The short answer: iPhones rarely get viruses, but they can get malware
iPhones are harder to infect than Android phones because Apple controls both the operating system and the App Store. A true virus — code that copies itself and spreads — is extremely rare on iPhone. What you might actually have is malware: a malicious app or compromised account that steals data, shows unwanted ads, or drains your battery.
The most common signs are apps you don't remember downloading, sudden battery drain, overheating, unexpected data charges, or repeated crashes. If you see these, the steps below will help you find and remove the problem.
Key Takeaways
- Check your installed apps in Settings > General > iPhone Storage and delete anything you don't recognize or remember downloading.
- Review your Apple ID account activity at appleid.apple.com to spot unauthorized sign-ins or devices you don't own.
- Restart your iPhone in Recovery Mode and restore from a backup if you find signs of compromise and can't identify the cause.
- Change your Apple ID password immediately if you see unfamiliar activity, because a compromised account is the most common way malware spreads on iPhone.
- Avoid sideloading apps from outside the App Store, because that is the main way malware reaches iPhones.
Check what apps are installed and when they were added
Open Settings, tap General, then tap iPhone Storage. This shows every app on your phone, sorted by size, with the date each was installed. Scroll through and look for apps you don't recognize or don't remember downloading. Pay special attention to apps with generic names like "System Update," "Security," or "Cleaner" — these are common malware disguises.
If you find an app you didn't install, tap it and select Remove App, then Delete App. If you're unsure whether an app is legitimate, search its name online along with the word "malware" — security researchers often document suspicious apps within days of discovery.
Also check Settings > General > VPN & Device Management. If you see a profile or configuration you didn't install, that's a red flag. Tap it and select Delete Profile. Malware sometimes installs a profile to prevent you from removing it.
Review your Apple ID account for unauthorized access
Go to appleid.apple.com on a computer or another device and sign in with your Apple ID. Scroll to the Devices section and look at every device listed. If you see a device you don't own or recognize, click it and select Remove from Account. This cuts off any access that device has to your photos, messages, and other iCloud data.
Next, scroll to the Sign-In and Security section and review your login history. Look for sign-in attempts from locations you don't recognize or at times you weren't using your phone. If you see suspicious activity, change your Apple ID password immediately. Use a strong password — at least 16 characters, mixing uppercase, lowercase, numbers, and symbols.
A compromised Apple ID is the most common way malware spreads on iPhone, because the attacker can install apps remotely or change your settings without touching your phone.
Look for signs of malware in your phone's behavior
Malware often causes physical signs you can spot without opening settings. Your battery might drain much faster than normal, even when you're not using the phone. Your iPhone might run hot to the touch, especially when you're not doing anything demanding. You might see a spike in your cellular data usage, or your phone might crash repeatedly when you open certain apps.
Open Settings > Battery to see which apps are using the most power. If an app you rarely use is at the top of the list, that's suspicious. Also check Settings > Cellular and scroll down to see which apps have used the most data. If an app you don't use much has burned through gigabytes, it may be sending data in the background.
These signs don't always mean malware — a buggy app or a failing battery can cause the same symptoms — but they're worth investigating.
Restart your iPhone in Recovery Mode if you can't find the problem
If you've checked your apps and account but still see suspicious behavior, the safest step is to restore your iPhone from a backup. This erases everything and reinstalls iOS fresh, which removes any malware that might be hiding in the system.
Connect your iPhone to a computer with a USB cable. On Mac, open Finder; on Windows, open iTunes. Hold down the power button and volume down button on your iPhone at the same time until you see the Recovery Mode screen. Click Restore in Finder or iTunes, then follow the prompts. When asked, choose to restore from your most recent backup.
This process takes 20 to 40 minutes. Your phone will restart several times. When it finishes, your apps and data will be back, but any malware will be gone. If the suspicious behavior returns after the restore, the problem is likely in your backup itself — in that case, restore without a backup and set up your phone as new, then reinstall apps one at a time.
Prevent malware by controlling where apps come from
The App Store is not perfect, but it's far safer than downloading apps from the web or from links in emails and texts. Apple reviews every app before it goes live, and removes malicious ones when they're discovered. Apps from outside the App Store bypass this review entirely.
Never install an app by clicking a link in an email, text message, or website — even if it looks like it's from Apple or your bank. Instead, open the App Store app on your iPhone, search for the app by name, and download it from there. If a website tells you to download something outside the App Store, that's a scam.
Also turn on automatic updates. Go to Settings > App Store, scroll down, and toggle on App Updates. This way, if a security flaw is found in an app you use, the fix installs automatically without you having to remember.
What to do if you've lost money or personal information
If malware has stolen your credit card number, contact your bank or card issuer right away and ask them to cancel the card and issue a new one. They can also review your recent transactions and dispute any charges you didn't make.
If your passwords have been compromised, change them for every account that matters — email, banking, social media, and anything else with personal information. Start with your email account, because an attacker who controls your email can reset passwords on other accounts.
If you think your identity has been stolen, you can place a free fraud alert with the three major credit bureaus (Equifax, Experian, and TransUnion) by visiting IdentityTheft.gov. A fraud alert tells lenders to verify your identity before opening new accounts in your name.
Frequently Asked Questions
Can I get a virus just by visiting a website on Safari?
No. Safari can't execute code that installs malware on your iPhone. You can visit a malicious website without risk. However, a website might trick you into downloading an app or profile, so don't tap links that ask you to install something unless you're sure it's legitimate.
Do I need antivirus software on my iPhone?
No. Antivirus apps on iPhone can't actually scan your system the way they do on a computer, because Apple doesn't let them access the files they would need to check. They're largely useless. Focus instead on the steps above: watch what you download, review your account, and keep iOS updated.
What if I sideloaded an app before I knew it was risky?
Delete it immediately from Settings > General > iPhone Storage. Then change your Apple ID password and review your account activity at appleid.apple.com. If you see suspicious sign-ins or unfamiliar devices, remove them. If the app asked for your password or payment information, change those passwords too.
Will restarting my iPhone remove malware?
A normal restart won't remove malware, but it might temporarily stop it from running. For a permanent fix, you need to delete the malicious app or restore your phone from backup. A restart is a good first step if your phone is running slowly, but it's not a solution by itself.
Is it safe to restore from a backup if I had malware?
Usually yes, because backups contain your data but not the operating system. When you restore, iOS is reinstalled fresh from Apple's servers, which removes malware. However, if the malware was very sophisticated and somehow embedded itself in the backup, you might reinfect your phone. If suspicious behavior returns after a restore, set up as new instead and reinstall apps manually.