How to Detect Spyware on Your Phone?

Stalkerware, spyware, phone spying apps, phone monitoring without consent — this is a real problem that private individuals report more and more often.

In this article, I explain how to detect spying apps on Android and iPhone, what the symptoms of stalkerware are, and how to respond safely without destroying digital evidence.

Today, a smartphone is the center of our lives.
Conversations, photos, location data, passwords, contacts, medical and professional information.

And that is exactly why it is an ideal target for spying software —
known as stalkerware or spyware.

Such applications are very often installed without the phone owner’s knowledge.
Most commonly by someone close:

• a partner or former partner,
• a family member,
• sometimes even an employer.

The goal is simple:
silent monitoring of another person’s life — messages, location, calls, and even the microphone and camera.

From a forensic expert’s perspective

As a court-appointed digital forensics expert, I increasingly encounter cases where private individuals were unaware for months or even years that their phone was being monitored.

Stalkerware is not just a technical issue.
Very often it is part of:

• domestic violence,
• coercive control in relationships,
• violations of freedom and privacy.

The good news is that such applications can be detected.
The bad news is that improper action can make the situation worse.

⚠️ Important warning

If you suspect stalking or abuse:

Do not remove anything immediately.

Removing the application may:

• alert the perpetrator,
• escalate the situation,
• destroy potential evidence.

First:

• consult a specialist,
• contact a support organization
  (e.g. domestic violence helplines in your country),
• plan your personal safety.

Symptoms that may indicate stalkerware

Spyware is designed to operate silently — but it always leaves traces.

Pay attention to:

• 🔋 rapid battery drain,
• 📡 increased mobile data usage,
• 🔥 phone overheating for no clear reason,
• 🐌 slow device performance,
• 📱 unknown applications or system-like app names,
• 🔔 strange notifications or delayed shutdown,
• 🟢🟠 green/orange dots on iOS (camera/microphone access).

A single symptom does not necessarily mean spyware.
But several combined + suspicious behavior from another person is a serious warning sign.

How to check your phone yourself

Android

1. Application list
   Settings → Apps → All apps
   Look for unknown apps or those with excessive permissions.

2. Device admin apps
   Settings → Security → Device admin apps

3. Service code
   In the Phone app, dial:
   *#*#001##*#*
   (not always effective, but sometimes helpful)

4. Google Play Protect
   Play Store → Profile → Play Protect → Scan

5. Battery and data usage
   Check which apps are running in the background.

iOS (iPhone)

1. Profiles & device management
   Settings → General → VPN & Device Management

2. App permissions
   Settings → Privacy & Security

3. Safety Check (iOS 16+)
   Apple’s built-in tool for relationship-related security risks.

4. App list
   Stalkerware on iOS is rarer, but possible — especially on jailbroken devices.

Recommended tools

• Malwarebytes – very effective at detecting stalkerware
• Bitdefender / Kaspersky – detect many commercial spyware tools
• Avast / Norton 360 – mobile security suites
• ProtectStar Anti Spy / Incognito – specialized anti-spyware tools

⚠️ Note: some spyware applications can detect scanning attempts.

What to do if spyware is detected?

• 📸 take screenshots (preserve evidence),
• 🔒 do not remove it immediately,
• 🔁 factory reset (after a secure backup),
• 🔑 change all passwords from another device,
• 🧑‍⚖️ consult a forensic expert if legal action is possible,
• 🚓 report it — police or support organizations.

How to protect yourself in the future

• strong PIN + biometrics,
• never share your phone,
• regular system updates,
• avoid installing apps from unknown sources,
• password manager + 2FA.

Privacy is a right, not a privilege

If you feel someone is crossing your digital boundaries — you are not overreacting.
This is a real problem I see regularly in forensic practice.

If you need professional phone analysis or digital evidence preservation:

👉 https://www.wichran.pl

Piotr Wichrań
Court-appointed digital forensics expert
Digital Forensics Wichrań

Checklist: quick phone inspection