How to find and remove spyware from your phone

Surveillance software is becoming more sophisticated and can be difficult to detect. However, not all forms of spyware and stalkerware are invisible, and it is possible to find out if you are being monitored.

Android

A giveaway on an Android device is a setting that allows apps to be downloaded and installed outside of the official Google Play Store. 

If enabled, this may indicate tampering and jailbreaking without consent. Not every form of spyware and stalkerware requires a jailbroken device, though.

This setting is found in most modern Android builds in Settings > Security > Allow unknown sources. (This varies depending on device and vendor.) You can also check Apps > Menu > Special Access > Install unknown apps to see if anything appears that you do not recognize, but there is no guarantee that spyware will show up on the app list.

Some forms of spyware will also use generic names and icons to avoid detection. For example, they may appear to be a useful utility app such as a calendar, calculator, or currency converter. If a process or app comes up on the app list that you are not familiar with, a quick search online may help you find out whether it is legitimate.

iOS 

iOS devices that aren’t jailbroken are generally harder to install malware on unless an exploit for a zero-day or unpatched vulnerability is used against you, but the same malware principles apply — with the right tool, exploit, or software, your device could be compromised either with physical access or remotely. You may be more susceptible to infection if you have not updated your iPhone’s firmware to the latest version and you do not run frequent antivirus scans.

Both iOS and Android phones, however, will typically show symptoms of a malware infection.

Signs that spyware is on your phone

You may experience unexpected handset battery drain, overheating, and strange behavior from the device’s operating system or apps. Settings such as GPS and location functions may unexpectedly turn on or you may see random reboots. If you are suddenly using far more data than normal, this could be an indication that information is being sent from your smartphone or remote connections are active. You may also have trouble turning off your device fully.

Some forms of spyware that are focused on fraudulent revenue generation may be able to secure enough permissions to impact your bank balance. If you are signed up for services or premium SMS plans and you know you didn’t consent to them, this could be a sign that spyware is on your device. Keep an eye on your credit cards for any signs of suspicious payments. 

An important point to mention is that sometimes spyware or other forms of malicious software might end up on your device via an originally benign app. There have been cases in the past of developers releasing a genuine, useful app in official repositories, such as a currency converter or weather app, and then after a large user base has been gathered, the developers twist the app’s functions. 

Last year, Google removed malicious apps from the Google Play Store that had been masquerading as Bluetooth utilities and had been downloaded by over a million users. While the apps didn’t appear malicious at first, within days, users were bombarded with adverts and pop-ups.