Is My Phone Hacked or Tapped? Stalkerware Signs and Fixes

TL;DR: Warning signs of stalkerware include fast battery drain, a warm phone, unusual data use and settings you did not change, but it can also be silent. The strongest clue is often behavioural: someone knows things they should not. Check app permissions, Play Protect, accessibility and device-admin settings on Android, and review accounts and sharing on any phone. Make a safety plan before removing anything, because removal can alert the person who installed it.

👉 Run a free digital footprint check on yourself →

"Is my phone hacked?" usually starts with a specific worry: a partner who seems to know your messages, a stranger who quotes your location, or a battery that dies by lunch. Here is how to check calmly, and what to do if you find something.

What stalkerware is

Stalkerware is consumer spyware that covertly tracks messages, calls, photos and location. It is often sold as child-monitoring or family-tracking software, but is also used to monitor partners. According to Yahoo Tech, it is most often an app downloaded directly onto the device, sometimes hidden from the home screen or disguised as something harmless, and it may be installed from sources outside the official app stores. Names reported include Cocospy, Spyic and TheTruthSpy. The US FTC has banned the maker of one such app, SpyFone, from the surveillance business, as noted by KOKH.

Signs to look for

Battery draining faster than usual, or the phone running warm or slow.
Unexpectedly high mobile data use.
Strange notifications, or more screen time than you account for.
Someone knows things they should not, such as where you were or what you wrote. The Coalition Against Stalkerware says this behavioural clue is often the most common sign.

Many normal problems cause the same symptoms, and stalkerware can exist with none of them, so treat the list as a reason to check, not as proof.

It may not be an app at all

Someone can also watch you through cloud backups, location sharing, or a Google or Apple account they control or know the password to. Check who is signed in to your accounts, and review linked devices in messaging apps such as WhatsApp and Telegram. Calls can also be diverted without any spyware: see the call forwarding scam guide and SIM swap fraud.

Check an Android phone

NordVPN's guide suggests four checks:

Google Play Protect: in the Play Store, open your profile, then Play Protect, then Settings, and confirm app scanning has not been switched off.
Accessibility: in Settings, open Accessibility and look for apps you do not recognise, since stalkerware often abuses these permissions.
Notification access: see which apps can read your notifications.
Device admin apps: stalkerware may register as a device administrator.

Also scan the full app list for unfamiliar names, and review which apps were installed from outside the Play Store.

Check an iPhone

Open Settings, then Privacy and Security, then Safety Check to see who you share location and data with.
Check Settings, then General, then VPN and Device Management for profiles you do not recognise.
Look at the devices signed in to your Apple Account, and update iOS.

Make a safety plan before you remove anything

Deleting a monitoring app or changing shared access can alert the person who installed it, which may raise the risk of abuse or harassment. The Coalition Against Stalkerware keeps a list of survivor assistance organisations in different countries, and Cornell's Clinic to End Tech Abuse publishes detailed guidance. If you think your safety is at risk, contact local emergency services or a support organisation first. If someone monitors you as part of a relationship, our guide on talking to a partner about digital privacy covers the conversation, but safety comes first.

Removing it and locking things down

From a different, trusted device, change the password on your Google or Apple account, email and banking, and turn on two-step verification.
Remove the spy app, or back up only photos and contacts by hand and factory reset the phone. Removing the app does not delete data it has already uploaded.
Review sign-in activity on your accounts, and follow Google account hacked: what to do if anything looks wrong.
If your passwords may have been exposed, use the free ways to check whether a password has been leaked.

FAQs

What are the signs of stalkerware on a phone?

Common signs are fast battery drain, a phone that runs warm or slow, unusual data use and strange notifications. Stalkerware can also run without any of these, and the clearest sign is often that someone knows things they should not.

How can I tell if my phone is being tapped?

True wiretapping is rare. In most cases the cause is spyware, diverted calls, or someone with access to your accounts, backups or shared location. Check apps, permissions, call forwarding and signed-in devices.

Will a factory reset remove stalkerware?

A factory reset usually removes apps on the device, but it will not help if the person still has your Google or Apple account password. Change your passwords from a clean device first, and restore only photos and contacts by hand.

Can antivirus detect stalkerware?

Some security apps and Google Play Protect flag known stalkerware, but none catches everything. Combine automatic scans with manual checks of permissions, accessibility settings and device admin apps.

What should I do first if my partner may be monitoring my phone?

Make a safety plan before you remove anything, because removal can alert them. Contact a support organisation or local emergency services if you feel unsafe, and change account passwords from a device they cannot access.

Can someone spy on my phone without touching it?

Consumer stalkerware is usually an app installed on your device, so it typically needs brief physical access or your account details. Accounts, backups and location sharing can also be abused without touching the phone.

Spyware and account takeovers often start with a leaked password or email, so see what is exposed with the free digital footprint checker.

Curious what's already out there? Scan My Shadow checks a phone number and email across 1,500+ sources and sends a clear report — no guesswork, just facts. Start your scan.

Is Your Phone Hacked, Tapped or Running Stalkerware? How to Check