How to check your phone for a malware infection

The fastest way to check your phone is to run a built-in security scan. On Android, open Google Play Protect (usually found in the Google Play Store app under your account menu), tap Scan, and wait for the results. On iPhone, there is no built-in malware scanner because Apple's App Store review process and system design make infections rare — if you suspect a problem, restart your phone and check which apps use the most battery in Settings > Battery, since malware often drains power.

If Google Play Protect finds nothing but you still see signs of infection — apps crashing, unexpected charges, constant pop-ups, or a phone that runs much slower than usual — install a third-party scanner. Malwarebytes and Avast both offer free mobile versions that scan for known threats. Download only from the official app store (Google Play or Apple App Store), not from a website, because fake security apps are themselves a common malware delivery method.

After scanning, check your installed apps. Go to Settings > Apps (or Applications) and look for programs you do not remember installing, especially ones with generic names like "System Update" or "Security Tool". Uninstall anything suspicious by tapping the app, selecting Uninstall, and confirming. If an app will not uninstall, it may have device administrator access — go to Settings > Security > Device Administrators (Android) or Settings > General > VPN & Device Management (iPhone) and revoke its permissions first.

Key Takeaways

  • Google Play Protect is built into Android and scans for malware at no cost — open the Play Store app, tap your account menu, and select Scan.
  • iPhones rarely get malware because Apple reviews all apps before they reach the App Store, so a restart and battery check usually solve suspected problems.
  • Third-party scanners like Malwarebytes work on both platforms but should only be downloaded from the official app store to avoid installing malware while trying to remove it.
  • Uninstall any app you do not recognize, especially those with generic system-sounding names, and revoke device administrator access if an app refuses to uninstall.
  • If your phone still behaves oddly after scanning and removing suspicious apps, a factory reset will remove everything — back up your photos and important data first.

What to do if a scan finds malware

If Google Play Protect or a third-party scanner detects malware, the app will usually offer to remove it automatically. Tap the removal option and let it finish. The malware is then deleted from your phone, though any data it may have stolen before removal cannot be recovered.

After removal, change your passwords — especially for banking, email, and social media accounts. Do this from a computer if possible, not from the same phone, because malware may still be running. If you see unauthorized charges or account activity, contact your bank and the affected service immediately. Most banks have fraud departments that can reverse recent charges and issue a new card or account number.

When to do a factory reset

If your phone still shows signs of infection after scanning, removing apps, and revoking permissions, a factory reset will erase everything and start fresh. This removes malware that hides from scanners, but it also deletes all your photos, messages, and installed apps.

Before resetting, back up your data. On Android, go to Settings > System > Backup and turn on backup to your Google account, or connect to a computer and copy your files manually. On iPhone, open Settings > [Your Name] > iCloud and turn on iCloud Backup, or plug into a computer and back up through iTunes or Finder. Once backed up, go to Settings > System > Reset Options > Erase All Data (Android) or Settings > General > Transfer or Reset > Erase All Content and Settings (iPhone). The phone will restart and return to factory condition. After setup, reinstall only the apps you actually use, downloading them from the official app store.

How malware gets onto your phone in the first place

Most mobile malware arrives through apps downloaded outside the official app store. Sideloading — installing apps from websites or third-party stores — bypasses the security review that Google and Apple perform, so a malicious app can run without restriction. Avoid downloading apps from anywhere except Google Play or the Apple App Store.

Phishing links in text messages, emails, or social media can also lead to malware. A message might claim your account is locked or that you have won a prize, then direct you to a fake login page or a download. Do not click links in unsolicited messages, and do not download files from unknown senders. If you are unsure whether a message is real, go directly to the company's official website or app instead of clicking the link.

Connecting to unsecured public Wi-Fi networks can expose your phone to attackers on the same network, though this usually allows them to intercept data rather than install malware. Use a VPN (virtual private network) app if you must use public Wi-Fi, or wait until you are on a trusted network to handle sensitive tasks like banking.

Signs your phone might have malware

A phone with malware often shows clear warning signs. Your battery drains much faster than normal, even when you are not using the phone. Apps crash repeatedly or freeze. Your phone gets hot without reason. You see pop-ups or ads even when you are not in a browser. Your data usage spikes without explanation, suggesting something is uploading information in the background.

You might also notice unexpected charges on your phone bill, especially for premium text messages or services you never signed up for. Malware sometimes sends texts to premium numbers and splits the cost with the attacker. If your contacts tell you they received strange messages from you, or if you see messages in your sent folder that you did not write, your phone has likely been compromised.

How to prevent malware in the future

Keep your phone's operating system updated. Go to Settings > System > System Update (Android) or Settings > General > Software Update (iPhone) and install updates as soon as they are available. Updates patch security holes that malware exploits.

Download apps only from Google Play or the Apple App Store. Before installing, check the app's reviews and the developer's name — malicious apps often have poor reviews or impersonate legitimate companies with slightly different names. If an app asks for permissions that seem unnecessary (like a flashlight app requesting access to your contacts), do not install it.

Use a strong, unique password for your Google or Apple account, since attackers who gain access can install apps remotely. Enable two-factor authentication on your email and important accounts so that even if your password is stolen, an attacker cannot log in without a code sent to your phone or email.

Be skeptical of links and downloads. Do not click links in text messages or emails from unknown senders. Do not download files from websites you do not trust. If a message seems urgent or too good to be true, it probably is.

Frequently Asked Questions

Can malware on my phone steal my passwords and banking information?

Yes. Some malware logs keystrokes or takes screenshots, capturing passwords as you type them. Others intercept data sent over the network. This is why changing your passwords from a different device after removing malware is important, and why using a password manager (which generates and stores unique passwords) reduces the damage if one account is compromised.

Will restarting my phone remove malware?

Restarting stops malware from running temporarily, but it does not delete the malicious app. The malware will start again the next time you restart or unlock your phone. You must uninstall the app or do a factory reset to remove it permanently.

Is it safe to use my phone while it has malware?

No. Malware can steal passwords, intercept messages, make unauthorized charges, or access your camera and location. Stop using the phone for sensitive tasks like banking or shopping until you have scanned it and removed any threats. If you must use it, avoid entering passwords or payment information.

What if Google Play Protect says my phone is safe but I still think it has malware?

Google Play Protect catches most common malware, but not all. Try a second scanner like Malwarebytes or Avast. If multiple scanners find nothing and your phone still behaves oddly, the problem might not be malware — it could be a failing battery, storage running full, or an app with a bug. Check your battery health and storage space in Settings. If those are normal, a factory reset is your last option before visiting a repair shop.

Do I need to buy antivirus software for my phone?

No. Google Play Protect and the Apple App Store's review process provide strong protection at no cost. Paid antivirus apps offer extra features like VPN or call blocking, but they are not necessary for basic security. Free options like Malwarebytes work just as well for scanning.