How to Tell If Your Phone Has a Virus or Is Just Acting Up

By Austin Little

Most slow, hot, or glitchy phones aren't infected. They're full, old, or running a misbehaving app. But real phone malware and scams do exist. Here's how to tell the difference, what to check first, and how to clean things up safely.

AI disclosure. This page was drafted with AI assistance and edited for Apiary. We don't invent quotes, stats, people, or events. If something looks off, tell Austin — that's the point of a living hive.

Here's the short answer:

• Most phone "viruses" aren't viruses. A slow, hot, or crashing phone is usually caused by low storage, an old battery, a buggy app, or an update in progress.
• Real warning signs include pop-up ads appearing outside of apps, apps you didn't install, your phone sending texts or making calls you didn't make, unexpected charges, settings changing on their own, and accounts being logged into from places you've never been.
• Fake "virus alerts" in your web browser are almost always scams. Close the tab. Don't call the number or download the "cleaner."
• The fix usually starts simple: update your phone, remove suspicious apps, check which apps have special permissions, change your important passwords from a different device, and turn on two-factor authentication.
• If it's serious (money missing, accounts taken over, a work phone, or signs someone is stalking you) get help from your carrier, your bank, your workplace IT team, or the authorities.

Let's go through how to tell what's really going on.

"Virus" vs. malware vs. scams: a quick vocabulary lesson

People say "virus" for anything bad on a computer or phone. Technically, a virus is a specific kind of malicious code that spreads by attaching itself to other files. That kind is rare on modern phones. The broader word is malware: any software designed to do something harmful.

Phone problems that people call "viruses" usually fall into one of these buckets:

• Adware: apps that bombard you with ads, sometimes outside the app itself.
• Spyware or stalkerware: apps that secretly track your location, messages, or activity, sometimes installed by someone who had access to your phone.
• Banking trojans and info stealers: apps disguised as something useful that try to grab passwords or financial info.
• Subscription scams: apps or websites that sign you up for paid services you didn't mean to buy.
• Phishing: texts, emails, or websites that trick you into entering your password or card number. Your phone isn't infected; you were fooled into handing over info.
• Account takeovers: someone gets into your email, social media, or Apple/Google account, and it looks like your "phone" is doing strange things.

This matters because the fix depends on which one you're dealing with.

How common is phone malware, really?

Both iPhones and Android phones are designed with strong protections. Apps run in their own walled-off space ("sandboxing"), app stores review apps, and both systems get regular security updates.

That said, malware on phones does happen. It's more often found on Android phones that install apps from outside the official Google Play Store ("sideloading"), and on any phone that's out of date, jailbroken, or rooted (modified to remove built-in protections).

Highly targeted spyware, the kind that shows up in news stories about journalists and activists, is real but rare for regular people.

For most people, the bigger risks are scams, phishing, sketchy apps, and reused passwords.

Signs it's probably NOT a virus

These are the most common complaints, and they usually have boring explanations.

Your phone is slow

Common causes:

• Storage almost full. Phones slow down a lot when storage is nearly maxed out.
• Old hardware. New apps and updates are built for newer phones.
• Aging battery.
• Too many apps running background tasks.
• Right after an update, phones often do behind-the-scenes work (indexing, optimizing) for a day or so.

Your phone gets hot

• Charging, especially fast charging.
• Gaming, video calls, GPS navigation, or recording video.
• Sitting in the sun or a hot car.
• Weak signal, which makes the phone work harder to stay connected.
• Right after an update or while restoring a backup.

Your battery drains fast

• An aging battery (they lose capacity over time).
• Screen brightness turned up high.
• An app stuck in a loop or constantly using location.
• Weak cell signal.
• New phone setup or backups running.

Apps crash or freeze

• Apps that need updating.
• A phone that needs updating.
• Low storage.
• A buggy app version (check if other people are reporting the same issue).

Random restart

• A system update installed overnight.
• A failing battery.
• An app or system glitch. One-off restarts aren't usually a malware sign.

Signs it MIGHT be malware or a hacked account

Take these more seriously, especially if you see more than one.

• Pop-up ads appear on your home screen or lock screen, or over other apps, not just inside a free game.
• Apps you don't remember installing appear on your phone.
• Your browser homepage or search engine changed without you doing it.
• Your phone sends texts, emails, or social posts you didn't send, and friends tell you they got weird messages from you.
• Unexpected charges on your phone bill, app store account, or bank statement.
• Data usage spikes that don't match how you use your phone.
• Settings change on their own, or an app has "device administrator" or accessibility access you didn't knowingly grant.
• You get login alerts or password-reset emails you didn't request.
• Your accounts show logins from devices or places you don't recognize.
• Someone seems to know things about where you've been or what you've said privately, which could point to stalkerware or a compromised account.

One of these alone may still be innocent. Several together are worth acting on.

The fake virus alert: the most common "phone virus" of all

You're reading a website, and suddenly the screen flashes: "WARNING! Your iPhone is infected with 5 viruses! Battery damaged! Tap here to clean now!" Maybe it vibrates or plays a sound. Maybe it shows a countdown timer or a phone number for "Apple Support" or "Google Security."

This is a scam. It's a web page pretending to be a system alert. Websites can't scan your phone for viruses. Its goal is to scare you into installing a junk app, buying a useless subscription, calling a fake support line, or giving up your passwords.

What to do:

1. Don't tap anything on the pop-up, including "Cancel" or "X" buttons inside the page, which may be fake too.
2. Close the browser tab using your browser's own tab controls. If that doesn't work, fully close the browser app.
3. Clear your browser history and website data in your browser settings if the page keeps coming back.
4. Don't call any phone number shown in the alert.
5. If you already installed something or entered info, follow the cleanup steps below.

Step-by-step: checking your phone

Work through these in order. Most problems are solved in the first few steps.

Step 1: Restart your phone

Simple, but it clears out temporary glitches and stops some misbehaving processes.

Step 2: Update everything

Install the latest system update for your phone, then update all your apps. Updates patch security holes. On most phones, look in Settings for "Software Update" or "System Update." Turn on automatic updates if you haven't.

If your phone is so old it no longer gets security updates, that's a real risk.

Step 3: Check storage and battery health

• In Settings, look at storage. If it's nearly full, delete unused apps, old videos, and duplicate photos (after backing them up).
• Check battery health or battery usage. Many phones show which apps use the most battery. If an app you barely use is at the top, that's suspicious, or at least buggy.

Step 4: Review your installed apps

Scroll through every app on your phone, including ones hidden in folders or the app library.

• Delete anything you don't recognize or don't use.
• Be suspicious of flashlight apps, "phone cleaner" or "battery booster" apps, free VPNs from unknown companies, wallpaper apps, and apps with generic names and few reviews.
• Look up apps you're unsure about. Search the app name plus "malware" or "scam."

Step 5: Check app permissions

Both iPhone and Android let you see which apps can access your location, camera, microphone, contacts, photos, and more.

• Remove permissions that don't make sense. A calculator doesn't need your location.
• On Android, pay special attention to apps with Accessibility access, Device Admin access, or permission to display over other apps. Malware often abuses these.
• On iPhone, check for configuration profiles in Settings (often under General, then VPN & Device Management).

Step 6: Run your phone's built-in protection

• Android: Google Play Protect scans apps and is usually on by default.
• iPhone: Apple doesn't offer a user-run virus scanner because of how iOS isolates apps. Keeping iOS updated and only installing from the App Store are the main protections.

Some reputable security companies make mobile security apps, especially for Android. If you use one, choose a well-known company and download only from the official app store.

Step 7: Check your accounts

Many "my phone is hacked" situations are actually "my account is hacked."

• Check your Apple ID or Google account for the list of signed-in devices. Remove ones you don't recognize.
• Check recent security activity in your email account.
• Check social media for posts or messages you didn't send.
• Look at your bank and card statements for odd charges.

Step 8: Check your phone bill and carrier account

Look for premium text subscriptions, international calls, or charges you don't recognize.

How to clean up a phone you think is infected

If the checks above turned up something suspicious:

1. Disconnect from the internet briefly (airplane mode) if you think something is actively stealing data, while you figure out what to remove.
2. Remove suspicious apps. On Android, if an app won't uninstall, it may have Device Admin rights. Remove those rights in Settings first, then uninstall. Booting into Safe Mode (which temporarily disables third-party apps) can help remove stubborn ones.
3. Clear browser data if pop-ups come from your browser.
4. Remove unknown configuration profiles or device management settings (if your phone isn't managed by your work or school).
5. Change your important passwords from a different, trusted device: email first (since it's used to reset everything else), then banking, Apple/Google account, and social media.
6. Turn on two-factor authentication for important accounts.
7. Tell your bank if you see suspicious charges.

When to factory reset

If problems keep coming back after you've removed suspicious apps, a factory reset wipes your phone and reinstalls a clean system.

Before you do:

• Back up photos, contacts, and important files. But be careful: restoring a full backup can sometimes restore the problem app too. Consider restoring only photos and contacts, and reinstalling apps one by one from the official store.
• Know your Apple ID or Google account password, because you'll need it after the reset.
• Write down two-factor authentication backup codes or make sure you can access your authenticator app.

A factory reset is a big step, but it's often the most reliable fix for stubborn malware.

Stalkerware and personal safety

If you suspect someone you know (a partner, ex, or family member) has put tracking software on your phone or is monitoring your accounts, this is a safety issue as well as a tech issue.

• Removing stalkerware may alert the person who installed it, which could escalate a dangerous situation.
• Consider reaching out to a domestic violence hotline or advocate who can help you plan safely before making changes.
• Check for shared accounts, like a shared Apple ID or Google account, family location sharing, or a partner knowing your passcode.
• Use a safer device (like a library computer or a trusted friend's phone) for sensitive searches and communication.

If you're in immediate danger, call emergency services.

Signs your work phone might be compromised

If your phone is provided or managed by your employer or school, don't try to fix it yourself. Contact your IT department right away. Work phones may have management software and security settings you shouldn't remove, and a compromised work device may put your organization's data at risk.

"I already tapped the link." What now?

It happens to careful people every day. Don't panic, and don't let embarrassment slow you down. What you do next depends on what happened.

• You only opened a scam web page and closed it. Clear your browser history and website data. In most cases, that's it.
• You typed a password into a fake login page. Go straight to the real website or app (not through the link) and change that password. If you used the same password anywhere else, change it there too. Turn on two-factor authentication.
• You entered card or bank details. Call your bank or card issuer using the number on the back of your card. Ask them to block the card and watch for fraud.
• You installed an app or profile the page told you to. Remove it using the cleanup steps above, then change your important passwords from another device.
• You gave a caller or texter a verification code. Assume they're trying to get into that account right now. Change the password and check the account's security settings immediately.
• You paid a "support" person or let them remote into your device. Contact your bank, remove any remote-access app they had you install, and consider reporting the scam.

Speed matters more than perfection. The sooner you change passwords and alert your bank, the less damage a scammer can do.

Habits that prevent most phone problems

• Keep your phone and apps updated. Turn on automatic updates.
• Install apps only from official app stores, and check reviews and the developer before installing.
• Don't jailbreak or root your phone unless you really understand the risks.
• Be stingy with permissions. Say no unless an app clearly needs it.
• Treat links in texts and emails with suspicion. Delivery notices, "your account is locked," "you won a prize," and toll or parking fine texts are common scams. Go to the company's website or app directly instead.
• Use a strong passcode (not 1234 or your birthday) and biometric unlock.
• Use a password manager and unique passwords.
• Turn on two-factor authentication, preferably with an authenticator app or passkeys.
• Turn on "Find My" or "Find My Device" so you can locate or wipe a lost phone.
• Be careful with public Wi-Fi. Most websites use encryption now, but avoid logging into sensitive accounts on networks you don't trust.
• Back up regularly, so a reset isn't a disaster.

Quick diagnosis table

Frequently asked questions

Can iPhones get viruses?

It's uncommon for iPhones to get traditional malware, especially if you keep iOS updated and only install from the App Store. But iPhone users can absolutely fall for phishing, scam websites, malicious configuration profiles, and account takeovers.

Can Android phones get viruses?

Yes, Android malware exists, especially through apps from outside the Google Play Store. Keeping Play Protect on, updating your phone, and only installing trusted apps cut the risk a lot.

Can opening a text message give my phone a virus?

Normally, just opening a text isn't enough. The danger comes from tapping links, downloading attachments, or entering information.

Do I need antivirus on my phone?

On iPhone, generally no; keep it updated and avoid sketchy profiles and apps. On Android, Google Play Protect is built in, and a reputable security app can add another layer, especially if you install apps from outside the Play Store.

Can someone hack my phone by calling me?

Just answering a call doesn't usually hack your phone. But scam callers may try to trick you into giving codes, passwords, or remote access. Never share verification codes with callers, even if they say they're from your bank or phone company.

Will a factory reset remove malware?

In most cases, yes. Just be careful not to restore the problem app from a backup afterward.

Should I take my phone to a store?

If you're not comfortable doing the steps yourself, your phone maker's official support (in store or online) or your carrier can help. Avoid random repair shops offering "virus removal" for a fee unless they're reputable.

The takeaway

Most phones that are slow, hot, or glitchy aren't infected. They're full, old, or running a misbehaving app. Browser pop-ups screaming that you have viruses are scams, so close them and move on. Real warning signs are things like ads outside of apps, apps you didn't install, messages you didn't send, strange charges, and login alerts you didn't trigger.

When something seems off: restart, update, remove suspicious apps, check permissions and profiles, change important passwords from another device, and turn on two-factor authentication. Use a factory reset if problems keep coming back. Get help from your carrier, bank, IT department, or a safety advocate when money, work data, or personal safety is involved.

If something here doesn't match what you see on your phone, check your phone maker's official support pages. And if something looks off, tell Austin.