Our phones are an inseparable part of our lives. We rely on them for more than mere communication — personal notes, banking apps, and email inboxes are all available at the tap of the screen. Sensitive data stored on our phones is worth a lot to bad actors, and as we continue to see a steep increase in cybercriminal activity, it is worth paying extra attention to our phone security. Let’s learn to identify the signs of a hacked phone, how criminals can hack it, and what you should do to keep your device safe.
Contents:
Signs your phone is hacked
If bad actors are successful in their attempt to hack your phone, you have ways to detect the intrusion. Some signs are easy to spot, such as sluggish performance, invasive pop-ups, or the crashing of apps. Others might require closer inspection. Here are some of the tell-tale signs that your mobile device has been compromised.
Sluggish performance
If you’ve noticed that your mobile device has slowed down and lags while you’re trying to perform simple tasks, like typing a text message or even unlocking the screen, it could be an indication that a malicious piece of software has been using up all that energy.
Quick battery discharge
It’s normal for phone batteries to degrade over time and for older devices to discharge more quickly. However, in newer devices, malware can take its toll. If you notice that your battery all of a sudden runs out in a matter of hours or minutes, your phone might be the victim of a hack.
Phone heating up
Malicious software can consume significantly more resources than the apps you use daily, putting unusually high strain on your device’s CPU, which leads to it heating up. Over time, extensive overheating can cause battery damage and fry your phone’s hardware.
High data usage
Malicious software often requires an active internet connection to function in the intended way, like transmitting your input and camera data. Communicating with a remote server can quickly increase your data usage. So if you’re burning through gigabytes of mobile data that used to last you a month, something might be up with your device.
Unfamiliar applications on your phone
Most smartphones come with a variety of pre-installed applications. However, if you notice unfamiliar apps and you’re sure you didn’t download them, that could be a clear sign of malware at work. These apps can be tricky to detect — for instance, some spyware of iPhones can be installed remotely.
Suspicious pop-ups
Although not all pop-ups are an indication of malicious activity on your phone — the odd promotion here and the strange update warning there are rarely cause for concern — the unfamiliar and invasive ones might be triggered by a malicious third-party app that shouldn't be on your mobile device.
Suspicious outgoing texts and calls
Sometimes the issue with your phone might be caused by your accounts being compromised. If you notice a slew of suspicious outgoing texts and calls that you did not initiate, that is another sign that your phone — or at the very least your messaging and communication accounts — might be hijacked by bad actors.
Level up your online security
Store and manage your digital valuables safely
How can your phone be hacked?
Bad actors can find an unauthorized way into your device in a variety of ways, like exploiting app vulnerabilities that developers haven’t patched yet. However, a successful attack on your phone usually relies on human error.
Phishing
Phishing is a type of social engineering attack where bad actors send fake emails and text messages pretending to be legitimate services. They trick unsuspecting users into either installing malicious software or giving out their personal information, inadvertently granting hackers access to their personal accounts and devices.
Public Wi-Fi networks
Public Wi-Fi can be a lifesaver in certain instances — you can drop by a café or a public library to quickly check your email inbox or bank account. Hackers love public Wi-Fi too, although for more nefarious reasons. The security measures of these hotspots are often lackluster, meaning once you connect to one, your traffic is unencrypted. This creates the perfect situation for a bad actor to intercept the connection and gain access to your device without you knowing it. If the device is compromised via a public network, users need to cut off the connection immediately. Even mobile data should remain switched off until the hacking damage is repaired.
Bluetooth device connection
Connecting to unknown Bluetooth devices poses a similar risk as accessing a public Wi-Fi network. Pairing with an unfamiliar device in a public space creates the perfect avenue for bad actors to access your device and breach your files relatively simply and quickly.
Malicious pop-ups, websites, and apps
Malicious pop-ups, websites, and apps all aim to trick online users into giving up their sensitive data or infecting their devices with spyware or other kinds of malicious software. Pop-ups are deliberately persistent, making it hard for you to close them, especially on a small mobile screen. Criminals also bank on users not having any malware detection installed on their phones, letting malicious pop-ups and apps do their job more efficiently.
What can you dial to see if your phone is hacked?
If your phone has been hacked, you can use specific key codes, known as Unstructured Supplementary Service Data (USSD), to check for changes to the default settings.
Keep in mind that some codes may not be available to you based on your phone model, carrier, and location. Likewise, you may be able to access specific codes based on your network provider that don’t work universally.
*#06# — Check your phone’s IMEI number. You might need it if you report that your phone is compromised to your carrier provider.
*#21# — Check the unconditional call forwarding status that applies to all calls automatically. If you didn’t have call forwarding set up and see a number attached, chances are criminals have been intercepting your calls,
*#002# — Switch off unconditional call forwarding to ensure all incoming calls reach you.
*#67# — Check conditional call forwarding, which only activates if you’re already in a call or or have declined one. Criminals can use this to keep your line busy and intercept the calls.
*#62# — Check conditional call forwarding if you have your phone turned off or it’s in airplane mode.
*#004# — View all your conditional call forwarding preferences.
##004# — Turn off conditional call forwarding.
*#33# — Check the call barring status. It’ll let you know if you have blocked any incoming or outgoing calls.
*#777# — Check your prepaid account balance. This lets you see if your account has been used up significantly more than it should be. This code might not work with all carriers.
*#3282# — Check your call minutes and data usage information. If you suspect your data usage has increased significantly, this code can help.
How to remove a hacker from your phone
If you have discovered that your phone has indeed been hacked, you have ways to remove unwanted software from your device. However, we first recommend changing your passwords for all your online accounts, especially if you’ve kept your login details stored on your phone’s note-taking app or an unencrypted folder. It’s also usually a good idea to inform your contacts that your phone has been hacked and let them know that suspicious messages could be coming their way.
Run anti-malware software
Running a scan for malicious software on your device is one of the quickest and surest ways to get rid of dubious software installed on your phone. Routine scans are recommended to stay on top of your phone’s security.
Some phones come with preloaded anti-malware software. However, if yours doesn’t, be careful before installing one — scammers often list copycat apps on mobile stores, so make sure the one you choose is reliable and comes from the official developer.
Remove unknown or unauthorized apps
If you’ve found out your phone has been hacked, you should run a full audit of the apps on your phone. As soon as you see any apps that you know you didn’t install yourself, remove them from your mobile device immediately. Don’t forget to check your folders in case the apps left behind any malicious files.
Restore your phone to the factory settings
Sometimes restoring your phone’s factory settings is the quickest and easiest way to get rid of malware. Keep in mind that restoring your mobile device to factory settings means that all the data stored on it will be wiped for good.
To restore factory settings on an iOS device, you should:
Open the “Settings” app.
Select “General.”
Scroll down and tap “Transfer or reset iPhone.”
Tap “Reset.”
You will be prompted to choose which data you want to reset. Select “Reset all settings.”
Tap “Continue” to confirm. You will be asked to enter your device passcode and Apple Account password as a security measure.
To restore factory settings on an Android, you need to:
Open the device settings.
Select “General management.”
Tap “Reset.”
Select “Factory data reset.”
Tap the “Reset” button to confirm. You may be asked to enter your device PIN code as a security measure.
How to secure your phone from hackers
Many people use their mobile phones more than computers, or even in lieu of them. Criminals can see this trend and look for ways to target phones directly. To ensure that your phone is safe from bad actors, we’ve compiled a few easy-to-follow security tips.
Connect to VPN before using public Wi-Fi
Refrain from using public Wi-Fi hotspots without a network security tool like a VPN. Public Wi-Fi is the perfect hunting ground for bad actors. However, if you use a VPN that encrypts outgoing and incoming traffic, chances of getting your phone hacked immediately go down.
Turn off Bluetooth and Wi-Fi hotspots
Limit your phone’s exposure to unfamiliar networks and devices. Keep your Bluetooth and Wi-Fi hotspot turned off when you are not using them. Bad actors are known to take advantage of such connections to gain access to your phone and network data. If you need to keep your Bluetooth connection on to access personal external devices, review your phone’s Bluetooth settings to block pairing requests.
Use antivirus and anti-malware software
Having a reliable antivirus and anti-malware tool on your phone will help significantly reduce the risk of getting the device infected with any type of malicious application. Such tools are designed to detect and warn you about potential dangers in advance.
Download and install authorized apps
Stick to apps that are authorized and verified. Never install apps from questionable third-party websites or other dubious sources. Sticking to Google Play Store and the App Store is your best bet to avoid downloading and installing malware — you can easily double-check the app's legitimacy and reputation before downloading and installing it on your device.
Update apps and your phone’s OS regularly
App and OS updates do more than simply make the user’s experience better by patching performance bugs or upgrading the interface. Developers use updates to address app vulnerabilities, cover potential attack vectors, and ensure the best possible security for your device. For maximum security, be sure to run regular app and OS updates.
Never leave your phone unattended
Leaving your phone unattended provides hackers with direct physical access to your device — and if you don’t have a screenlock set up, it’s game over. They can gain easy access to your apps, change your passwords, and steal your personal data. Always keep an eye on your phone, especially when you’re in busy public spaces. We also recommend adding a screenlock and enabling device tracking in case someone gets their hands on your phone.
Use multi-factor authentication for your accounts
Multi-factor authentication is an optional login step that adds extra security to your account. Once you’ve entered your username and password, you need to prove your identity, usually by entering a special code or using biometrics. Without verifying your MFA, hackers can’t do anything with your accounts. You can use an authentication tool like NordPass’ built-in Authenticator to easily generate and access one-time codes.
Use strong passwords and a password manager
Passwords provide a secure gateway to our online accounts. Making sure they are strong is crucial if you wish to stay secure in the online world. In case someone steals your phone, hacks it, or gains access to your Android or Apple accounts, we recommend ensuring you use strong and unique passwords. They should be at least 15 characters and contain a mixture of numbers, letters, and special symbols. Prioritize sensitive accounts like banking, email, and social media, and update their credentials using an uncompromised device.
To keep your new credentials neatly organized, use a password manager like NordPass. It lets you generate unique passwords on the spot, shows which credentials are vulnerable or reused, and alerts you if your data is found on the dark web. You can also use it to generate passkeys — a passwordless authentication method that keeps your accounts even safer. With a password manager and great password security habits, you will significantly lower the risk of being hacked.
Bottom line
Having your phone hacked can be stressful — and considering the latest data leak trends, that’s more than understandable. However, if you take appropriate steps to ensure the security of your device, the risk of being a hacker’s prey will be minimized. The tricky thing is making cybersecurity a part of your daily routine. If you're successful in doing so, the online world will be much more enjoyable.