How to Check If Your Phone Is Hacked (Android)

Short answer: Symptoms like battery drain and heat do not indicate a hacked phone — they match ordinary causes. Check permissions instead. Three screens matter on Android: Settings, Accessibility, Downloaded apps, where a service can read everything on screen; Settings, Security, Device admin apps, where an app can lock or wipe the phone and cannot be uninstalled until revoked; and Settings, Apps, Special app access, Notification access, where an app reads every notification. Anything there you did not deliberately enable is the finding. If someone with physical access installed it, get advice before removing it.

Most articles on this answer with a symptom list: battery draining, phone running hot, strange noises on calls. Those are all real symptoms of a compromised phone. They're also symptoms of an old battery, a warm room and a bad signal.

Symptoms won't tell you. Permissions will.

Check every permission that matters at once

DeviceGPT for Android · free · no root

Install

Check the three screens that actually matter

Software that monitors a phone needs specific access, and Android makes you grant it explicitly. So instead of guessing from behaviour, look at what's been granted.

1. Accessibility — Settings → Accessibility → Downloaded apps

Accessibility services can read everything on your screen and act on your behalf. It's the single most powerful permission on Android and the one monitoring software wants most. Very few legitimate apps need it: screen readers, password managers, some automation tools. If there's something here you didn't deliberately enable, that's your answer.

2. Device admin — Settings → Security → Device admin apps

An app here can lock or wipe your phone, enforce a password policy, and cannot be uninstalled until you revoke it. Work profiles use this legitimately. Not much else should.

3. Notification access — Settings → Apps → Special app access → Notification access

An app here reads every notification, which means every message preview, every code, every email subject — without needing access to any of those apps directly.

Then check what's hiding

An app can be installed with no launcher icon, which is how monitoring software stays out of sight. Settings → Apps → See all apps → three dots → Show system lists everything, but it runs to hundreds of entries and doesn't mark which ones lack an icon.

We wrote a separate guide on finding hidden apps on Android — it covers what's ordinary (keyboards, carrier services) and what isn't.

The other signals worth a look

• Is the device rooted? You didn't root it, so if it reports as rooted, someone did.
• Is USB debugging on? It allows deep access over a cable. Off, unless you're a developer.
• Is the camera or microphone active right now? Android 12+ shows a green dot; a phone

using either while idle is worth investigating.

• Unknown certificates or a VPN you didn't set up — both can route your traffic elsewhere.

Checking it in one pass

DeviceGPT's Zero Trust Dashboard runs these checks and scores the device 0–100 across three sections — app privacy risk, network trust, and device integrity. It reports apps with screen-recording or accessibility access, whether the camera or microphone is in use, root and bootloader status, developer mode, USB debugging, overlay permissions and notification listeners, plus DNS manipulation and whether traffic is being intercepted.

It gives you a scored, structured answer instead of a symptom list. Free, no root, and the scan stays on the device.

If you find something

1. Don't remove it immediately if someone with physical access to your phone installed it.

Monitoring apps can alert whoever set them up when they stop reporting. If your personal safety is a factor, get advice first — Refuge runs a tech-abuse service in the UK, and the National Domestic Violence Hotline does the same in the US.

1. Otherwise: revoke device admin, revoke accessibility, then uninstall — in that order.
2. Change passwords from a different device, and turn on two-factor authentication.
3. A factory reset removes almost everything, but restoring a backup can bring it straight back.

What nobody can tell you

No app can confirm you are not being monitored. It can tell you what's installed, what's permitted, and what's running. Anything promising a definitive "you're clean" verdict is selling certainty it doesn't have.

---

Check every permission that matters at once

DeviceGPT · Android · free, no root

Scores your device 0-100 across app privacy, network trust and device integrity — accessibility services, screen recorders, root and USB debugging. The scan stays on your device.

Install free on Google PlaySee what it does →