Update the OS, remove apps you don't recognise, check for unknown device management/VPN profiles (iPhone: Settings → General → VPN & Device Management), run Play Protect (Android), change your Apple/Google account password with two-factor authentication, and review signed-in devices.

Why this happens

Most “hacked phone” situations are actually compromised accounts (a reused password), malicious apps with too many permissions, or scam pop-ups in the browser. True remote compromises of fully updated phones are rare and targeted.

Checking accounts, apps and profiles covers the realistic risks. A factory reset after backing up is the final step if something stays wrong.

Signs of the problem

  • Apps you didn't install, or new home-screen icons.
  • Account alerts for logins or password changes you didn't make.
  • Unexplained data use, battery drain and pop-ups.
  • Messages sent from your accounts that you didn't send.

Common causes

  • Reused or leaked passwords.
  • Malicious apps (often from outside official stores).
  • Phishing links and fake login pages.
  • Unknown configuration profiles or device admin apps.

Fixes to try, in order

  1. Update the phoneInstall the latest iOS/Android security update.
  2. Review apps and permissionsRemove unknown apps; on Android check Device admin apps and Special app access.
  3. Check profilesiPhone: Settings → General → VPN & Device Management; remove unknown profiles.
  4. Run Play Protect (Android)Play Store → profile → Play Protect → Scan.
  5. Secure accountsChange your Apple Account/Google password, enable two-factor authentication, and sign out unknown devices.
  6. Factory reset if neededBack up photos and contacts (not apps from unknown sources), reset, then set up fresh.
Check it's fixed: No unknown apps/profiles remain and account activity shows only your devices.

Prevent it from coming back

Use unique passwords with a password manager, keep 2FA on, and install apps only from official stores.