Is My Phone Hacked? How to Check, What the Codes Mean, What to Do

There's no code you can dial to find out if your phone is hacked. Codes like *#21# only show whether call forwarding is switched on. To check your phone, look for real warning signs, review app permissions, check which devices are logged in to your Google, Apple and WhatsApp accounts, and run Google Play Protect on Android. If anything looks wrong, change your passwords from a different device and turn on two-step verification.

Most "hacked" phones in India aren't hacked in the movie sense. Usually someone got an OTP out of the owner, a fake app was installed from a link, or an account was taken over. That's good news, because those problems can be found and fixed.

Phone hacked check codes: what they really do

Forwards claiming "dial this code to see if your phone is hacked" have been doing the rounds for years. Fact-checkers at Fact Crescendo have debunked them. These are network (USSD) codes, and here's what they actually do:

Call forwarding does matter, though. A common scam in India tricks people into dialling a code such as *401* followed by a number, often while "helping" with a delivery or a KYC update. That code silently forwards your calls to the scammer, who can then receive OTP calls meant for you. If *#21# shows a number you don't recognise, dial ##002# straight away and call your operator.

No code shows malware, spyware or a hacked WhatsApp or Google account. For that you need the checks below.

Signs your phone may be hacked

One of these on its own usually has an innocent explanation. A few together, especially account-related ones, deserve a closer look.

• Account warnings: emails or SMS about a new sign-in, a password change or a new device that you didn't make.
• OTPs you didn't ask for, especially several in a row. Someone may be trying to log in as you.
• Messages sent from your WhatsApp or social media that you didn't write, or friends saying they got strange links from you.
• Unknown apps, especially ones with generic names like "System Service", "Update" or no icon at all.
• Battery draining much faster and data use jumping without a change in how you use the phone. The US Federal Trade Commission lists these, along with overheating and random restarts, as possible signs of stalkerware.
• Someone knowing things they shouldn't, like where you went or what you said in private chats. This matters more than any battery sign.
• Money moving from your bank or UPI without your approval.

How to check an Android phone

1. Run Play Protect. Open the Play Store, tap your profile picture, then Play Protect, then Scan. Make sure it's turned on.
2. Look through installed apps. Go to Settings, Apps and scroll the full list. Uninstall anything you don't recognise or don't remember installing. Search the name online if you're not sure.
3. Check special permissions. In Settings, search for "Accessibility" and "Device admin apps". Accessibility access lets an app read your screen and tap for you, and it's a favourite of banking malware. Only apps you trust, such as a screen reader, should be there.
4. Check "Install unknown apps". Search for it in Settings. If WhatsApp, Chrome or a file manager is allowed to install apps, turn it off.
5. Review logged-in devices at myaccount.google.com, under Security, "Your devices". Sign out any device you don't own.

How to check an iPhone

1. Go to Settings, tap your name and scroll to the device list. Remove any device you don't recognise.
2. Go to Settings, General, VPN & Device Management. If you see a profile you didn't install, and the phone isn't from your office, remove it.
3. Use Safety Check (Settings, Privacy & Security, Safety Check) on recent iOS versions to see who you share location and data with, and stop sharing in one place.
4. Keep iOS updated. Most real iPhone attacks rely on bugs that updates fix.

Check your WhatsApp too

Many people searching "can my phone be hacked through WhatsApp" are really dealing with a taken-over WhatsApp account, not a hacked phone.

• Open WhatsApp, Settings, Linked devices. If a computer or browser you don't use is listed, log it out.
• Turn on Two-step verification in Settings, Account. It adds a PIN that stops someone from registering your number on their phone even if they get your SMS code.
• Never share the 6-digit WhatsApp code with anyone, including a "friend" who says it was sent to you by mistake. That message is the most common takeover trick.

Phone hacked? What to do right away

1. Use a different, safe device to change the passwords of your Google or Apple ID, email, banking apps and social media. Start with your email, because it can reset everything else.
2. Turn on two-step verification everywhere it's offered.
3. Sign out of all other sessions in Google, Apple, WhatsApp, Instagram and Facebook.
4. Remove suspicious apps, then update your phone's software.
5. Call your bank on the number printed on your card if any payment app was involved, and block UPI or cards if needed.
6. Report fraud by calling 1930 or filing a complaint at cybercrime.gov.in, especially if money was lost. The faster you report, the better the chance the money can be frozen.
7. Factory reset as a last resort. Back up photos and contacts first, and don't restore apps from an old backup, because that can bring the problem back. Reinstall apps from the store instead.

A note on stalkerware: if you suspect a partner or family member is spying on you, removing the app can alert them. The FTC advises documenting what's happening and getting help first, using a device the person can't access. In India, the Women Helpline 181 and the police helpline 112 can help, as can the 1930 cyber helpline for the technical side.

How to stop it happening again

• Install apps only from the Play Store or App Store. Never install an APK sent on WhatsApp or Telegram, whether it's a "wedding invitation", a "bank KYC app" or a "free cricket" app.
• Don't share OTPs or dial codes a caller asks you to dial.
• Keep the screen lock on and don't hand an unlocked phone to strangers.
• Update the phone and apps when updates arrive.
• Check the mobile connections registered in your name on the government's Sanchar Saathi portal and report any you don't recognise.

Festive sales bring a wave of fake links and apps. Read our guide to spotting festive sale scams, and if you're helping older parents, our Jeevan Pramaan guide covers the fake "life certificate" calls pensioners get every November.

Frequently asked questions

How to check if my phone is hacked or not with a code?

You can't. *#21# only shows whether call forwarding is on, and ##002# turns forwarding off. They're useful for one specific scam but they can't detect malware or account hacking. Use the app, permission and logged-in device checks above instead.

Can a phone be hacked by answering a call?

For ordinary users, practically no. The risk on calls comes from what the caller persuades you to do, like sharing an OTP, installing a "support" app or dialling a forwarding code. Hang up and call the organisation back on its official number.

Can my phone be hacked through WhatsApp?

Your WhatsApp account can be taken over if someone gets your 6-digit verification code, and opening an APK file sent on WhatsApp can install malware. Turn on two-step verification and check Linked devices regularly.

Which phone cannot be hacked?

No phone is impossible to hack, but any phone that still gets security updates, has apps only from the official store and uses a screen lock is very hard to attack. An old phone that no longer gets updates is the riskier one.

Will a factory reset remove a hacker?

A factory reset removes malicious apps on the phone, but it doesn't fix a stolen password. Change your account passwords and turn on two-step verification as well, or the attacker can simply log in again.