Your phone holds your bank logins, private photos, work emails, and every conversation you have had in years. That makes it a prime target for malware — malicious software designed to steal your data, spy on you, or hijack your phone for someone else’s profit. The good news: in 2026, checking your phone for viruses and removing them is something you can do yourself in under an hour, no tech degree required. This guide shows you exactly how, for both Android and iPhone.
Warning Signs Your Phone Might Have a Virus
Malware tries to stay hidden, but it almost always leaves clues. If you notice one or more of these, it is time to investigate:
Battery draining much faster than usual. Every phone loses battery capacity over time, but a sudden, sharp drop — your phone dying by mid-afternoon when it used to last all day — is a classic malware symptom. Malicious apps run constantly in the background, mining data or showing ads, and that burns power.
Phone getting hot when you are not using it. A warm phone during gaming or charging is normal. A phone that feels hot sitting idle on your desk is not. Background malware activity generates heat.
Pop-up ads appearing outside your browser. Ads inside apps and websites are normal. Ads popping up on your home screen, lock screen, or over other apps are not — that is adware, one of the most common phone infections.
Apps you do not remember installing. Scroll through your app list. If you spot apps with generic names like “Super Cleaner,” “Free Booster,” or strange icons you never downloaded, treat them as suspects.
Unexplained spike in mobile data usage. Malware sends your data to remote servers, which eats mobile data. Check Settings > Network/Data usage — if an app you barely use has consumed gigabytes, something is wrong.
Slower performance and frequent crashes. A phone that suddenly lags, freezes, or restarts on its own may be overloaded by malicious background processes.
Strange texts, calls, or charges. Premium-rate SMS malware silently texts expensive numbers from your phone. If friends report weird messages from you, or your bill shows charges you did not make, act fast.
Browser redirects or a changed homepage. If your browser keeps jumping to strange sites or your homepage changed without your permission, you likely have browser hijacker malware.
One symptom alone might have an innocent explanation. Two or three together mean you should run the
checks below today, not next week.
How to Check an Android Phone for Viruses
Android is more open than iPhone, which means more flexibility — and more ways for malware to sneak in. Work through these checks in order.
1. Run a Google Play Protect scan. Play Protect is Google’s built-in malware scanner, and it is already on your phone. Open the Play Store, tap your profile picture, tap Play Protect, then tap Scan. It checks every installed app against Google’s malware database. If it flags something, follow its recommendation to uninstall immediately. Also make sure “Scan apps with Play Protect” and “Improve harmful app detection” are both turned on in the Play Protect settings.
2. Boot into Safe Mode. Safe Mode loads only the apps your phone shipped with — no third-party apps run at all. To enter it: press and hold the power button, then long-press Power off until the Safe mode prompt appears, and tap OK. If your battery drain, pop-ups, or crashes disappear in Safe Mode, you have confirmed a third-party app is the culprit. Restart normally to exit Safe Mode.
3. Audit your installed apps. Go to Settings > Apps > See all apps. Look through the full list slowly. Tap any app you do not recognize and check its details — when was it installed, what permissions does it have? Pay special attention to apps with no icon, blank names, or names designed to look like system apps (“Android System Update,” “Google Services Framework” with odd spelling). Real system apps cannot be uninstalled; fake ones often can.
4. Check Device admin apps. Some malware grants itself device administrator rights to prevent uninstallation. Go to Settings > Security > Device admin apps (on Samsung: Settings > Biometrics and security > Other security settings > Device admin apps). If you see any app here that you do not recognize or did not deliberately authorize — especially flashlight apps, cleaners, or games — deactivate it.
5. Review app permissions. Go to Settings > Privacy > Permission manager. Tap through sensitive permissions — SMS, Phone, Location, Camera, Microphone — and look at which apps hold them. A wallpaper app with SMS access or a calculator with location tracking is a red flag. Change anything suspicious to “Don’t allow.”
6. Check per-app data and battery usage. Go to Settings > Battery > Battery usage and Settings > Network > Data usage. An app you rarely open sitting at the top of either list deserves a closer look.
How to Check an iPhone for Viruses
Here is the honest truth: true iPhone viruses are extremely rare. Apple’s closed system — every app sandboxed, every app reviewed before reaching the App Store — makes classic viruses almost nonexistent on non-jailbroken iPhones. When an iPhone “acts infected,” the cause is almost always one of three things: a malicious configuration profile, a rogue app, or aggressive Safari adware. Check these instead of hunting for a virus scanner (which you do not need on iPhone):
Look for apps you did not install. Swipe to the App Library and scan the full list, or use Spotlight search. Delete anything unfamiliar.
Check for unknown configuration profiles. This is the big one. Profiles can change your phone’s network settings, install certificates, and redirect traffic. Go to Settings > General > VPN & Device Management. If you see any profile you did not knowingly install — especially from a website, an email attachment, or a “free” service — that is very likely your problem. (If the menu item does not appear at all, you have no profiles, which is good.)
Inspect Safari. Go to Settings > Safari and check for extensions you did not add (Settings > Safari > Extensions). Fake “ad blockers” and “video downloaders” are common culprits. Also check that your default search engine has not been changed.
Check your subscriptions. Go to Settings > [your name] > Subscriptions. Malware-adjacent scam apps sometimes sign you up for weekly charges. Cancel anything you do not recognize.
Jailbroken iPhones are the exception. If your iPhone is jailbroken, all of Apple’s protections are bypassed and real malware is genuinely possible. If you are jailbroken and seeing symptoms, skip straight to the factory reset section below.
How to Remove Malware from an Android Phone
Found something suspicious? Remove it properly — just deleting the icon is not always enough.
1. Enter Safe Mode. As described above: long-press Power off, tap Safe mode. Malware often blocks uninstallation while running normally; Safe Mode prevents it from launching.
2. Uninstall the suspicious apps. Go to Settings > Apps, tap the malicious app, and tap Uninstall. If the Uninstall button is greyed out, the app likely has device administrator rights — go to Settings > Security > Device admin apps, deactivate it, then return and uninstall.
3. Clear your browser data. If you had pop-ups or redirects, open Chrome, go to Settings > Privacy and security > Clear browsing data, select All time, check browsing history, cookies, and cached images, then clear. This wipes hijacker settings stored in the browser.
4. Revoke leftover permissions. Go to Settings > Privacy > Permission manager and remove any sensitive permissions granted to apps you are unsure about.
5. Run Play Protect again. Open the Play Store > Play Protect > Scan to confirm the threat is gone.
6. Restart normally and monitor. Reboot your phone and use it for a day. If the symptoms are gone — no pop-ups, battery back to normal — you are clean. If problems return immediately, the malware may have buried itself deeper: move to the factory reset section.
How to Remove Malware from an iPhone
iPhone cleanup is simpler, because there is less malware can do in the first place.
1. Delete suspicious apps. Long-press the app icon, tap Remove App, then Delete App. Do this for anything you do not recognize or no longer trust.
2. Remove unknown configuration profiles. Go to Settings > General > VPN & Device Management, tap any profile you did not install, and tap Remove Profile. Enter your passcode if asked. This single step fixes the majority of “iPhone virus” cases.
3. Clear Safari data. Go to Settings > Safari > Clear History and Website Data. This removes tracking cookies, hijacked settings, and cached malicious pages.
4. Remove unknown Safari extensions. Go to Settings > Safari > Extensions and turn off or delete anything unfamiliar.
5. Update iOS. Go to Settings > General > Software Update and install the latest version. Apple patches security holes with every update, and running the newest iOS closes the doors malware walked through.
6. Restart your iPhone. A simple restart clears temporary processes. Check that the symptoms are gone.
When to Factory Reset (and How to Do It Safely)
A factory reset is the nuclear option — it wipes everything and returns your phone to out-of-the-box condition. Use it when: malware keeps coming back after removal, you cannot uninstall a malicious app at all, system settings change on their own, or your phone is jailbroken/rooted and infected. It is drastic, but it works against virtually everything.
Back up first — carefully. Save your photos, contacts, and important files to Google Photos/iCloud or a computer. One caution: if you restore a full backup afterward, you could restore the malware too. Back up your personal files (photos, documents), but plan to reinstall apps fresh from the official store rather than restoring app data blindly.
On Android: Go to Settings > System > Reset options > Erase all data (factory reset). Confirm, and let the phone wipe itself. When it restarts, sign in and reinstall only apps you actually need, from the Play Store.
On iPhone: Go to Settings > General > Transfer or Reset iPhone > Erase All Content and Settings. Confirm with your passcode and Apple ID password. Set the phone up fresh, or restore from an iCloud backup made before the infection started.
After a reset, change the passwords of your important accounts (email, banking) — if malware was present, assume it may have seen them.
How to Keep Your Phone Virus-Free Going Forward
Removing malware feels good; never getting it again feels better. These habits make reinfection unlikely:
Install apps only from official stores. The Google Play Store and Apple App Store screen apps for malware. Sideloading APK files from random websites is the number one way Android phones get infected. If you must sideload, only use sources you would bet money on.
Keep your phone and apps updated. Those update notifications are security patches, not annoyances. Turn on automatic updates for both the operating system and your apps.
Read permissions before tapping Allow. Ask yourself: does this flashlight app really need my contacts? Does this game need SMS access? Deny anything that does not make sense for what the app does.
Do not tap suspicious links. Most phone malware in 2026 arrives through phishing — fake delivery texts, “your package is held” messages, too-good-to-be-true prize notifications. If a text urges you to act urgently and tap a link, assume it is a trap. Go to the company’s official site or app directly instead.
Avoid “free” versions of paid apps. Cracked apps and modded APKs promising premium features for free are malware delivery vehicles. If an app is worth having, it is worth paying for — or finding a legitimate free alternative.
Keep Play Protect on (Android). Never disable Google Play Protect. It is free, automatic, and catches most threats before they can do damage.
Back up regularly. A current backup turns a malware disaster from a catastrophe into an inconvenience. Automatic cloud backup takes five minutes to set up and runs on its own.
Phone malware sounds scary, but it loses most of its power the moment you know what to look for. Run a scan, check your apps and profiles, remove what should not be there — and if all else fails, the factory reset is always there as your final, unbeatable move. Stay skeptical of strange links and stranger apps, and your phone will stay yours.