Signs Your Phone Has Been Hacked — And What to Do Right Now

If your phone is acting strangely — running hot for no reason, losing battery fast, or sending texts you never typed — it may have been hacked. The good news: you can find out quickly, and the fix is manageable even if you're not a tech person.

This guide walks you through exactly what to look for, what to do if your phone is compromised, and how to keep it from happening again.

Last updated: 2026-06-27

The Bottom Line First

Most "hacked phones" show at least two or three of these symptoms at the same time:

Battery draining much faster than usual
Phone running hot when you're not using it
Strange charges on your phone bill
Apps you don't recognize
Friends receiving odd texts or emails "from you"
Phone suddenly slowing down
Your accounts getting locked out

One symptom alone might be a normal tech glitch. Two or more together — especially the billing charges or mystery apps — means it's time to act.

Warning Sign #1: Your Battery Is Dying Much Faster Than Usual

A healthy phone battery lasts most of a day with normal use. If yours is draining to empty by noon when it used to last until evening — and you haven't changed how you use it — something may be running in the background without your knowledge.

Hackers often install software that quietly collects your information and sends it elsewhere. That process uses your battery and data around the clock, even when your screen is off.

What's normal vs. what's not: It's normal for battery life to fade a little over a year or two of use. What's not normal is a sudden, dramatic change — going from 12 hours to 4 hours in a matter of days.

Warning Sign #2: Your Phone Feels Hot for No Reason

Pick up your phone when you haven't been using it. Is it warm or hot to the touch?

A phone that's working hard — streaming video, downloading a big update — naturally gets warm. But a phone sitting idle on your table should be room temperature. If it's consistently warm when you haven't touched it, something is running in the background.

This is one of the most reliable physical signs of a compromised phone, and seniors often notice it first because it feels physically off.

Warning Sign #3: Strange Charges on Your Phone Bill

Pull up your most recent phone bill and look at two things:

Data usage: Has your monthly data jumped significantly? Spyware and tracking software sends your personal information to servers, which uses your mobile data.
Unknown charges: Small charges of $1–$10 from unfamiliar companies are a common sign of a scam called "cramming," where fraudulent subscriptions are added to your bill.

If you see anything unfamiliar, call your carrier's customer service number (found on your bill) immediately. You can dispute charges and ask them to block third-party billing on your account.

Warning Sign #4: Apps You Don't Remember Installing

Go to your phone's list of installed apps and scroll through slowly. If you see an app you don't recognize — especially one with a vague name like "System Service" or "Phone Optimizer" — that's a red flag.

Legitimate phones come with a predictable set of pre-installed apps (camera, phone, messages, calendar). Anything beyond the basics that you didn't personally download deserves a closer look.

On iPhone: Go to Settings → General → iPhone Storage. You'll see all installed apps listed.

On Android: Go to Settings → Apps (or Application Manager). Tap "All" to see everything installed.

If you find something unfamiliar, don't open it. Take a photo of the screen and call a trusted family member or your carrier's support line before doing anything else.

Warning Sign #5: Your Friends Are Getting Odd Messages From You

This is often how people find out they've been hacked — a friend calls to ask, "Did you really send me that link?"

Hackers who gain access to your phone may send phishing texts or emails to everyone in your contacts. The messages often look like they come from you, which makes your friends more likely to click. From there, the infection can spread.

If two or more people tell you they got a strange message from your number or email, take it seriously immediately.

Warning Sign #6: You're Getting Locked Out of Your Accounts

If you try to log into your email, your bank, or your Amazon account and the password suddenly doesn't work — someone may have changed it.

Hackers who get into your phone can access your saved passwords and email. From there, they reset passwords on your important accounts and lock you out. This is called an "account takeover," and it can happen very fast.

If you're locked out of your email specifically, that's the most urgent problem. Your email is the key to everything else — most accounts use email to reset passwords.

Warning Sign #7: Your Phone Is Sluggish or Restarts on Its Own

A phone that suddenly becomes slow, freezes often, or restarts by itself when you're not doing anything unusual may have software running in the background that's using up its processing power.

On its own, a slow phone is usually just a sign of an old device that needs updates. But paired with any other signs on this list, it's worth investigating.

What to Do If You Think Your Phone Has Been Hacked

Step 1: Don't panic — and don't wait.

The sooner you act, the less damage is done. Take a breath and work through these steps one at a time.

Step 2: Change your most important passwords from a different device.

If you have access to a computer or tablet, use that instead of your phone. Change these first, in this order:

Your email password
Your bank and financial accounts
Your phone carrier account

Use a password you've never used before — not a variation of an old one.

Step 3: Turn on two-factor authentication.

This is a setting that requires a second step to log in — usually a short code sent to your phone or email. Even if someone steals your password, they can't get in without that code. Most banks and email providers offer this in their security settings.

Step 4: Run a security scan on your phone.

On iPhone: iPhones have strong built-in protections. Go to Settings → Privacy & Security and review which apps have access to your location, microphone, and camera. Revoke anything that seems unnecessary.

On Android: Download a reputable security app. Bitdefender Mobile Security and Malwarebytes are both well-regarded. Run a scan to identify and remove anything suspicious.

Step 5: Remove unfamiliar apps.

Delete anything you don't recognize. If you're not sure whether an app is legitimate, search its exact name online from a computer before deciding.

Step 6: Consider a factory reset if problems continue.

A factory reset wipes your phone back to its original state — like it was the day you bought it. This is the nuclear option, but it removes virtually everything a hacker could have installed. Before doing this, back up your photos and contacts to iCloud (iPhone) or Google Drive (Android).

Protect Your Identity — Before and After a Hack

When your phone is compromised, your personal information can travel fast. Hackers may have seen your Social Security number, bank account numbers, or login credentials. Even if you've secured your phone, that information is already out there.

This is exactly where identity theft protection earns its value.

Aura monitors your Social Security number, bank accounts, and credit reports around the clock. If your information shows up somewhere it shouldn't — a dark web forum, a new credit application you didn't make — Aura alerts you immediately so you can act before the damage spreads.

Aura also includes a $1 million identity theft insurance policy and a dedicated U.S.-based support team that walks you through the recovery process step by step. For seniors navigating this for the first time, that human support is often worth as much as the monitoring itself.

Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.

When to Call for Help

You don't have to figure this out alone. These are good times to call for support:

Your phone carrier: They can check your account for unauthorized activity, block suspicious charges, and help reset your account if it's been taken over. The number is on the back of your bill or on their website.
A trusted family member: Sometimes the simplest fix is having someone sit with you and go through the steps. Ask for help — there's no shame in it.
Your bank: If you see any suspicious charges on your accounts, call the number on the back of your bank card immediately. Banks have fraud departments open 24/7.
The FTC: The Federal Trade Commission handles identity theft reports at IdentityTheft.gov. Filing a report creates an official record and gives you a personalized recovery plan.

A Simple Rule to Remember

Think of your phone like your front door. You wouldn't leave it open, and you'd notice quickly if something seemed off. Trust that instinct. If your phone feels wrong — slow, hot, behaving strangely — it probably is worth looking into.

The steps in this guide take less than an hour. That hour of attention now can save you months of headaches later.

Stay One Step Ahead

The best protection is the kind you set up before anything goes wrong. If you found this article useful, join the ClearShield weekly newsletter — plain-language security updates every week, nothing technical, no spam. Just the things that actually matter for staying safe online.

Subscribe below and get our free checklist: "10 Things to Do Right Now to Secure Your Phone."

Get the Free Phone Security Checklist

10 simple steps — takes about 20 minutes. We'll send it right to your inbox.

ClearShield publishes guides for adults 55 and older who want straightforward answers to online safety questions. We never sell your information.