Our phones hold our bank apps, UPI, photos, chats and work email. That makes them a prime target for hackers and scammers. The good news is that most phone compromises leave clues, and you can often fix the problem yourself if you act quickly.
Warning signs your phone may be hacked
- Battery draining unusually fast even when you are not using the phone much.
- Phone running hot while idle.
- Sudden spike in mobile data use that you cannot explain.
- Apps you do not remember installing, especially ones with generic names or no icon.
- Pop-ups and ads everywhere, including on the home screen.
- Messages or calls you did not make appearing in your history, or friends receiving strange links from you.
- OTPs or password-reset emails you did not request.
- Accounts logging out or showing logins from unknown devices.
- Settings changed on their own, such as a new home page in the browser.
One of these alone may have an innocent explanation, such as an app update. Several together are a red flag.
How to check your phone
On Android
- Go to Settings, then Apps, and review the full list. Uninstall anything unfamiliar.
- Check Settings, then Security, for Device admin apps. Remove admin rights from anything you do not recognise.
- Review Accessibility settings. Malware often abuses accessibility permissions to read your screen.
- Run Google Play Protect from the Play Store menu.
- Check battery and data usage by app to spot anything unusual.
On iPhone
- Check Settings, then General, for VPN and Device Management. Remove unknown profiles.
- Review the installed apps list and battery usage.
- Make sure iOS is fully updated, as updates fix security holes.
- Check your Apple ID devices list and remove any device you do not own.
What to do immediately
- Disconnect from the internet by turning off Wi-Fi and mobile data while you investigate.
- Remove suspicious apps and any unknown device admin or profile.
- Change passwords for email, banking and social media from a different, trusted device. Start with your main email account.
- Turn on two-step verification for important accounts.
- Check your bank and UPI transactions. If you see unauthorised payments, call your bank immediately and report it on the national cyber crime helpline 1930 or cybercrime.gov.in.
- Update your phone's software and all apps.
- Factory reset as a last resort. Back up only photos and important files, not apps, then reset and reinstall apps from the official store.
How to prevent it
- Install apps only from the Google Play Store or Apple App Store.
- Never install APK files sent on WhatsApp or SMS, even if they claim to be from a bank, courier or electricity board.
- Never install screen-sharing apps at the request of a caller.
- Do not click links in unexpected messages.
- Use a strong screen lock and keep your phone updated.
- Review app permissions regularly; a torch app does not need your contacts or SMS.
- Avoid public Wi-Fi for banking, or use mobile data instead.
The bottom line
If your phone behaves strangely, do not ignore it. Check your apps and settings, secure your accounts from another device and report any financial fraud quickly. A few minutes of action can prevent serious losses.
