spyware, and some spyware is designed specifically to hide from detection software. But checking using the methods below will catch the most common types, and will tell you whether you need to take stronger steps like wiping your device or getting professional help.

Key Takeaways

  • Start by checking your installed apps on both Android and iPhone — spyware often hides under names that look like system software or legitimate tools.
  • On Android, check Settings > Apps to look for unfamiliar programs; on iPhone, check your home screen and App Library for apps you don't recognize.
  • Run a scan with Malwarebytes or Avast (both have free versions) to catch common spyware, though no scanner catches everything.
  • If you find spyware, uninstall it immediately, change all your passwords from a different device, and consider a full factory reset if the spyware had admin access.
  • If you suspect someone installed spyware to monitor you, contact local police or a domestic violence hotline — this is a crime in most places.

How to check for spyware on Android

Start with your installed apps. Go to Settings > Apps (or Application Manager on older phones). Scroll through the full list and look for apps you don't remember installing. Spyware often uses names that sound like system software — "System Update," "Device Manager," "Google Play Services" (when you know you didn't install it), or generic-sounding names like "Update" or "Service." If you see something unfamiliar, tap it and look at the install date and the permissions it has. If an app asks for permission to access your location, messages, or camera but has no reason to need those things, that's a red flag.

Next, check your device administrator apps, which have deeper access to your phone. Go to Settings > Security > Device Admin Apps (the exact path varies by phone maker). Look at what's listed. Legitimate apps like Find My Mobile (Samsung) or Google's Find My Device should be there, but if you see unfamiliar apps with admin access, remove them immediately by tapping them and selecting "Deactivate."

Then run a malware scanner. Download Malwarebytes (free version) or Avast Mobile Security (free version) from the Google Play Store. Open the app, tap the scan button, and let it run — this usually takes 5 to 10 minutes. These scanners catch common spyware and malware, though sophisticated spyware designed to hide may not show up. If the scan finds something, the app will tell you what it found and give you the option to remove it.

How to check for spyware on iPhone

iPhone's closed system makes spyware harder to install, but it's still possible. Start by checking your home screen and your App Library (swipe to the rightmost screen). Look for apps you don't recognize. Spyware on iPhone often disguises itself as a system app or something generic. If you see something unfamiliar, tap and hold it and select "Remove App" > "Delete App."

Check your Safari browsing history and settings. Go to Settings > Safari and look at what's in your history — if you see websites you didn't visit, that's a sign something is watching your browsing. Also check Settings > Safari > Extensions to see if any browser extensions are installed that you don't recognize.

iPhone doesn't allow traditional antivirus apps the way Android does, because Apple controls what apps can access. However, you can still run a scan with Avast One (free version) or McAfee Mobile Security (free version), which scan for known malware signatures. Download from the App Store, open the app, and run a scan. These won't catch all spyware, but they'll catch the most common types.

If you suspect spyware on iPhone, the most reliable step is to back up your data (to iCloud or your computer), then go to Settings > General > Transfer or Reset > Erase All Content and Settings. This wipes the phone completely and reinstalls iOS fresh. Restore from your backup afterward — if the spyware was in your backup, it will come back, but this step removes most common spyware.

What to do if you find spyware

If you find an app you believe is spyware, uninstall it immediately. On Android, go to Settings > Apps, find the app, and tap "Uninstall." On iPhone, tap and hold the app and select "Remove App" > "Delete App." If the app won't uninstall (a sign it has admin access), go back to Settings > Security > Device Admin Apps on Android and deactivate it first, then uninstall.

After removing spyware, change your passwords — but do this from a different device (your computer, a friend's phone, or a public computer). If you change passwords on the infected device, the spyware may capture the new passwords as you type them. Change passwords for email, banking, social media, and any accounts that contain sensitive information.

Consider a factory reset if the spyware had admin access or if you're not confident you found everything. On Android, go to Settings > System > Reset Options > Erase All Data (exact wording varies by phone). On iPhone, go to Settings > General > Transfer or Reset > Erase All Content and Settings. Back up your data first if you want to keep photos or documents, but understand that a backup may contain the spyware. After the reset, restore only the files you need, not the entire backup.

Spyware installed by someone you know

If you believe someone with access to your device — a partner, family member, or employer — installed spyware to monitor you, this is a crime in most places. In the United States, unauthorized surveillance violates the Electronic Communications Privacy Act and state wiretapping laws. In the UK, it violates the Computer Misuse Act. Similar laws exist in Canada, Australia, and most other countries.

Contact your local police department and file a report. Bring your device and the evidence of spyware if possible. You can also contact a domestic violence hotline if the monitoring is part of a pattern of control — the National Domestic Violence Hotline (1-800-799-7233 in the US) can connect you with local resources and help you plan safely.

If this is happening at work, contact your HR department or an employment lawyer. Many employers have the legal right to monitor work devices, but the rules vary by location and by what the device is used for. A lawyer can tell you what's legal in your situation and what your options are.

Limits of spyware detection

No detection method catches all spyware. Commercial antivirus apps catch common, known malware. But sophisticated spyware — especially spyware designed for a specific target, or spyware that exploits a zero-day vulnerability (a flaw in the operating system that hasn't been publicly disclosed yet) — can hide from scanners. If you run a scan and find nothing, but you still notice your device behaving strangely, that doesn't mean you're safe.

If you suspect targeted spyware (someone with resources is specifically trying to monitor you), consider taking your device to a professional security firm or a local computer repair shop that specializes in security. They have tools and expertise beyond what a consumer app can do. This costs money, but it's worth it if your safety is at stake.

The most reliable protection is prevention: don't install apps from untrusted sources, don't click links in messages from people you don't know, don't give anyone else your password, and don't leave your device unattended with someone who might install something on it.

Frequently Asked Questions

Can spyware work if my phone is in airplane mode?

No. Spyware needs an internet connection to send data back to whoever installed it. Airplane mode disables all wireless connections, so spyware can't transmit. However, it can still collect data while you're offline and send it once you turn airplane mode off.

Will a factory reset remove all spyware?

A factory reset removes spyware from the operating system and apps, but if you restore from a backup that contained spyware, the spyware may come back. To be safe, restore only specific files (photos, documents) rather than a full backup, or restore nothing and reinstall your apps fresh from the app store.

Is spyware the same as a virus?

No. Viruses damage or delete files and make your device malfunction. Spyware hides and watches without breaking anything. A device can have both at the same time. Antivirus scanners look for both, but they use different detection methods.

Can my computer get spyware the same way my phone can?

Yes. On Windows, download Malwarebytes or Avast (both free) and run a full system scan. On Mac, spyware is less common but possible — download Malwarebytes for Mac and run a scan. Close all other programs before scanning, and let the scan finish completely.

What if I think my employer installed spyware on my personal phone?

This is illegal in most places if it's your personal device and you didn't consent. Contact an employment lawyer or your local labor board. If it's a work phone your employer provided, they likely have the legal right to monitor it, but the rules vary by location — a lawyer can advise you.