How to tell if your iPhone has spyware

Spyware on an iPhone usually shows itself through battery drain, unexpected data use, or apps that crash or behave strangely. Open Settings > General > iPhone Storage to see which apps are taking up the most space — spyware often hides as a legitimate-looking app. Check Settings > Cellular to see which apps have used data in the background; if an app you rarely use has consumed gigabytes, that is a red flag.

Look at your phone bill for unexpected charges, especially subscriptions you do not recognize. Spyware often installs premium services that bill monthly. If your phone is hot to the touch when you are not using it, or if Siri activates on its own, those are signs something is running in the background without your knowledge.

Check your email and social media accounts for login activity from places you have never been. If someone has installed spyware, they may have also changed your passwords or set up forwarding rules. Visit your Apple ID account page at appleid.apple.com and scroll to "Devices" — if you see a device you do not own, someone may have access to your account.

Key Takeaways

  • Battery drain, unexpected data use, and apps that crash frequently are the most common signs of spyware on an iPhone.
  • Check Settings > Cellular and Settings > General > iPhone Storage to see which apps are consuming resources in the background.
  • Review your Apple ID account at appleid.apple.com for unfamiliar devices or login activity from unknown locations.
  • Restarting your iPhone in Safe Mode and uninstalling unfamiliar apps is the first step to removing spyware.
  • If spyware persists after uninstalling apps, backing up to iCloud and restoring your iPhone to factory settings is the most reliable removal method.

Restart your iPhone in Safe Mode to identify the problem

Safe Mode prevents third-party apps from running, which lets you see whether the problem is caused by spyware or by a legitimate app behaving badly. On an iPhone with Face ID (iPhone X and newer), press and hold the side button and either volume button until the power-off slider appears. Release the buttons, then press and hold the side button again until you see "Slide to Power Off." Slide to power off, wait 30 seconds, then turn the phone back on while holding the volume-up button until you see the lock screen.

On an iPhone with a Home button (iPhone 8 and earlier), press and hold the top (or side) button until the power-off slider appears. Slide to power off, wait 30 seconds, then turn the phone back on while holding the Home button until you see the lock screen.

Once in Safe Mode, your phone will say "Safe Mode" at the bottom of the lock screen. Use your phone normally for a few hours. If the battery drain, data use, or crashes stop, the problem is a third-party app. If the problem continues, the spyware may be deeper in the system.

Uninstall unfamiliar apps and check your settings

Go through your home screen and App Library (swipe to the rightmost page) and look for apps you do not remember downloading. Spyware often disguises itself as a system app, a calculator, a flashlight, or a weather app. If you see an app with a generic name that you did not install, press and hold it, tap "Remove App," then tap "Delete App."

Check Settings > General > VPN & Device Management. If you see a VPN or Mobile Device Management profile you did not set up, tap it and select "Delete." Spyware sometimes installs a fake profile to intercept your traffic or prevent you from removing it.

Go to Settings > Passwords & Security > Password Options and look for any email addresses you do not recognize. If someone has set up a recovery email on your account, remove it. Then go to Settings > [Your Name] > Password & Security and review which apps have permission to access your location, contacts, photos, and microphone — remove permissions from apps that do not need them.

Back up your data and restore your iPhone

If spyware persists after removing apps and profiles, the most reliable way to remove it is to restore your iPhone to factory settings. Before you do, back up your data to iCloud so you can restore it afterward. Go to Settings > [Your Name] > iCloud and tap "iCloud Backup." Make sure it is turned on, then tap "Back Up Now" and wait for the backup to finish.

Once the backup is complete, go to Settings > General > Transfer or Reset > Erase All Content and Settings. Your phone will ask for your Apple ID password — enter it. The phone will erase itself and restart. When it boots up, you will see the setup screen. Tap "Restore from iCloud Backup," sign in with your Apple ID, and choose the backup you just created.

Your apps, photos, messages, and settings will restore, but any spyware that was installed will be gone. This process takes 30 minutes to an hour depending on how much data you have.

Prevent spyware from being installed in the first place

Most spyware on iPhone gets installed when someone tricks you into clicking a malicious link in a text message, email, or social media post. Do not click links from people you do not know, and be suspicious of links in messages that create urgency ("Your account has been locked" or "Confirm your payment now").

Only download apps from the App Store. Apps on the App Store are reviewed by Apple before they are published, which makes them much safer than apps from third-party sources. If you see an app that seems too good to be true — a free version of an expensive app, for example — it probably is.

Turn on two-factor authentication for your Apple ID. Go to Settings > [Your Name] > Password & Security > Two-Factor Authentication and make sure it is on. This prevents someone from accessing your account even if they have your password. Keep your iPhone updated by going to Settings > General > Software Update and installing updates as soon as they are available — updates patch security holes that spyware exploits.

What to do if you think someone is monitoring you

If you believe spyware was installed by someone who has physical access to your phone or your Apple ID password, change your Apple ID password immediately. Go to appleid.apple.com, sign in, and tap "Password & Security" > "Change Password." Use a password that is at least 16 characters long and includes uppercase letters, lowercase letters, numbers, and symbols.

Sign out of your Apple ID on all devices. Go to Settings > [Your Name] > Sign Out, enter your Apple ID password, and choose what data to keep on your iPhone. Then go to appleid.apple.com, sign in with your new password, and review "Devices" to see all the places you are signed in. Remove any devices you do not recognize.

If you believe someone has physical access to your phone, consider changing your passcode as well. Go to Settings > Face ID & Passcode (or Touch ID & Passcode on older iPhones), tap "Change Passcode," and enter a new six-digit code or a longer alphanumeric code.

Frequently Asked Questions

Can spyware on an iPhone read my messages and emails?

Spyware that has access to your Apple ID can read your iMessages, emails, and notes through iCloud. Spyware that runs as an app can only read messages and emails if you open those apps while the spyware is running. If someone has your Apple ID password, they can see everything synced to iCloud from any device, so changing your password is the first step.

Will restarting my iPhone remove spyware?

A normal restart will not remove spyware, but it may temporarily stop it from running. Spyware will start again the next time you unlock your phone. Safe Mode can help you identify whether an app is causing the problem, but removing the app or restoring your phone is the only way to fully remove spyware.

Is my iPhone definitely infected if the battery drains fast?

Fast battery drain has many causes — old battery, too many background app refreshes, high screen brightness, or a buggy app. Check Settings > Battery to see which apps have used the most battery in the last 24 hours. If one app is using far more than the others, uninstall it and see if the drain stops. If the drain continues across multiple apps, spyware is less likely than a hardware problem.

Can I remove spyware without erasing my iPhone?

If the spyware is a regular app, uninstalling it will remove it. If it is installed as a device management profile, removing the profile will remove it. If it has deeper access to your system, restoring from a backup may not work because the backup could contain the spyware. Factory reset is the most reliable way to be certain it is gone.

What if I do not know my Apple ID password?

Go to iforgot.apple.com and follow the steps to reset your password. You will need access to the email address or phone number associated with your Apple ID. If you do not have access to either, you may need to contact Apple Support or visit an Apple Store with proof of purchase to regain access to your account.