What to Do If You Think Your Phone Has Been Hacked

Discovering your phone may have been compromised is unsettling. The good news is that acting quickly can limit the damage significantly. Here is what to do, step by step, without panicking.

Warning Signs to Watch For

• ›Battery draining far faster than usual with no change in your habits
• ›Apps you do not recognise appearing on your device
• ›Unexpected spikes in mobile data usage
• ›Messages or emails sent without your knowledge
• ›Device running hot when not in active use
• ›Accounts logging you out unexpectedly or asking you to re-verify

One or two of these symptoms in isolation may have innocent explanations. Several happening at once is a stronger signal that something is wrong.

Act Immediately

The first thing to do is disconnect. Turn off Wi-Fi and mobile data to cut off any active connection a malicious app or remote attacker may be using. Then, from a separate trusted device, change the passwords for your most critical accounts: email first, then banking and social media.

Enable two-factor authentication on every account that supports it if you have not already. Even if an attacker has your password, 2FA makes it significantly harder for them to get in.

Investigate and Clean Up

Go through your installed apps and remove anything you do not recognise or no longer use. Check your account activity logs for logins from unfamiliar locations or devices. You can also visit haveibeenpwned.com to see if your email address has appeared in any known data breaches.

If you use Android, consider running a reputable security scan. On iOS, the sandboxed app model makes traditional malware less common, but a compromised Apple ID can still cause serious damage.

If the Situation Is Serious

If you suspect a banking app has been accessed, contact your bank immediately and ask them to flag your account. If messages or calls are being intercepted, contact your mobile carrier, as this can be a sign of SIM swapping.

As a last resort, a factory reset will remove most threats. Back up only essential data before doing so, and avoid restoring from a backup taken during the period when the phone may have been compromised.

The most important thing is not to wait. The faster you act, the less damage can be done. Most phone security incidents are fully recoverable when handled promptly and systematically.