11 ways to tell if your phone is tapped
If you’re concerned that someone is spying on you by tapping your phone, there are several obvious warning signs to watch for, such as battery drain, unexpected communications, and apps behaving strangely. There are also checks you can do, like dialing MMI codes and scanning for malware.
Many signs of phone tapping are similar to the signs of phone hacking. Hacking involves gaining unauthorized access to a device and is typically used by cybercriminals as a way to tap a phone.
Signs of phone tapping include:
-
Strange sounds during calls.
-
Unrecognized unconditional call forwarding.
-
An overheating or rapidly draining battery.
-
Unexplained spikes in data usage.
-
Extended shutdown times.
-
Apps opening on their own or crashing regularly.
-
Your phone turning off or restarting randomly.
-
Your camera or microphone activating without permission.
-
Strange text messages.
-
Spyware found on your phone.
These subtle clues can indicate someone is monitoring your device, though many of these things happen on their own if your device is older or network settings are configured inefficiently. Recognizing the signs early can help you protect your sensitive personal or financial data from eavesdroppers in the case of phone tapping.
Below, we’ve outlined 11 ways to tell if your phone is being tapped:
Dial MMI codes
MMI codes (short for Man-Machine Interface codes) are sequences of characters — usually beginning with the * or # keys — that you can dial on a mobile phone to interact directly with carrier network services or device-level diagnostic functions.
MMI codes cannot definitively confirm phone tapping, but they can reveal certain network-level behaviors (like call forwarding) that may be consistent with phone tapping. When you “call” the codes, information appears on your screen.
Here are the five main codes you can dial to check for signs of phone tapping on GSM networks (AT&T and T-Mobile):
*#21#
Tells you whether calls are being forwarded and to which number. This is known as unconditional call forwarding and can be a form of phone tapping if it’s happening without your consent.
*#06#
Displays your phone’s unique International Mobile Equipment Identity (IMEI) code. If you know your phone’s IMEI code already and the displayed code is different, it may indicate malicious activity.
*#61#
Shows whether your unanswered calls are being forwarded to a third party. This is a form of conditional call forwarding, which could, if done without your consent, be a sign of phone tapping.
*#62#
Shows whether calls you’re unable to answer because your phone is switched off or has no service are being forwarded — another form of conditional call forwarding.
*#67#
Checks for conditional call forwarding when your line is busy, showing whether your calls are being forwarded to another number if you’re already on a call.
##002#
Cancels all call forwarding, both conditional and unconditional.
Note that some carriers may handle these codes differently, but they generally work on most GSM-based mobile networks.
Via your device settings
Conditional and unconditional call forwarding can also be checked and enabled through your device settings.
-
On iOS
To check for unauthorized call forwarding through your iOS device’s settings, go to Settings > Phone > Call forwarding.
-
On Android
To check for unauthorized call forwarding on your Android device, go to the Phone app, then tap the three dots. Choose Settings > Supplementary services > Call forwarding.
Hearing strange sounds during calls
Unexplained sounds like clicks, static, beeps, or high-pitched frequencies might indicate that someone is listening in on your phone calls, or that they’re being recorded. These sounds can have innocuous causes too, like background noise or poor signal. However, if you notice them consistently across all of your calls, it could be a sign of phone tapping.
A hot or quick-draining battery
If your battery is draining unusually quickly or your phone feels warm when you’re not using it, it might be a symptom of spyware or another type of malware working in the background to log your data and send it to a third party. Spyware allows hackers to track your phone activity, sometimes even letting them listen in on your calls directly.
Usually, there’s an easy way to check if a malicious application is draining your phone’s battery life. Navigate to your device settings to see your apps sorted by power usage and pay attention to any you don’t recognize:
-
On iOS
To check which apps are using the most battery, go to Settings > Battery > View All Battery Usage.
-
On Android
To check which apps are using the most battery, go to Settings > Battery. Scroll down until you can see the list of apps.
On most phones, regardless of manufacturer and OS, you should also be able to open Settings and type “Battery activity” in the settings search bar to get to this screen even faster.

Unexplained spikes in data usage
Malicious software often uses your mobile data to send information it gathers to the hacker. If you’re using up mobile data faster than expected or experiencing sudden spikes in data usage, it’s possible your phone is being tapped.
You can see what apps are using data by navigating to your mobile data settings, then look out for suspicious apps that you didn’t install or don’t use:
-
On iOS
To check which apps are using the most data, go to Settings > Cellular. Scroll to the section called Cellular Data and tap Show All.
-
On Android
To check which apps are using the most data, go to Settings > Connections > Data usage > Mobile data usage.

Extended shutdown times
If your phone seems to be taking longer than usual to power down, it could be a sign that data is being transmitted to a third party. Before your phone shuts down, it has to complete any active tasks that are running in the background — but that shouldn’t take long. You can test for hidden apps or programs by closing all of your currently open apps and then turning your phone off.
Unusual device activity
Some malware or remote access applications may cause your phone to act strangely, either because they’re poorly coded, resource-intensive, or give an intruder access to your power settings. Any suspicious device activity could be a red flag, but look out for issues like:
-
Apps opening on their own.
-
Apps regularly crashing.
-
Your phone turning itself off or restarting at random times.
-
Your camera or microphone activating without your permission.
Although there are other explanations for each of these problems, they could also be signs of your phone being tapped or infected, particularly if they’re happening consistently.
Websites that look different
Malware that’s used to tap phones can also cause issues with mobile internet browsing. You might be automatically redirected to a fake version of a website where hackers can steal your login details or other personal information, for example.
If you have suspicions, check that you’re on a safe website by verifying the URL is authentic. If there’s anything unusual about how a website looks, avoid entering any personal information and close your browser.
Receiving strange texts
Unexpected or fake text messages containing strings of numbers, letters, or symbols could be a sign your phone is being tapped. Some spyware also sends instructions in the form of coded messages to your phone. These coded messages are typically hidden, but if the spyware isn’t installed properly, you might receive these texts directly to your messaging app.
Your emails aren’t being delivered
If emails suddenly stop sending, disappear, or fail without explanation, it may signal unauthorized changes to your email account or cloud services, especially if accompanied by other security warnings.
While email delivery problems can have many causes (such as spam filtering), unexplained disruptions — especially when combined with other warning signs like password reset notifications, unfamiliar login alerts, or account setting changes — can indicate that your settings have been changed by a hacker.
If this is the case, it’s possible that your other communications are tapped as well.
Your phone has spyware
One of the clearest signs that your phone may be monitored is the presence of spyware malicious software installed without your consent that can track calls, messages, location, and app activity. Spyware often ends up on your device via phishing links or other malware.
To check for spyware on your phone, start by reviewing recently installed apps for anything unfamiliar or suspicious. Monitor unusual behavior, like excessive data usage or battery consumption, to identify malicious apps and processes.
Then, use an antivirus app to identify and block or remove spyware and other threats. Avast Free Antivirus is a powerful threat detection solution that helps keep your phone safer against stealthy spyware apps.
-
Check for iPhone spyware:
Open Settings > General > iPhone Storage. Look for apps that you don’t remember installing. Some spyware may hide under names like “System Service” or “Updater.”
-
Check for Android spyware:
Go to Settings > Apps. Spyware often hides under a name like “System Service” or “Updater.”
What to do if your phone has been tapped
It can feel overwhelming to discover your phone has been tapped, but acting quickly — such as removing suspicious apps, turning off Wi-Fi, and disabling call forwarding — can help minimize the damage.
Here’s how to secure your phone, protect your data, and restore your privacy:
Enable airplane mode
Enabling airplane mode can temporarily neutralize phone tapping by cutting off Wi-Fi and cellular services, blocking attempts to access your phone. This will buy you some time to take further action, such as removing call-forwarding rules or spyware from your device.
Reboot in safe mode
Restarting your phone in safe mode forces only the necessary parts of the operating system to function, meaning spyware installed on your phone won’t be active. This gives you the freedom to search your device for malicious software without risk of it still running in the background.
To reboot Android in safe mode, hold the power button (or power and volume up buttons, depending on your model). Long-press Power off, then tap Reboot to safe mode. Tap OK.
iPhones do not have a user-accessible safe mode, although you can perform a force restart to troubleshoot some issues. Safe mode, or a close equivalent, may be available on jailbroken iPhones, but users should be aware of the jailbreaking risks before using these devices.
Delete unused, outdated, or suspicious apps
If you notice unfamiliar apps on your phone that you don’t recall installing, you should delete them immediately. They may be fake apps that secretly contain spyware, allowing a hacker to tap your phone.
Simply deleting the app may not be enough. To ensure that you’ve thoroughly purged your phone of every last trace of malicious code, follow the steps laid out in our comprehensive guides for removing spyware from Android and iPhones.
Disable call forwarding
If someone is using unconditional call forwarding to spy on you, disable it by dialing the following shortcodes to ensure that your calls are no longer redirected to a third party:
Perform a factory reset
As a last resort, you can use a factory reset to remove spyware from your phone. Remember that a factory reset will also wipe all other data from your phone, including photos, contacts, apps, videos, and music. You will need to restore these from a saved backup.
Be careful not to restore your phone from a backup made after you started noticing signs of phone tapping — this will simply reinstall the malware.
File a police report
In many states, phone tapping is a crime, so if you have evidence that your phone has been tapped, you should file a report with the authorities. Reporting an internet scam, phone tapping incident, or other form of phone hacking attempt helps your local police department to stay ahead of cybercriminals and help prevent similar attacks from occurring in the future.
You can also report phone hacking attempts in the U.S. to the Internet Crime Complaint Center (IC3) — an FBI-led center for investigating cybercrime. Visit the IC3 website and tap File A Complaint.
If you know the app or website that downloaded spyware onto your phone, you can report it to the Federal Trade Commission via its Report Fraud website.
Why would someone tap your phone?
People may attempt to tap a phone for stalking and harassment, fraud, extortion, or corporate espionage. In modern practice, phone tapping usually occurs through spyware, malware, or compromised accounts, rather than traditional network wiretaps involving hardware.
Here are some of the main reasons a person may tap your phone:
-
To steal money or sensitive information for identity theft or fraud.
-
To track your location and communications for stalking or harassment.
-
To monitor your online activities to gain leverage for blackmail or extortion.
-
To gather insider information for a company or government agency.
-
To gain evidence to support a prosecution or expose wrongdoing.
How to protect against phone tapping
To help protect your device against phone tapping and keep your mobile communications secure, start by removing apps you no longer use, updating your operating system, and installing an anti-malware tool.
Here are some of the best ways to help prevent phone tapping:
Keep your phone updated
Installing the latest versions of iOS or Android as soon as they become available helps to fix vulnerabilities and loopholes that can be exploited by spyware to access your phone. OS updates also tend to contain security features to protect against new viruses and malware.
Clean out your apps list
One simple but effective step to protect your phone against potential surveillance is to regularly delete apps you no longer use.
Unused apps can sometimes be exploited by cybercriminals, especially if they’re outdated or no longer receiving security updates. By removing them, you reduce the number of potential entry points for phone tappers to access your device and make it easier to spot unfamiliar or suspicious apps.
Regularly reviewing and cleaning your app list also helps maintain overall device security and ensures that only trusted, necessary apps have access to your data.
Only use official app stores
Downloading apps from unofficial sources can open a gateway for malicious software piggybacking its way onto your phone. Avoid jailbreaking your iPhone and make sure you only download apps from the official iOS or Android app stores to minimize your chances of accidentally installing a potentially harmful app.
It’s also a good idea to avoid downloading apps with no or low-scoring reviews.
Use secure communication apps
Using secure communication apps is a good way to protect your calls and messages from interception. Apps that offer end-to-end encryption ensure that only you and the intended recipient can read or hear your communications, even if someone gains access to your network or device.
Popular secure messaging platforms include Signal and WhatsApp, which encrypt messages by default, as does the Secret Chats feature on Telegram. Choosing these apps over standard SMS or unencrypted messaging reduces the risk that your conversations can be monitored or intercepted by spyware, hackers, or unauthorized third parties.
Install security software
Although mobile operating systems have built-in security features, installing additional mobile security software offers even more comprehensive protection. An antivirus app like Avast One scans your files and apps for potential malware vulnerabilities, flags suspicious links or downloads, and blocks attempts to install spyware or other malware.
Avast One helps block spyware and other malicious downloads.
Use a VPN
Using a VPN helps protect your phone against certain types of surveillance by encrypting your internet traffic and masking your IP address. This makes it harder for attackers or unauthorized parties to intercept your online activity, including messages, emails, and app data.
A reputable VPN can also protect you when using public Wi-Fi networks, which are often exploited by cybercriminals looking to eavesdrop on communications or deploy malware. While a VPN doesn’t prevent spyware installed directly on your phone, it adds an important layer of security that helps keep your digital activity private.
Improve device security with Avast
Start detecting threats and securing your devices with cutting-edge security software for iPhones and Android phones. Avast One is an ironclad digital security app that helps identify, block, and remove spyware and other malware whenever it’s detected. Get it today to help keep your sensitive data, including personal calls, safer from prying ears or eyes.