If you suspect your phone is being monitored, the most reliable way to tell if your phone is tapped is to use the built-in security tools your device already has. On an iPhone running iOS 16 or later, start with Safety Check; on Android, open the Permission Manager to see exactly which apps have access to your data.
How to tell if your phone is tapped: start with official checks
Instead of guessing based on odd behavior, Apple and Google provide documented paths to review and reset app permissions. These are the first steps recommended by the companies themselves for checking if your phone is being tracked. You can also use dialer codes to check for call or data diversion: dial *#21# to see if your calls and messages are being forwarded, and *#62# to check diversion when your phone is unreachable. To verify your device hardware, dial *#06# to display your IMEI number. On Android, utility codes like *##4636##* or *##197328640##* open a testing menu with cell tower information; on iPhone, dial 3001#12345#* to enter Field Test Mode and view network tower details.
Check app permissions on iPhone
For iPhone users on iOS 16 or later, the official tool is Safety Check. This lets you review which people and apps have access to your information and reset those permissions if needed.
- Open Settings.
- Go to Privacy & Security.
- Tap Safety Check.
- Choose Manage Sharing & Access to review who and what can see your data, or Emergency Reset to immediately stop all sharing.
To review location access per app, go to Settings > Privacy & Security > Location Services. Here you can see which apps have requested your location and change their access to Never, Ask Next Time, While Using the App, or Always.
Check app permissions on Android
Android offers a Permission Manager to see every permission granted to your apps. You can also review permissions for individual apps directly.
- Open Settings.
- Tap Apps.
- Select the app you want to check. If it is not listed, tap See all apps.
- Tap Permissions to see what the app can access, and change any permission you are not comfortable with.
Alternatively, go to Settings > Security & Privacy > Privacy > Permission manager for a full overview. To enable Google Play Protect, open the Play Store, tap your profile icon, select Play Protect, then tap Settings and ensure scanning is turned on.
Why battery drain and overheating are not reliable signs
Many articles list excessive battery drain, overheating, data spikes, or slowdowns as signs of a tapped phone. Battery drain can come from an aging battery, a recent OS update, or a background app refresh. Overheating can happen during gaming, streaming, or charging. Relying on these symptoms alone can lead to false alarms. The official documentation focuses on reviewing app permissions and installed apps as the correct method to determine if your phone is being monitored. Two more concrete indicators are strange messages sent from your number to your contacts, which can mean a hacker is trying to install spyware on their phones too, and websites that look visually unusual or broken, which can suggest spyware is intercepting your connections.
Remove suspicious apps and stay protected
If you find an app you do not recognize or one that has permissions it should not need, uninstall it immediately. Stick to official app stores like the Apple App Store or Google Play Store for all downloads. Keep your operating system updated, as updates often include security patches. Using a reputable security app from an official store, such as Norton Mobile Security (Norton 360 for Android), can serve as a supplementary measure, but it should not replace the built-in permission reviews described above. If your device is running an old OS, set up encryption via your security settings, but be warned: the process can take up to an hour and may cause data loss if the phone dies. Be cautious of spoofed and fake phone numbers that may appear in messages or caller ID, as these are common tactics used to trick you into installing malicious software.
Frequently Asked Questions
Can someone tap my phone without installing an app?
While it is technically possible through advanced network-level attacks, the most common method of phone tapping requires installing an app or granting permissions. Checking your app permissions and installed apps is the best defense.
Will a factory reset remove spyware from my phone?
A factory reset will remove most spyware and unwanted apps, but you should back up only essential data and not restore from a backup that may contain the malicious software. After resetting, set up your phone as new.
How often should I check my app permissions?
There is no official recommendation on frequency, but checking after installing new apps or after noticing unusual behavior is a good practice. A quick monthly review of your Permission Manager or Safety Check can help maintain your privacy.
Do antivirus apps detect all spyware?
No security app can guarantee detection of all spyware. Antivirus apps are a useful supplementary tool, but the most reliable method is using your device's built-in permission review tools and only installing apps from official stores.
What should I do if I find an app I don't recognize?
Uninstall the app immediately. If you cannot uninstall it, check if it is a system app by looking in Settings > Apps. If it is a system app, consider a factory reset or contact your device manufacturer for guidance.
