How to check if your phone is tapped: a practical guide

Step by step

1. 1

   Watch the battery, data, and temperature

   Spyware runs in the background, so the typical symptoms are a battery that drains faster, higher data usage, and a phone that's warm while idle. Go to Settings and check battery and data usage broken down by app. Look for entries you don't recognize or that consume suspiciously much for no clear reason.

2. 2

   Review apps with admin and accessibility permissions

   These are the two permissions spy apps abuse most often, because they grant huge control over the phone. Check the list of device admin apps (usually under Settings, Security) and apps with accessibility access (Settings, Accessibility). If you see something there you didn't install yourself, treat it as a warning sign.

3. 3

   Check the microphone and camera indicators and the privacy dashboard

   Newer versions of Android and iOS show a small dot at the top of the screen when an app is using the microphone or camera. If it lights up for no reason, check what's triggering it. On Android, open the privacy dashboard; on an iPhone, the privacy section in settings - you'll see which apps recently accessed the microphone.

4. 4

   Scan the phone with Google Play Protect

   On Android, open the Google Play store, tap your profile picture, choose Play Protect, and run a scan. The tool detects known malicious apps and suggests what to remove. It's free, built-in protection and a good first step before you reach for anything else.

5. 5

   Check call forwarding with dialer codes

   Type *#21# on the phone's keypad and press call - you'll see whether calls, texts, and data are being forwarded anywhere. The *#62# code shows where calls go when your phone is unreachable. If you find an unknown forward, the ##002# code removes all call forwarding.

6. 6

   As a last resort, do a factory reset

   If the suspicion remains and you can't pinpoint the guilty app, a factory reset removes everything except the factory software. Back up your photos and contacts first, but don't restore apps from a suspicious source, or you may bring the problem back with them. After the reset, change the passwords to your most important accounts from another, trusted device.

What those codes really check, and what they don't

Codes like *#21# or *#62# are standard GSM network commands. They show only the forwarding settings for calls, texts, and data - nothing more. They can be useful, because some abuse does rely on forwarding calls, but they don't look inside apps and don't detect spyware.

If someone online presents these codes as a "tapping detector", that's simply not true. Treat them as one element of your review, not a final verdict. The list of apps with permissions and a Play Protect scan will tell you far more.

Wiretapping myths that only confuse

Crackling, echo, or noise during a call almost always comes from poor signal or call quality, not from tapping. On digital networks, the classic "clicks on the line" known from the movies simply doesn't work that way.

A phone that runs warm or drains faster isn't proof either - a device with a worn battery, weak signal, or a buggy app behaves exactly the same. Only a cluster of signals at once, for example an unknown app with admin permissions plus a spike in data usage, gives you a real reason to worry.

When to get help

If the symptoms return after reviewing permissions, scanning, and resetting, or you fear for your safety, don't deal with it alone. It's worth handing the phone to a repair shop that can examine it calmly, and in the meantime changing your passwords and turning on two-factor authentication for your key accounts.

If you suspect someone around you is deliberately tracking you, preserve the evidence and reach out for support - there are organizations that help people in this situation. This guide is only about defending your own phone, not about tracking anyone.

Frequently asked questions