How to Check Your Phone for Commercial Spyware

This guide walks you through practical steps to detect commercial spyware on your Android or iPhone. You’ll learn what signs to look for, how to review your apps and settings, and what to do if you find something suspicious. No technical background is needed, just about 20 minutes and your phone in hand.

What You’ll Need

• Your phone (Android or iPhone)
• Access to your phone’s settings and app list
• A computer (optional, but helpful for checking your cloud account activity)
• Your account passwords (for Google, Apple, etc.) to review security settings

Step-by-Step

1. Review your installed apps. On Android, go to Settings > Apps and scroll through the full list. On iPhone, go to Settings > General > iPhone Storage. Look for any app you don’t remember installing, especially ones with generic names like “System Update,” “Backup,” or “Settings.” Tap each unfamiliar app and check its permissions and data usage.
2. Check app permissions. Go to Settings > Privacy (iPhone) or Settings &em; Privacy > Permission Manager (Android). Review which apps have access to your microphone, camera, location, and contacts. A legitimate app should only need permissions relevant to its function. For example, a flashlight app doesn’t need your microphone.
3. Look for apps that can hide themselves. Commercial spyware often hides its icon. On Android, open Settings > Apps > See all apps and look for apps with “hidden” or “disabled” status. On iPhone, swipe left on the home screen to see the App Library—some spyware hides there. Also check Settings > General > VPN & Device Management on iPhone for any unknown profiles.
4. Review your device administrator list (Android only). Go to Settings > Security > Device admin apps. Any app listed here has elevated privileges. If you see something you don’t recognize, tap it and select “Deactivate.”
5. Check your battery and data usage. Go to Settings > Battery and Settings > Network & Internet > Data usage. Spyware runs in the background, so it often appears at the top of battery or data usage lists. Compare with the apps you actually use—if an app you rarely open is using a lot, that’s a red flag.
6. Review your cloud account activity. Log in to your Google or Apple account on a computer and check recent device logins, app activity, and any unfamiliar devices. Spyware sometimes creates a backup of your data to a cloud account the attacker controls. Look for any new or unknown devices in your account’s security section.
7. Check for sideloaded apps (Android only). Go to Settings > Apps > Special app access > Install unknown apps. See which browsers or file managers are allowed to install apps. If a suspicious app is listed, revoke that permission.
8. Look for unusual text messages or notifications. Some spyware is installed via phishing links sent by SMS. Check your messages for strange links or texts from unknown numbers that you didn’t initiate. Also look for notifications asking you to “update” or “verify” something—these can be fake.
9. Run a security scan. While not foolproof, a reputable mobile security app can detect known spyware. On Android, you can use Google Play Protect (built-in) by tapping your profile picture in the Play Store and selecting “Play Protect.” On iPhone, there’s no built-in scanner, but you can use a trusted third-party app from the App Store.
10. Check your phone’s call forwarding and SMS forwarding. Spyware can set up forwarding. On Android, dial *#21# to check call forwarding status, and *#62# for unanswered calls. On iPhone, go to Settings > Phone > Call Forwarding and make sure it’s off. For SMS, check your messaging app’s settings for any forwarding rules.
11. Review your browser’s saved passwords and autofill. Spyware often captures keystrokes, but it also can’t read your saved passwords if you use a password manager. Check your browser’s saved passwords list for any accounts you don’t recognize—this can indicate a compromised account.
12. Consider a factory reset if you find anything. If you confirm spyware, back up only your photos and contacts (not apps or system settings), then perform a factory reset from Settings > System > Reset (Android) or Settings > General > Transfer or Reset iPhone > Erase All Content and Settings. After reset, restore your data and immediately change all your passwords.

Common Mistakes

• Ignoring pre-installed bloatware. Many phones come with manufacturer apps that you don’t use. They aren’t spyware, but they can confuse your review. Focus on apps you didn’t install or that have excessive permissions.
• Only checking the app drawer. Spyware often hides its icon, so you must check the full app list in settings, not just the home screen.
• Assuming iOS is completely safe. While iPhones are more locked down, spyware like Pegasus has been found on them. Don’t skip the checks on an iPhone.
• Deleting suspicious apps without a backup. If you delete a spyware app, you lose the evidence. Before deleting, take screenshots of the app’s info page and permissions.
• Not changing passwords after removing spyware. The spyware may have already captured your credentials. Change all important passwords (email, banking, social media) immediately after removal.

Tips

• Enable two-factor authentication (2FA) on all your accounts. This makes it harder for an attacker to use stolen passwords.
• Keep your phone’s operating system updated. Security patches fix vulnerabilities that spyware exploits.
• Use a strong lock screen PIN or biometric lock. Spyware is often installed by someone with physical access to your phone.
• Be cautious with public Wi-Fi. Use a VPN if you must connect, but avoid sensitive transactions on unsecured networks.
• Review your app list monthly. Make it a habit to check for new or unfamiliar apps, just like you’d review your bank statements.

Troubleshooting

• My phone is slow but I can’t find any spyware. Slowness can be caused by many things—low storage, too many background apps, or an old battery. Try restarting your phone, clearing cache, and removing unused apps. If it’s still slow, consider a factory reset.
• I found an app I don’t recognize, but I can’t uninstall it. Some apps are pre-installed by the manufacturer and require disabling instead of uninstalling. Go to the app’s info page and tap “Disable” if available. If it’s a device administrator, deactivate it first (see Step 4).
• The security scan says my phone is clean, but I’m still worried. Scans only detect known malware. If you have a strong suspicion, back up your data and do a factory reset. Then change all your passwords.
• My phone is sending texts or making calls by itself. This could be spyware or a SIM card issue. Check your call and SMS logs for unknown numbers. If you see suspicious activity, contact your carrier immediately and consider a new SIM.
• I can’t find the “Device admin apps” option on Android. The path varies by manufacturer. Search your settings for “Device admin” or “Security & privacy.” On some phones, it’s under Settings > Security > Other security settings.

Frequently Asked Questions

Q: Can spyware be installed without me clicking anything?
A: Yes, in rare cases via “zero-click” exploits that don’t require user interaction. These are typically used by sophisticated attackers, not commercial spyware. The steps above will detect most commercial spyware.

Q: Is there a code to check if my phone is tapped?
A: Codes like *#21# show call forwarding status, but they don’t detect spyware. There’s no universal code. The best method is reviewing apps and permissions as described.

Q: Will a factory reset remove all spyware?
A: Yes, a factory reset removes all apps and data, including most spyware. However, if your phone has a compromised firmware (rare), it could persist. After a reset, don’t restore from a backup that was made while infected—set up as a new phone.

Q: Can spyware survive a SIM card change?
A: Yes, spyware is stored in the phone’s storage, not the SIM. Changing your SIM won’t remove it. Only a factory reset will.

Q: How do I know if my spouse installed spyware on my phone?
A: The same steps apply. Look for apps you didn’t install, especially those with location and microphone permissions. If you suspect your spouse, also check your Google or Apple account for devices you don’t own.

Q: Are free security apps reliable?
A: Some are, but many free apps are ad-supported and don’t offer real-time protection. Stick to well-known names from official app stores. For a thorough check, the manual steps above are more effective than any app.

Related

• Disk Cloning vs Disk Imaging: Key Differences
• Joplin vs Google Keep: Offline-First Notes Explained
• Java to Python: A Practical Developer’s Guide