How to Check If Your Phone Is Hacked in India

Your smartphone holds your bank accounts, Aadhaar details, UPI credentials, personal photos, and private conversations. In India, where mobile internet penetration has exploded past 800 million users, hackers have never had a bigger playground. And the unsettling truth? Most people don’t even know their device has been compromised until real damage is done.

Whether you’re using a budget Android on Jio or a flagship iPhone on Airtel, the signs of a hacked phone are surprisingly similar — and surprisingly easy to miss. This guide walks you through every red flag, every diagnostic step, and every recovery action you need to take right now.

Why Phone Hacking Is Surging in India

India ranks among the top five countries globally for mobile malware infections. The reasons are specific to how Indians use their phones: mass reliance on WhatsApp for financial transactions, widespread use of third-party APKs outside the Play Store, and the habit of connecting to free public Wi-Fi at railway stations, airports, and chai shops.

Cybercriminals in India also exploit popular scams — fake KYC update calls posing as SBI or HDFC employees, fraudulent electricity bill SMS links, and “lottery winner” phishing pages that look identical to government portals. Once you click the wrong link or install a tampered app, your phone can be silently compromised within minutes.

Warning Signs: How to Tell If Your Phone Has Been Hacked

1. Sudden Battery Drain Without Heavy Usage

If your phone’s battery is draining noticeably faster than it used to — even when you haven’t changed your usage habits — it’s worth investigating. Spyware and surveillance apps run continuously in the background, consuming power around the clock. A phone that used to last a full day and now dies before evening is not always a hardware issue.

2. Unusually High Mobile Data Consumption

Check your data usage in Settings. If you’re seeing large amounts of data consumed by apps you rarely open — or by unfamiliar processes — that data may be going straight to a remote server. Stalkerware often uploads your call logs, messages, and location data in small packets to avoid detection, but over weeks the numbers add up.

3. Phone Feels Hot Even When Idle

Heat is a reliable indicator of background processor activity. If your phone feels warm while it’s sitting face-down on a table with no apps open, something is running beneath the surface. This is especially telling on mid-range Android devices where thermal management is less sophisticated.

4. Apps You Never Installed

Scroll through your full app list, not just the home screen. Malware sometimes installs companion apps with generic names like “System Service,” “Phone Manager,” or “Update Tool.” These are designed to blend in. If you see anything you don’t remember downloading, treat it as suspicious.

5. Strange Text Messages or Calls in Your History

Some hacking methods work by sending USSD codes or premium-rate SMS from your number without your knowledge. Check your call logs and sent messages. If you find texts you never sent, your phone may have been compromised — and your prepaid balance may already be draining.

6. WhatsApp or Social Media Logged In Elsewhere

WhatsApp lets you check linked devices under Settings > Linked Devices. If you see an unfamiliar device listed, someone else has access to your account. Similarly, Instagram, Facebook, and Gmail all show active sessions — check these regularly. Seeing a login from a city you’ve never visited is a clear sign of unauthorized access.

7. Camera or Microphone Activating on Its Own

On Android 12 and above, a green dot appears in the top-right corner when the camera or microphone is active. On iPhones, it’s an orange or green indicator. If you notice these lights switching on when you’re not using any app that needs them, a malicious app may be recording you.

8. Calls Dropping or Strange Background Noises

While call quality in India varies by region, consistent clicking sounds, echoes, or interference that appears specifically during sensitive conversations can occasionally indicate call interception. This is rare for average users but has been documented in targeted attacks.

How to Confirm Your Phone Is Hacked: Step-by-Step Checks

Check Android Phones

Step 1: Go to Settings > Battery > Battery Usage. Look for unfamiliar apps consuming power in the background.

Step 2: Go to Settings > Network > Data Usage. Filter by the current billing cycle and identify any app using data unexpectedly.

Step 3: Dial *#21# to check call forwarding status. If your calls are being forwarded to an unknown number, that’s a serious sign. Dial ##002# to cancel all forwarding immediately.

Step 4: Go to Settings > Apps > See All Apps and enable “Show System Apps.” Look for anything with no icon, a blank name, or a generic label you don’t recognize.

Step 5: Go to Settings > Privacy > Permission Manager. Check which apps have access to your microphone, camera, location, and contacts. Revoke anything that seems unnecessary.

Step 6: Install a trusted antivirus app — Malwarebytes, Bitdefender, or Kaspersky Mobile are reliable choices available on the Play Store in India. Run a full scan.

Check iPhones

Step 1: Go to Settings > Privacy & Security > App Privacy Report. This shows you exactly which apps accessed your microphone, camera, location, and contacts — and when.

Step 2: Go to Settings > [Your Name] > scroll down and check all signed-in devices. Remove anything unfamiliar.

Step 3: Go to Settings > General > VPN & Device Management. If there’s a profile you didn’t install yourself, your device may have been configured remotely — delete it immediately.

Step 4: Check iCloud at icloud.com from a separate device and verify no unknown devices are linked to your Apple ID.

What to Do If Your Phone Is Hacked

Act quickly and in order:

Change all passwords immediately — start with your email, then UPI apps like PhonePe, Google Pay, Paytm, and your banking apps. Use a separate device to do this.

Inform your bank — call your bank’s customer care (SBI: 1800 11 2211, HDFC: 1800 202 6161) and alert them to potential unauthorized access. Request a temporary transaction hold if needed.

File a cybercrime complaint — India’s National Cyber Crime Reporting Portal at cybercrime.gov.in allows you to report hacking, financial fraud, and identity theft. You can also call the cyber helpline at 1930.

Factory reset your phone — after backing up only essential files (photos, contacts), perform a factory reset. For Android: Settings > General Management > Reset > Factory Data Reset. For iPhone: Settings > General > Transfer or Reset iPhone > Erase All Content.

Get a new SIM if needed — if you suspect SIM swapping (your SIM stops working suddenly and you lose network), contact your telecom operator immediately. Visit your nearest Jio, Airtel, or Vi store with ID proof to report and replace the SIM.

Prevention: How to Keep Your Phone Safe in India

Use two-factor authentication (2FA) on every account that supports it. Never install APK files from outside the Google Play Store — this is the single most common entry point for malware in India. Avoid connecting to public Wi-Fi without a VPN. Keep your operating system and apps updated; security patches fix known vulnerabilities that hackers actively exploit.

Be skeptical of any call asking you to share an OTP, even if the caller claims to be from your bank, TRAI, or any government department. No legitimate organization will ever ask for your OTP.

FAQ: Frequently Asked Questions

Q1: Can I check if my phone is being monitored by someone? Yes. On Android, go to Settings > Privacy > Permission Manager and review which apps have camera, microphone, and location access. Also dial *#21# to check if your calls are being forwarded. On iPhone, use the App Privacy Report in Settings > Privacy & Security. If you find unexplained access, revoke permissions and run a security scan immediately.

Q2: What USSD codes can I use to check if my phone is hacked? Two codes are particularly useful in India. Dialing *#21# shows whether call forwarding is active on your number. Dialing *#62# shows where calls are redirected when your phone is unreachable. If you see an unfamiliar number listed, dial ##002# to cancel all call forwarding settings on your device.

Q3: Can someone hack my phone just by calling me? In most cases, no. Simply receiving a phone call does not give a hacker access to your device. However, sophisticated exploits (like those used in targeted attacks) have occasionally used voice calls on platforms like WhatsApp to deliver malware through a missed-call vulnerability. Keeping WhatsApp fully updated eliminates most such risks for regular users.

Q4: Is my phone hacked if someone knows my Aadhaar number? Knowing your Aadhaar number alone is not sufficient to hack your phone. However, if someone also has your registered mobile number and can intercept OTPs through SIM swapping or call forwarding, they could potentially misuse your identity. Always verify at myaadhaar.uidai.gov.in whether your Aadhaar has been used for any authentication you didn’t initiate.

Q5: How do I report a phone hacking incident in India? File a complaint on cybercrime.gov.in, which is India’s official National Cyber Crime Reporting Portal managed by the Ministry of Home Affairs. You can also call the national cybercrime helpline at 1930 (available across all states). For financial fraud specifically, report to your bank immediately and request that recent unauthorized transactions be flagged.

Q6: Can a factory reset remove hackers from my Android phone? Yes, a factory reset is the most reliable way to remove malware, spyware, or any unauthorized software from an Android phone. It wipes all data and returns the device to its original software state. Before resetting, back up photos and contacts to a secure location. After resetting, reinstall apps only from the official Google Play Store and change all account passwords from a separate, trusted device.

Q7: Can hackers access my UPI account through my phone? If your phone is compromised with malware capable of reading SMS, a hacker could potentially intercept OTPs sent by your bank and use them to authorize UPI transactions. This is why enabling app lock, biometric authentication, and transaction limits within apps like PhonePe, Google Pay, and BHIM is essential. If you suspect unauthorized UPI activity, immediately call your bank and use the NPCI dispute portal at npci.org.in.