In the digital age, the issue of privacy has become critically important. If you use a smartphone with Android a SIM card MTS and notice suspicious activity - a sudden decrease in battery charge, strange SMS or unauthorized expenses - these may be signs of surveillance. According to Kaspersky Lab, in 2023, every fifth mobile user in Russia encountered spyware, and telecom operators, including MTSregularly record attempts to intercept traffic through vulnerabilities in firmware Android.

Important understand: spying on a phone does not always mean a targeted attack by hackers. More often than not, this is the result of installation spyware (for example, mSpy, FlexiSPY), connection to your account Google or even legal parental control services that someone has activated without your knowledge. In this article we will analyze 7 key signs surveillancehow to check them through settings Android, codes USSD and specialized applications, and also give recommendations for protecting subscribers MTS.

1. Signs of surveillance: when to sound the alarm

The first step is to analyze the behavior of the phone. Spyware rarely operates unnoticed: it consumes resources, leaves digital traces, and can interfere with network operations. Here top 7 symptomsthat should alert you:

  • 🔋 The battery is discharged in a few hours without active use (especially if the phone gets warm in standby mode).
  • 📱 Spontaneous reboots or freezing when working with instant messengers (WhatsApp, Telegram).
  • 💬 Unknown SMS from short numbers (for example, +79XXXX or 1234) or messages that you did not send.
  • 🌐 Increased traffic in the background (check in Settings → Network and Internet → Data transfer).
  • 🔊 Noise or echo during calls - a sign of possible listening through the microphone.
  • 📁 Unknown files in the gallery or folder Download (for example, screenshots or call recordings).
  • 💰 Unauthorized write-off from the account MTS (check payment history via *111#).

If you notice at least 2-3 items from the list, the probability of surveillance is about 60% (according to research Avast for 2026). However, do not panic: some symptoms can be caused by viruses, firmware errors, or even hardware problems. Next, we will look at how to differentiate threats.

📊 Have you ever suspected that your phone was being watched?
Yes, there were obvious signs
No, but now I’ll think about it
I checked, but nothing found
I don’t know how to determine this

2. Checking through Android settings: hidden processes and application rights

Let's start with basic diagnostics through system settings. Spyware often disguises itself as legitimate services, but leaves traces in sections. access rights and active processes.

Step 1. Checking administrator rights

Many spyware (for example, Cerberus or SpyEra) require administrator rights to block their deletion. Go to:

Settings → Security → Device Administrators

Delete suspicious applications (if they are not deleted, this is a sure sign of surveillance). often used by attackers. Device Manager, System Service or Update Helper — they are often used by attackers.

Step 2. Analysis of running processes

Open Settings → Applications → Running (on some firmware the path may differ). Look for processes with unusual names, for example:

  • 🛑 com.android.track
  • 🛑 service.secure
  • 🛑 monitor.app

If you find something suspicious, try stopping the process. If it restarts on its own, this is 100% a sign of spyware.

Remove unknown device administrators|Stop suspicious processes|Check microphone/camera permissions|Disable auto-loading of unnecessary applications-->

Step 3. Control access to the microphone and camera

Go to Settings → Privacy → Manager permissions (or Settings → Applications → Permissions). View the list of applications that are allowed access to:

  • 🎤 Microphone (for example Google Assistant should not have access if you do not use it).
  • 📷 Camera (messengers like Viber may request access, but not system utilities).
  • 📍 Geolocations (if MTS Locator or Yandex.Maps active without your knowledge).
⚠️ Attention: Some legitimate applications (for example, MTS Bank or Government services) do require advanced rights. Do not revoke permissions from trusted services so as not to lose access to functions.

3. MTS USSD codes for checking connected services

Operator MTS provides a number USSD commandsthat help identify unauthorized connections or redirects. These codes work on all tariffs, including "Tariff", "Ultra" and corporate lines.

Code Purpose What it checks
*111*0887# Checking active services List of all connected options (including hidden)
*21# Checking call forwarding If calls are forwarded to another number
*#62# Forwarding if unavailable Where do calls go if the phone is turned off
*111*09# Balance and history payments Unauthorized charges (for example, for SMS to short numbers)
*152# Call details List of recent outgoing/incoming calls (useful for identifying unknown numbers)

If after dialing 21# or #62# you see a number that you did not connect yourself - this is a clear sign wiretapping. Immediately disable forwarding with the command ##21# and contact support MTS by number 0890.

⚠️ Attention: Some scammers enable forwarding via SMS commands (for example, they send a text message to the number +7916XXXXXXX Check the SMS history in the “Sent” folder! 21*your_number#). Check your SMS history in the Sent folder!
💡

If after typing the USSD code the message “Service is not supported” appears, try adding 111 before the command (for example, *111*21#This is relevant for corporate tariffs MTS.

4. searching for spyware

Manual scanning is not always effective: modern spyware apps (for example, Pegasus or FinFisher) are disguised as system processes. In this case, antiviruses with a spyware scanning function will help. data-i="160">Top 3 applications for Android (2026): antiviruses with spyware scanning function.

Top 3 Android apps (2026):

  • 🛡️ Kaspersky Mobile Antivirus - even detects root spies, there is a function to check for data leaks.
  • 🔍 Malwarebytes - specializes in identifying Trojans and keyloggers.
  • 📱 CertiK OS (from MTS) - a free solution for operator subscribers, scans the SIM card for suspicious activity.

How to scan:

  1. Install one of the applications (preferably from Google Play, and not from third-party sites).
  2. Run deep scan (not fast!).
  3. Pay attention to warnings about:
    • 🚨 Root access (if you have not installed it).
    • 🚨 Suspicious APK in the folder /system/app.
    • 🚨 Unauthorized connections to servers (for example, in China or the USA).
  • Remove all detected threats and restart the phone.

    • If the antivirus finds Android.Spy or Trojan.SMS, but cannot delete the file, this means that a spy is embedded in the firmware. In this case, only full reset or flashing will help.

    What to do if the antivirus does not find threats, but suspicions remain?

    In some cases, spyware can block the operation of antiviruses. Try:

    1. Install an alternative antivirus (for example, Dr.Web).

    2. Run a scan in safe mode (press the power button → "Safe Mode").

    3. Check the phone through a computer using USB Debugging and utilities ADB (for advanced users).

    5. Checking the MTS SIM card for duplication and interception

    Spying is not always carried out through the phone - sometimes attackers duplicate your SIM card MTS or connect services interception of SMS. Here's how to detect this:

    Step 1. Checking active SIM cards

    Dial *111*0887# and see how many SIMs are linked to your number. If there are more than one, this is a sign cloning. data-i="200">with a passport to block a duplicate. MTS with a passport to block the duplicate.

    Step 2. Control of SMS interception

    Some services (for example, "MTS Protection") allow you to intercept SMS for two-factor authentication. Check your connections. services:

    *111*777# → 1 (Service Management) → 3 (Security)

    Disconnect everything that you did not connect yourself.

    Step 3. Analysis network activity

    If your phone suddenly loses the network or shows the R (roaming) icon in your home zone, someone may be using your SIM card in another device. Check:

    • 📡 Device IMEIlinked to the number (dial *#06# and compare with the data in your personal one). account MTS).
    • 🌍 Geolocation of last login (in the application My MTS → "Devices").
    ⚠️ Attention: Fraudsters often use social engineering, calling on behalf of support MTS and asking for a code from an SMS. Never provide such codes - this can lead to the theft of your number!

    6. Hardware methods: how to detect wiretapping through a microphone and camera

    If you suspect that you are being watched through microphone or camera, standard methods may not work. Here's what to do:

    Method 1. Checking for physical connection

    Disconnect the phone from the network and remove the SIM card. If the noise in the speaker or the camera backlight remains active, this is a sign hardware). bookmarks (for example, a built-in bug In this case:

    • 🔧 Contact a service center to disassemble the phone.
    • 📵 Use the phone in airplane mode for important conversations.

    Method 2. Test for echo and interference

    Call from another phone to yours and place the device face down. If you hear an echo or extraneous sounds (for example, high-frequency squeaking) this may be a sign that the microphone is activated in the background.

    Method 3. Checking the indicators

    On some phones (for example, Samsung Galaxy or Xiaomi) when using the camera, a green dot lights up in the upper right corner of the screen. If it appears without your knowledge, this is an alarming signal.

    💡

    Even if you have not detected spyware, but suspicions remain, use external microphone for important conversations and physically turn off the camera (for example, cover it with tape).

    7. What to do if surveillance is confirmed: step-by-step action plan

    If you find signs of surveillance, act quickly and clearly:

    1. Disconnect the phone from the network (airplane mode or turn off the SIM card).
    2. Delete suspicious applications through settings or antivirus.
    3. Reset the settings to factory settings (Settings → System → Reset). Attention: this will delete all data!
    4. Change passwords from Google, MTS ID, messengers and banking applications.
    5. Contact the MTS salon to check the SIM card for duplication.
    6. Submit a report to the policeif you have discovered targeted surveillance (under Art. 138.1 of the Criminal Code of the Russian Federation “Illegal trafficking in special technical equipment”).

    If resetting the settings did not help, it is possible that spyware is embedded in the firmware. In this case:

    • 📱 Install custom firmware (For example, LineageOS).
    • 🔄 Buy a new phone and transfer data via Google Drive, having first checked them for viruses.
    ⚠️ Attention: Some spyware (for example, Pegasus) can survive even a reset of the settings if they are set at the bootloader level. In this case, only a complete flashing via Fastboot.

    FAQ: Frequently asked questions about tracking an Android phone (MTS)

    Can MTS track me via law?

    The operator MTS is obliged to store data on calls and SMS for 6 months (according to the Law “On Communications”), but does not have the right to listen to conversations without court approval. If you suspect illegal surveillance on the part of the operator, file a complaint with Roskomnadzor.

    How to check if a “children’s” account is connected to my phone (for example, through MTS Locator)?

    Go to the application My MTS → “Family and friends” If there are unfamiliar devices there, remove them. Google Family Link in your account Google.

    Can they track me via Wi-Fi?

    Yes, if you are connected to public network (for example, in a cafe or airport Use VPN (For example, MTS Protect) and disable automatic connection to unknown networks.

    What to do if after resetting the settings, surveillance continues?

    This means that spyware is embedded c firmware or modem. Contact the service center for flashing or buy a new phone. Do not use the old SIM card without checking!

    Is it possible to identify spying through a computer?

    Yes, connect your phone to your PC and scan it using Dr.Web CureIt! or Avast OneAlso check your phone folders for unknown files (for example, .mp3 or .amr records conversations).