Sluggish phone, ads, hot battery, data spikes — could be malware, or something else. This guide focuses on what actually matters and how to clean up.
Includes a symptom checker and platform steps. All quizzes · Jump to checker
📑 Table of Contents
🔍 12 signs your phone has a virus
Modern malware doesn't destroy your phone or make it unusable — its goal is to stay hidden for as long as possible while stealing data. But there are telltale indicators:
High-alert signs 🔴
- 1. Pop-up ads outside the browser: If you see ads on your home screen or while using WhatsApp, it's a clear sign of Adware infection.
- 2. Apps you don't remember installing: Malware often downloads companion apps in the background. If you see unfamiliar icons with generic names like "System Manager" or "Battery Saver", be suspicious.
- 3. Abnormally high data usage: If your data plan runs out after 10 days and you haven't changed your habits, the virus could be uploading your photos or mining data to remote servers.
- 4. Unknown charges on your bill: "Fleeceware" malware sends premium-rate SMS or subscribes you to paid services without permission. Check your phone bill immediately.
Medium-alert signs 🟡
- 5. Battery drains dramatically: A virus running 24/7 in the background consumes enormous energy. If your phone can't make it past noon, investigate (after ruling out a battery older than 3 years).
- 6. Phone overheats while idle: If your phone is hot to the touch while locked in your pocket, the processor is running at 100% — a possible Cryptominer.
- 7. Agonising performance: Apps take seconds to open and the keyboard freezes mid-sentence.
- 8. Browser redirects: You open Chrome to go to Google but get redirected to a fake prize page or virus warning. This is a Browser Hijacker.
- 9. Camera/mic active without reason: The green dot (camera) or orange dot (microphone) appears in the status bar while you're on the home screen with no app open. (Spyware red alert!)
Low-alert signs 🟢
- 10. Contacts receive spam from your number: Friends report receiving weird links via WhatsApp or SMS from you.
- 11. Storage fills up on its own: Malware downloads hidden packages that eat up device storage.
- 12. Frequent app crashes: Legitimate apps crash because malware interferes with RAM allocation.
💡 Important: A single "low" sign doesn't necessarily mean malware. But if you notice two or more signs at once, act fast.
🦠 Types of malware that attack phones
| Malware Type | How It Works | Main Sign | Platform |
|---|---|---|---|
| Adware | Injects ads across the entire OS to generate revenue for the attacker. | Constant pop-ups | Almost exclusively Android |
| Banking Trojan | Overlays a fake screen identical to your banking app when you try to log in. | Failed bank logins | Mostly Android |
| Spyware / Stalkerware | Records keystrokes, GPS location, photos, and microphone. Often installed by partners or employers. | Camera indicator active | Android & iPhone |
| Ransomware | Encrypts your photos and locks the device, demanding cryptocurrency payment. | Locked screen with ransom note | Android |
| Cryptominer | Uses your phone's processor to mine cryptocurrency for the attacker. | Extreme overheating | Android |
🔎 How to check if your phone is infected
Android audit 🤖
Go to Google Play Store → Tap your profile picture → Play Protect → "Scan". Google will check all installed apps for known malware signatures.
Go to Settings → Security → Device admin apps. If you see a suspicious app (anything other than "Find My Device" or "Google Pay") with the toggle on, you have a trojan. It was given permission to prevent uninstallation.
Go to Settings → Accessibility → Installed/Downloaded services. Banking trojans abuse accessibility services (designed for visually impaired users) to "read" the screen and steal your passwords as you type them. Disable any unknown app here.
iPhone audit 🍎
Swipe down and use the iOS search. Type "Cydia", "Sileo" or "Zebra". If any of these apps appear and you didn't install them, someone has jailbroken your iPhone to install spyware.
Go to Settings → General → VPN & Device Management. If your phone isn't a work device and you see a "Configuration Profile" installed there, someone has silent remote control over your iPhone.
⚡ Found something suspicious? Secure your passwords now
If malware has been on your phone, it already has your credentials. Change them urgently from a clean computer using our secure generator.
🛡️ Generate Emergency Passwords🤖 How to remove a virus from Android step by step
- Isolate the phone: Turn on Airplane Mode to cut the attacker's communication channel.
- Boot into Safe Mode: Press and hold the physical power button. When the on-screen "Power Off" button appears, long-press it for 3 seconds. You'll be asked to reboot in Safe Mode. Accept.
- Remove the intruder: In Safe Mode (malware will be dormant), go to Settings > Apps and uninstall the suspicious application.
- Clear browser data: Go to Settings > Apps > Chrome > Storage > Clear Data & Cache.
- Restart normally: The virus should be gone. Run a follow-up scan with Malwarebytes (free) for thorough cleanup.
(If the virus won't let you uninstall the app because the button is greyed out, go back to "Device admin apps" and revoke its permission first.)
🍎 How to remove a virus from iPhone step by step
Since iOS is a sandboxed system, traditional "viruses" don't exist on it. What you have is a malicious app, a deceptive calendar subscription, or a browser hijack.
- Clear Safari data: Go to Settings > Safari > "Clear History and Website Data". This eliminates 90% of pop-ups that pretend to be virus warnings.
- Delete suspicious calendar subscriptions: Go to Settings > Calendar > Accounts. If you see "Calendar Subscriptions" that generate fake virus alerts, remove them.
- Delete MDM profiles: Remove any profiles under Settings > General > VPN & Device Management.
- For serious infections (Pegasus or jailbreak): Connect the iPhone to a PC, open iTunes/Finder and select "Restore iPhone". This reinstalls the entire operating system from Apple's servers, destroying any malware.
🛡️ Best mobile antivirus apps in 2026
| Antivirus | Platform | Best For |
|---|---|---|
| Malwarebytes | Android / iOS | Best free engine for cleaning malware that's already on the device. |
| Bitdefender Mobile | Android / iOS | Best real-time protection; intercepts malicious APKs before they install. |
| Google Play Protect | Android (Built-in) | Zero extra battery drain, silent. Good enough for average users. |
✅ Verdict: On iPhone, don't install antivirus apps (they're useless due to iOS architecture — they can only scan WiFi networks). On Android, if you sideload apps outside the Play Store, pay for Bitdefender. Otherwise, running Malwarebytes once a month is enough.
🔒 How to prevent future infections
Prevention is infinitely better (and cheaper) than a factory reset. Follow these digital hygiene rules:
- ✅ Zero sideloaded APKs: Only download from Google Play or Apple's App Store. No Aptoide, no shady forums.
- ✅ Update without thinking: If a security patch drops for iOS or Android, install it that same night.
- ✅ Never trust SMS links: Your bank will NEVER send you a text with a link saying your account is blocked. That's Smishing.
- ✅ Enable Two-Factor Authentication (2FA): Protect your accounts so that even if malware steals your password, attackers can't get in.
- ✅ Use unique, randomly generated passwords: This prevents one compromised account from triggering a domino effect across all your services.
🔍 Symptom Checker: Does Your Phone Have a Virus?
Check the symptoms you are currently noticing on your device. The more you check, the higher the probability of an active infection.
🚨 Interactive Mobile Malware Detector — 12 Warning Signs
Check the symptoms you notice on your phone. Your risk assessment appears instantly.
Frequently asked questions
Tap a question to expand the answer.
Virus from a website only?
Rare but possible via browser bugs — patch OS and browser.
Factory reset fixes it?
Almost always for normal phones; persistence in recovery is a nation-state edge case.
"(3) viruses" pop-up?
Scareware — close it; the "clean" button is the trap.
iPhones?
Harder target; profiles, bad apps, jailbreak, targeted spyware still exist.
Malware vs virus?
Virus is a subset; phones mostly see trojans/adware.
How often to scan?
Monthly routine is fine; immediate scan when behavior changes.