Have you noticed that your phone's battery has begun to drain too quickly, and Internet traffic is disappearing to God knows where? Or maybe the phone reboots spontaneously, and unknown processes appear in the list of running applications? These symptoms may indicate that someone is spying on your Androiddevice. In the digital age, spying through a smartphone has become a real threat - from jealous partners to cybercriminals hunting for bank card data.

In this article we will examine 7 key signs of surveillancelearn how to identify hidden spy applications and analyze network activity. You will learn how to check your phone for remote control apps, what permissions you should be wary of, and what to do if your suspicions are confirmed. It is important to understand that some surveillance methods (for example, through Google Account or Find My Device) may be legal if the device belongs to an organization or family member. But if the phone is your personal property, any unauthorized surveillance is a violation of the law.

Don’t panic in advance: most “symptoms” have a logical explanation (for example, rapid battery drain due to an old battery). But it’s better to play it safe and get diagnosed. Let's start with the most obvious signs.

1. Signs of surveillance: when to be wary

Spyware rarely reveals its presence with bright signals, but there are indirect signs that should make you check your phone. Pay attention to the following anomalies:

  • 🔋 The battery drains in a few hours without active use (for example, the phone was in airplane mode at night, and in the morning the charge dropped by 30%). Spyware constantly transfers data in the background.
  • 🌐 Unexplained consumption of mobile traffic —check the statistics in Settings → Network and Internet → Data transfer. If traffic goes to unknown applications, this is an alarming sign.
  • 📱 The phone turns on spontaneously, reboots, or makes sounds (for example, random keystrokes, screen flickering). Some spies activate the camera or microphone remotely.
  • 🔍 Unknown SMS or calls from short numbers (for example, #21# or #62#) - these can be commands to forward calls.

It is especially dangerous if these symptoms appear after the phone has been in the wrong hands (for example, you sent it for repairs, left it unattended at work, or let a child play). Spyware is often installed physically through USB debugging or vulnerabilities in the firmware.

⚠️ Attention: Some symptoms (for example, overheating of the phone) can be caused by viruses, cryptocurrency miners, or simply worn out battery. Don’t rush to accuse your loved ones of being spied on - first rule out technical malfunctions.
📊 Have you ever suspected that you were being monitored through your phone?
Yes, there were suspicions
No, but now I’ll think about it
I checked, but didn’t find anything
I have nothing to hide

2. Checking installed applications: looking for “extra” apps

The most obvious way of surveillance is to install special software, for example mSpy, FlexiSPY or Cocospy. These apps disguise themselves as system utilities (for example com.android.system) or harmless applications like a calculator. To find them:

  1. Open Settings → Applications → All applications.
  2. Sort the list by installation date - new unknown apps should alert you.
  3. Check the permissions of each suspicious application (click on it → Permissions). Spies usually request access to:
    • 📸 Camera and microphone
    • 📍 Geolocation (even when the application is not in use)
    • 📞 Call and SMS log
    • 📂 Files and contacts

Pay attention to applications with with inappropriate names. For example, a app under the name Android System Service, but with permissions to send SMS or record audio is a clear sign of a spy. Also check the folder /system/app through the file manager (root access is required): system spies may be hiding there.

☑️ What to check in the list of applications

Done: 0 / 4
Sign What it could mean How to check
An application with a name in Chinese or a random set of letters (for example, com.sec.android.app.launcher) Disguising spyware as system Google the name - if there is no official documentation in the search, it is suspicious
The app consumes >10% of the battery, but you do not use it Background data transfer (possibly surveillance) Settings → Battery → Battery usage
The application cannot be removed (the "Delete" button is inactive) Software with administrator rights or system spy Try to revoke administrator rights in Settings → Security

3. Analysis of network activity: who is transmitting your data?

Spyware constantly sends information to remote servers To identify suspicious activity:

  • 📊 Use the built-in traffic monitor:
    1. Go in Settings → Network and Internet → Data transfer → Mobile data usage.
    2. See which applications are consuming traffic in the background.
    3. Pay attention to apps with disproportionately high consumption (for example, a calculator that "ate" 500 MB in a month).
  • 🔍 Install specialized applications for network analysis, for example:
    • NetGuard (traffic blocker without root)
    • GlassWire (visualization of network activity)
    • Fing (scan devices on your network)

      • These tools will show you which IP addresses and domains are connecting to your phone.

      If you detect suspicious traffic, note down the domain or IP address and check it through services like VirusTotal or Whois. For example, if your phone constantly communicates with a server in another country (for example, 185.143.223.43), this is a cause for concern.

      💡

      B NetGuard you can block Internet access for specific applications. If, after blocking a suspicious app, traffic returns to normal, this is confirmation of surveillance.

      4. Check device permissions and administrators

      Many spyware apps use administrator rightsto block their removal. To check:

      1. Open Settings → Security → Device administrators firmware, the path may be different: Settings → Biometrics and security → Other security settings).
      2. There should be no unknown applications in the list If you see something like Device Admin or Android Security is a potential spy.
      3. Disable administrator rights for suspicious apps (click on the name → Deactivate).

      Also check Special permissions:

      • 🔑 Accessibility permission (Settings → Accessibility: Spyware uses it to record screen activities.
      • 📡 Permission to overlay windows: Allows you to intercept clicks (keylogging).
      • 🔄 Autostart: check in Settings → Applications → Autorun —unknown apps should not start automatically.
      ⚠️ Attention: Some legitimate applications (such as antivirus apps or password managers) also ask for administrator rights. Do not disable them if you are sure of the source.

      5. Hidden Android functions: checking redirection and remote control

      Some types of surveillance are implemented through built-in Android functions, which can be activated without installing additional software. You can check this using USSD codes:

      • 📞 Enter in the dialer:
        • *#21# —check call forwarding.
        • *#62# —check call forwarding when unavailable.
        • *#002# — reset all forwardings.

        If after dialing the code you see numbers that you did not add yourself, someone is redirecting your calls or SMS.

      • 🔄 Check remote access via Google Account:
        1. Go to page Device activity (authorization required).
        2. View the list of connected devices and the latest activity.
        3. If you see unknown devices or unusual actions (for example, logging in from another city), change the password and disable unfamiliar gadgets.

      Also check sync settings in Settings → Accounts. If synchronization with unknown services is enabled (for example, Xiaomi Cloudwhen you have a phone of a different brand), this may be a sign of surveillance.

      What to do if detected forwarding?

      Immediately enter *#002# and press "Call" - this will reset all forwardings. Then check your phone for viruses and change passwords for important accounts.

      6. Physical check of the phone: searching for bugs and hardware bookmarks

      Not all surveillance methods involve software. In rare cases, the phone may have built-in hardware bookmarks:

      • 🔍 Check the case for the presence of foreign parts:
        • Unscrew the back cover (if possible) and inspect the battery. Sometimes bugs are hidden under it.
        • Shine a flashlight into the connectors (USB-C, 3.5 mm, speakers) - look for foreign wires or microchips.
      • 📡 Use a radio signal detector (for example, K18 RF Detector). If the phone emits suspicious radio pulses when turned off, this is a sign of a hardware bookmark.
      • 🔋 Check the battery:
        • Compare its appearance with the original (look for a photo on the Internet).
        • If the battery is swollen or has an unusual shape - this could be a disguise for a bug.

      Hardware bookmarks are extremely rare in everyday situations, but if you suspect targeted surveillance (for example, corporate espionage), it is better to contact a specialist. Do not try to disassemble the phone yourself - this may void the warranty or damage the device.

      ⚠️ Attention: Modern bugs can be the size of a grain of rice and hidden inside the case. Their detection requires professional equipment (X-ray, thermal imager).

      7. What to do if surveillance is confirmed

      If you find evidence of surveillance, follow the following algorithm:

      1. Save the evidence:
        • Take screenshots of suspicious applications, network activity and permissions.
        • Write down the names of apps and IP addresses that the phone contacted.
      2. Remove spyware:
        • Revoke administrator rights (see section 4).
        • Remove suspicious applications through Settings → Applications.
        • If the app is not uninstalled, perform a factory reset (Settings → System → Reset settings).
      3. Protect your accounts:
        • Change passwords for Google, social networks and banking applications.
        • Enable two-factor authentication (preferably via Google Authenticator, not SMS).
        • Check linked devices in Google Account and WhatsApp Web.
    • Contact law enforcement agencies (if the surveillance was illegal):
      • In Russia, file a statement with the police under Article 138.1 of the Criminal Code of the Russian Federation ("Illegal trafficking of special technical means intended for secretly obtaining information").
      • Attach saved information evidence (screenshots, logs).

        • If resetting the settings did not help (spyware could be in the firmware), you may need reflash the phoneTo do this:

        1. Download the official firmware for your model from the manufacturer's website. (for example, Samsung, Xiaomi, Huawei).
        2. Use the app for firmware (Odin for Samsung, Fastboot for Google Pixel, Mi Flash for Xiaomi).
        3. Perform a complete cleanup (Wipe Data) before installing a new one firmware.
      💡

      If surveillance continues after resetting the settings, this is a sign of infection at the firmware or hardware level. In this case, only a complete flashing or replacement of the phone will help.

      FAQ: Frequently asked questions about surveillance via Android

      Is it possible to track a phone if it has one? is turned off?

      No, if the phone is completely turned off (not in sleep mode), it is impossible to track it. However:

      • Some spy apps can simulate shutdown (the screen goes blank, but the phone remains active).
      • If the battery is removable, it can be removed to completely de-energize it.
      • In phones with Always-On Display (for example, Samsung Galaxy) some functions may remain active even when "shutdown".
      Can they monitor via Wi-Fi or Bluetooth?

      Yes, but with reservations:

      • 📶 Wi-Fi: If you are connected to the same network, it is theoretically possible to intercept traffic (for example, via ARP-spoofingBut this requires physical access to the router or a special device). Software on your phone.
      • 🔵 Bluetooth: Modern versions (Bluetooth 5.0+) encrypt data, but vulnerabilities still exist. For example, through BlueBorne you can hack the device without pairing.

      To protect yourself:

      • Disable Wi-Fi and Bluetoothwhen they are not needed.
      • Do not connect to public networks without a VPN.
      • Update the firmware - manufacturers regularly close vulnerabilities.
      How check if another device is connected to my phone (for example, via TeamViewer)?

      Check the following points:

      1. Open Settings → Connected devices —all paired gadgets (headphones, smart watches, keyboards) are displayed there.
      2. Check active sessions in Google Account (link).
      3. Install the application Network Connections (from Mobiwia) - it will show all active connections to your phone.
      4. If you used TeamViewer or AnyDesk, check the session history in the application itself.

      If If you find an unknown device, immediately turn it off and change your passwords.

      Can a mobile operator monitor you?

      Technically yes, but with legal restrictions:

      • 📡 Legal surveillance: The operator can provide data about your location and calls only at the request of law enforcement agencies (on based on a court decision).
      • 🕵️ Illegal surveillance: In theory, operator employees can abuse access, but this is a crime (Article 137 of the Criminal Code of the Russian Federation - “Violation of privacy”).

      How to check:

      • Ask the operator connection details —all calls and SMS will be there.
      • If you notice unknown numbers in the details is a reason to contact the police.

      Important: Operators do not have the right to transfer your data to third parties without your consent or a court decision. If you suspect a leak, ask for an official explanation.

      How to protect your phone from surveillance in the future?

      Follow these rules:

      • 🔒 Do not give your phone into the wrong hands —even for 5 minutes. Spyware can be installed in a few seconds.
      • 🛡️ Disable installation from unknown sources (Settings → Security → Unknown sources).
      • 🔄 Regularly update Android —new versions close vulnerabilities.
      • 📱 Use antivirus (for example, Bitdefender or Kaspersky) to scan for spyware.
      • 🔑 Set up bootloader lock (Bootloader), so that attackers cannot reflash the phone.
      • 📵 In important places (negotiations, meetings), turn off the phone or remove the battery.