What to do if your phone has a virus
If your phone is running slowly, showing ads you didn't tap, draining battery fast, or opening apps on its own, it may have picked up malware. The fastest way to remove it is to restart your phone in Safe Mode, then uninstall the app that caused the problem. If you can't identify which app is the culprit, a factory reset will clear everything — but you'll lose your photos, messages, and other data unless you back them up first.
Most phone viruses come from apps downloaded outside the official store. Android phones are more vulnerable than iPhones because Android lets you install from anywhere, while iPhones only install from the App Store. Either way, the steps below will get your phone working again.
Key Takeaways
- Restart your phone in Safe Mode first — this disables third-party apps and often stops the malware from running so you can see which app is the problem.
- Uninstall any unfamiliar apps you don't remember downloading, especially ones with generic names or that ask for unusual permissions.
- If you can't find the bad app, a factory reset will remove everything, but back up your photos and important data to cloud storage before you do it.
- After removing the virus, change your passwords on a different device, because malware can steal login information.
- Download apps only from Google Play Store on Android or the App Store on iPhone to reduce the risk of infection in the future.
How to restart your phone in Safe Mode on Android
Safe Mode disables all third-party apps — the ones you installed yourself — while keeping the phone's built-in functions working. This lets you see whether the problem stops, which tells you the virus is in one of your installed apps. To enter Safe Mode on most Android phones, press and hold the power button until the power menu appears, then press and hold "Power off" until a "Safe Mode" option shows up. Tap it and wait for your phone to restart.
Once you're in Safe Mode, your phone will feel slower and some apps won't work — that's normal. Open your Settings, go to Apps or Application Manager, and look through the list for anything you don't recognize or don't remember installing. Common culprits have names like "System Update," "Chrome Update," "Security Scan," or other generic-sounding titles. Tap each suspicious app and select Uninstall. After you've removed the suspicious apps, restart your phone normally by holding the power button and tapping "Power off," then turning it back on.
How to restart your phone in Safe Mode on iPhone
iPhones don't have a traditional Safe Mode, but you can still identify and remove problem apps. Restart your phone by pressing the power button and volume-down button together, then slide to power off. Wait 10 seconds, then press the power button again to turn it back on. This forces a clean restart and sometimes stops malware temporarily.
Once it's back on, go to Settings, tap General, then iPhone Storage. This shows every app on your phone with how much space it uses. Look for apps you don't recognize or don't remember downloading. Tap any suspicious app and select "Offload App" first — this removes it but keeps your data. If the problem stops, delete the app entirely by tapping "Delete App." If the problem continues, you may need a factory reset (see below).
How to do a factory reset if you can't find the virus
A factory reset erases everything on your phone and returns it to the state it was in when you bought it. This will definitely remove any virus, but you'll lose all your photos, messages, contacts, and other data that isn't backed up. Before you reset, back up your important files to cloud storage — use Google Photos for photos, Google Drive or iCloud for documents, and your phone's built-in backup feature for contacts and settings.
On Android, go to Settings, tap System, then Reset Options, then Erase All Data. You'll be asked to enter your Google account password to confirm. On iPhone, go to Settings, tap General, then Reset, then Erase All Content and Settings. Enter your Apple ID password when prompted. The reset takes 10 to 30 minutes. When it's done, your phone will restart and ask you to set it up like new. Sign back into your accounts and restore your backed-up photos and files.
What to do after you've removed the virus
Once the malware is gone, change your passwords on a different device — a computer or tablet — because the virus may have captured your login information. Start with email, since that's the account most hackers use to reset other passwords. Then change passwords for banking, social media, and any other accounts you use on your phone.
Check your phone bill and bank statements for charges you don't recognize. Some malware sends premium text messages or makes calls that rack up charges. If you see anything suspicious, contact your phone company and bank right away. Going forward, only download apps from Google Play Store on Android or the App Store on iPhone, and read the permissions each app asks for — if a flashlight app asks to read your contacts or location, don't install it.
How to tell if an app is actually malicious
Not every slow phone or unexpected ad means you have a virus. Before you uninstall apps, check whether the problem started after you downloaded something specific. Look at the app's permissions by going to Settings, Apps, and tapping each one. Tap Permissions to see what it can access — a weather app shouldn't need your contacts, and a calculator shouldn't need your location.
Read the app's reviews in the store where you downloaded it. If dozens of recent reviews say it's showing ads, crashing, or draining battery, that's a sign it's malicious or poorly made. Check the developer's name too — legitimate apps come from recognizable companies or developers with many other apps. If an app has only a few downloads, no reviews, and a generic developer name, it's probably not trustworthy.
How to prevent viruses on your phone going forward
The best defense is to be careful about what you download. Stick to Google Play Store and the App Store, where Google and Apple review apps before they're published. Don't download apps from websites or links in emails or texts, even if they claim to be security updates or system tools. Real system updates come through your phone's Settings app, not through random links.
Keep your phone's operating system updated — go to Settings and check for updates regularly. These updates patch security holes that hackers use. Be suspicious of apps that ask for more permissions than they need, and uninstall apps you don't use anymore. If you're not sure whether an app is safe, search for its name plus the word "malware" or "scam" to see what other people say about it.
Frequently Asked Questions
Will restarting my phone in Safe Mode delete anything?
No. Safe Mode only disables third-party apps temporarily — it doesn't delete anything. Your photos, messages, and data stay on your phone. When you restart normally, all your apps come back. You only lose data if you uninstall an app or do a factory reset.
What if I can't find the malicious app?
If Safe Mode doesn't help you identify the problem app, a factory reset is the most reliable way to remove it. Back up your photos and important files to cloud storage first, then reset your phone. This removes everything, including any hidden malware.
Can I get a virus from visiting a website?
On iPhone, it's very difficult — Safari and other browsers can't install apps without your permission. On Android, it's possible if you tap a link that tries to download an app, but your phone will ask for permission first. Don't tap "Install" on pop-ups that appear while browsing.
Do I need antivirus software on my phone?
Not really. The built-in security in Google Play Store and the App Store catches most malware before it reaches your phone. Antivirus apps for phones are less effective than on computers and sometimes slow your phone down. Sticking to official app stores and being careful about what you download is better protection.
What if my phone still has problems after I remove the virus?
If your phone is still slow or crashing after you've uninstalled suspicious apps or done a factory reset, the problem might not be malware — it could be a hardware issue or a problem with your phone's operating system. Restart your phone, check for system updates, and clear your cache by going to Settings and looking for Storage or Cache options.