Signs your phone might be infected right now

A phone with a virus or malware usually shows one or more of these signs: it runs much slower than normal, apps crash without warning, the battery drains in hours instead of a full day, you see pop-ups you did not click on, or your phone gets hot during normal use. You might also notice your data usage spiking even when you are not actively using the phone, or you receive text messages from contacts saying you sent them messages you did not write.

These symptoms do not always mean a virus — a slow phone can be full storage, a crashing app can be outdated software, and battery drain can be a failing battery. But if you see several of these signs together, a virus is worth ruling out. The fastest way to check is to restart your phone in Safe Mode, where only the core system and pre-installed apps run. If the problems disappear in Safe Mode, a third-party app is likely the culprit.

Key Takeaways

  • Restart your phone in Safe Mode to see if problems disappear — if they do, a downloaded app is causing the issue, not the system itself.
  • Check your installed apps for unfamiliar ones you do not remember downloading, and uninstall anything suspicious or from unknown sources.
  • Run a scan with Google Play Protect on Android or use the built-in security tools on iPhone to detect known malware.
  • If you find nothing but problems persist, back up your important data and do a factory reset to wipe everything and start fresh.
  • Prevent future infections by only downloading apps from official stores, keeping your phone updated, and avoiding links in texts or emails from unknown senders.

How to restart your phone in Safe Mode

On Android: Press and hold the power button until the power menu appears. Long-press the "Power off" option (do not just tap it) until a prompt asks if you want to restart in Safe Mode. Tap "Safe Mode." Your phone will restart with a "Safe Mode" label at the bottom of the screen. In this mode, only system apps and pre-installed software run — any app you downloaded is temporarily disabled.

On iPhone: iPhones do not have a traditional Safe Mode, but you can restart in a similar way by force-restarting the device. The method depends on your model: on iPhone 8 and newer, quickly press and release the volume up button, then the volume down button, then press and hold the side button until the power-off slider appears. Slide to power off, wait 30 seconds, then power back on. This clears temporary files and stops background processes.

Use your phone normally in Safe Mode for 10 to 15 minutes. If the slowness, crashes, or pop-ups stop, you know a downloaded app is the problem. If the issues continue, the problem is likely built into the system or hardware.

Finding and removing suspicious apps

On Android: Go to Settings, then Apps (or Application Manager, depending on your phone). Scroll through the list and look for apps you do not recognize or do not remember installing. Pay special attention to apps with generic names like "System Update," "Security," or "Cleaner" — these are common malware disguises. Tap any suspicious app and select "Uninstall." If the uninstall button is greyed out, the app may have admin access; go to Settings > Security > Device Admin Apps, find the app, and revoke its access first.

On iPhone: Go to Settings > General > iPhone Storage. This shows every app on your phone, sorted by size. Scroll through and tap any app you do not recognize. If you are sure you did not install it, tap "Offload App" or "Delete App." Offload removes the app but keeps your data; Delete removes everything.

After removing suspicious apps, restart your phone normally (not in Safe Mode) and monitor it for a few hours. If performance improves, you found the problem.

Running a malware scan with built-in security tools

On Android: Open Google Play Protect, which comes built into most Android phones. Tap your profile icon in the top right, then "Manage your Google Account," then the "Security" tab. Scroll down to "Google Play Protect" and tap "Scan." Google Play Protect will scan all installed apps against a database of known malware. If it finds anything, it will show you the app name and offer to uninstall it. Tap "Remove" or "Uninstall."

If you cannot find Google Play Protect, open the Google Play Store app, tap your profile icon, select "Manage apps and device," go to the "Manage" tab, and look for any app with a warning badge. You can also download a free third-party scanner like Malwarebytes or AVG, though the built-in Google tool is usually enough for a first check.

On iPhone: Apple does not offer a manual malware scan the way Android does, because iPhones run a closed system where apps cannot access the core operating system the way Android apps can. However, you can check for suspicious activity by going to Settings > Privacy and reviewing which apps have permission to access your location, contacts, camera, and microphone. Revoke permissions for any app that should not need them.

What to do if you find malware but cannot remove it

If an app will not uninstall or keeps reappearing, it may have given itself admin or device owner access. On Android, go to Settings > Security > Device Admin Apps (the exact path varies by phone brand). Look through the list for anything unfamiliar, tap it, and select "Deactivate" or "Remove." Then try uninstalling the app again.

If the malware still will not budge, or if your phone is so slow or unstable that you cannot navigate settings, a factory reset is the most reliable fix. This erases everything on your phone and returns it to factory condition. Before you do this, back up your important data: photos, contacts, messages, and documents. On Android, go to Settings > System > Reset Options > Erase All Data. On iPhone, go to Settings > General > Transfer or Reset > Erase All Content and Settings. Both will ask you to confirm; the process takes 10 to 30 minutes.

After the reset, your phone will restart as if it were brand new. You can sign back into your accounts and reinstall apps from the official store. This time, be more selective: only download apps you actually use, and check the reviews and permissions before installing.

Preventing viruses and malware in the future

The best defense is to download apps only from the official store: Google Play Store for Android and the App Store for iPhone. These stores scan apps before they go live, though malware occasionally slips through. Avoid downloading apps from third-party websites or links in emails and text messages, even if they claim to be from your bank or a service you use.

Keep your phone's operating system updated. Go to Settings > System > System Update (Android) or Settings > General > Software Update (iPhone) and install any available updates. These patches close security holes that malware exploits. Also update your apps regularly — most phones do this automatically, but you can check manually in the Play Store or App Store.

Be cautious with links and attachments. Do not click links in text messages or emails from unknown senders, even if they claim to be from a company you know. Hover over links (on a computer) or long-press them (on a phone) to see the real URL before tapping. If a text claims your bank account is locked or your package is delayed, go directly to the bank or company website instead of clicking the link in the message.

When to consider professional help

If your phone is still behaving strangely after a factory reset, the problem is likely hardware, not software. A failing battery, overheating processor, or damaged storage can cause the same symptoms as malware. Visit the phone manufacturer's support center or a repair shop to have it checked.

If you are not comfortable doing a factory reset yourself, or if you lost important data and need recovery help, a phone repair shop can do both. They can also run more advanced diagnostics to rule out hardware failure. This usually costs between $50 and $150 depending on the shop and the problem.

Frequently Asked Questions

Can a virus on my phone steal my passwords or banking information?

Yes, some malware is designed specifically to capture passwords and financial data. This is why it is important to act quickly if you suspect an infection. If you use banking apps on your phone, change your passwords from a different device (like a computer) after you have removed the malware. Contact your bank to report the infection and ask them to monitor your account for suspicious activity.

Will restarting my phone remove a virus?

A normal restart will not remove malware, but it may temporarily stop it from running. Restarting in Safe Mode is more useful because it disables third-party apps, letting you see if they are the problem. A factory reset is the only restart that actually removes malware completely.

Is it safe to use my phone while it might have a virus?

It depends on what the malware does. Some malware just shows ads; others steal data or monitor your activity. Avoid entering passwords, banking information, or credit card numbers until you have scanned and cleaned your phone. If you must use banking apps, do it from a different device.

Why does my phone still run slowly after I removed the suspicious app?

Malware can damage system files or fill your storage with junk files even after the app is uninstalled. Check your storage by going to Settings > Storage (Android) or Settings > General > iPhone Storage (iPhone). If you are using more than 90 percent of your storage, delete old photos, videos, and apps you no longer use. If storage is fine, a factory reset may be necessary to clean up leftover damage.

Do I need antivirus software on my phone?

On iPhone, antivirus software is not necessary because Apple's closed system prevents most malware from running. On Android, Google Play Protect offers basic protection for free. Third-party antivirus apps like Malwarebytes add extra scanning, but they are not required if you download only from the Play Store and keep your phone updated.