🔎 Signs your phone may be hacked

Look for one or more of these unusual signs:

• Battery drains much faster than normal (without heavy use).
• Sudden, large spikes in mobile data usage.
• Phone runs hot or is slow for no reason.
• Strange or frequent pop-ups, ads, or browser redirects.
• Unknown apps you didn’t install.
• Unusual calls or SMS (including verification codes you didn’t request).
• Contacts receiving weird messages from you.
• Microphone/camera turning on unexpectedly, or camera light on.
• New device administrator or VPN/profile you didn’t add.
• Settings changed (wallpaper, lock screen PIN) without you.
• Apps requesting lots of permissions unexpectedly.
• You can’t turn off the phone or it reboots often.

If you see several of the above, treat it seriously.

🛠 Quick checks you can do right now

1) Disconnect & isolate

• Turn off Wi-Fi and mobile data (Airplane mode). This stops remote control or data exfiltration.
• If possible, remove SIM card.

2) Look for unknown apps

• Android: Settings → Apps (or Apps & notifications) → sort by Install date.
• iPhone: check home screens and Settings → General → iPhone Storage for unfamiliar apps.

3) Check battery & data usage

• Android: Settings → Battery and Settings → Network & internet → Data usage. Look for apps using lots of battery/data.
• iPhone: Settings → Battery (last 24h / last 10 days) and Settings → Cellular for data usage.

4) Check device admin / profiles

• Android: Settings → Security → Device admin apps (or Device administrators). Revoke admin from anything suspicious.
• iPhone: Settings → General → VPN & Device Management (or Profiles). Remove unknown configuration profiles or VPNs.

5) Scan for malware

• Android: use Google Play Protect — Play Store → Menu → Play Protect → Scan.
• Install a reputable scanner if needed (Malwarebytes for Android, Avast, Bitdefender). (Only install from official Play Store / App Store.)
• iPhone: iOS is more restricted so malware is rarer; scanning apps on App Store are limited in capability.

6) Check for jailbreak/root

• iPhone: unexpected apps like Cydia, or Settings missing items, can indicate jailbreak.
• Android: apps that require root or apps named superuser/su, or root checker apps can show root.

7) Check active logins / cloud access

• Google: visit your Google Account (from a safe device) → Security → Your devices and sign out unknown devices.
• Apple: Settings → [your name] → check devices signed into your Apple ID; remove unknown ones.

8) Look at SMS and email for verification codes

• If you receive OTPs you didn’t request, someone may be trying to access accounts.

✅ If you confirm something is wrong — immediate actions

1. Change important passwords from a safe device (not the hacked phone): email, bank, social media. Use strong passwords + 2FA.
2. Enable two-factor authentication (2FA) on all accounts (use an authenticator app, not SMS if possible).
3. Backup important data (photos, contacts) — but prefer local backup to PC or external drive.
4. Remove suspicious apps & revoke admin rights (see checks above).
5. Factory reset the phone (after backup) if you believe spyware/malware is present:
   • Android: Settings → System → Reset options → Erase all data (factory reset).
   • iPhone: Settings → General → Transfer or Reset iPhone → Erase All Content and Settings.
     This removes most malware (but extremely advanced spyware may survive on jailbroken/rooted devices).
6. Update OS & apps after reset to latest versions.
7. Reinstall apps only from official stores and restore data carefully — avoid restoring apps/settings from backups that might reintroduce the malware.
8. Contact banks and important services if you suspect financial data was exposed. Monitor accounts and put fraud alerts if needed.
9. Preserve evidence (screenshots, logs) if you will report to police or a security professional.
10. Consider professional help if you suspect high-end spyware (Pegasus/State-grade). These require security labs or your mobile carrier’s help.

🔐 Extra protective steps going forward

• Use strong unique passwords + a password manager.
• Use an authenticator app (Google Authenticator, Authy) for 2FA.
• Turn on Google Play Protect (Android) and install apps only from Play Store / App Store.
• Avoid clicking suspicious links or installing APKs from unknown sources.
• Keep OS and apps updated.
• Use a VPN only from a trusted provider when needed.
• Regularly check app permissions (camera, mic, SMS) and revoke unexpected ones.

❗ When to involve experts or file a report

• If you see bank fraud or money lost.
• If private photos or sensitive data are leaking.
• If you receive threats or blackmail using your data.
• If the phone was physically accessed by someone you don’t trust.
  In those cases, contact local police and consider a cybersecurity professional.