How to independently check the surveillance of a phone on Android (Tele2) - free and without registration

Have you noticed that the battery begins to discharge too quickly, and Internet traffic “flies away” even when the phone is idle? Or maybe there are strange noises in conversations, and SMS messages sometimes arrive with a delay? These signs may indicate not only technical failures, but also that your Androidsmartphone is being monitored. In 2026, espionage methods have become so sophisticated that it is almost impossible to identify them without special knowledge. Tele2 surveillance is underway. In 2026, espionage methods have become so sophisticated that it is almost impossible to identify them without special knowledge.

In this article we will look 12 working methodshow to check a phone for wiretapping, location tracking or spyware - free, without registration and installation of dubious applications. All methods have been tested on current versions Android 12–14 and work even on budget models Samsung, Xiaomi, Realme and others. We will pay special attention to the nuances for subscribers Tele2, since the operator has its own characteristics in working with the network and SMS.

1. Signs of surveillance: when to sound the alarm

Before you rush to check your phone, make sure that you really have reasons to worry. Spyware rarely gives out its presence with obvious signals, but there are indirect signsthat should alert you:

• 🔋 The battery is discharged in 3-4 hours without active use (especially if it used to last a day).
• 🌐 Mobile traffic is consumed at night or when the phone is in standby mode (check in Settings → Connections → Data usage).
• 📱 The phone spontaneously reboots or “freezes” on the lock screen.
• 🔊 Extraneous noise in the conversation: clicks, echoes or voices (especially if calls are made through VoLTE from Tele2).
• 📍 SMS about logging into accountsthat you did not make (for example, from Google, VKontakte or banks).

If at least 2-3 items from the list are familiar to you, it makes sense to conduct a deep diagnosis. Please note: some symptoms (for example, rapid battery drain) may be associated with battery wear or background updates. To eliminate false positives, compare the behavior of the phone with how it worked a month ago.

2 Checking active connections and network activity

Spyware often appears on network connections. To identify them, you don’t need to install antiviruses—the built-in tools are enough Android. Follow the instructions:

1. Open Settings → Connections → Data usage → Mobile data.
2. Scroll down the list of applications and pay attention to those that consuming traffic in the background (for example, com.android.system with unusually high consumption).
3. Remember or take a photo of suspicious names - we will later let's check.

For subscribers Tele2 there is another way: check SMS commands. Some spy utilities send data via SMS to short numbers to see hidden messages:

##4636## → Phone information → Viewing USSD messages

If the log contains numbers in the format +79XXXXXXXXX or short codes (for example, 1234) that you did not send, this is a reason be wary. Especially if these SMS are sent at night, when the phone is supposedly “sleeping”.

3. Searching for spy applications manually

Many surveillance apps are disguised as system utilities or games. Their names often contain random sets of letters and numbers, for example: com.service.update, android.system.helper or xx12345.apkTo find them:

1. . in Settings → Applications → All applications.
2. Sort the list by installation date (newest on top).
3. Check applications with unclear icons (for example, a gray square or gear icon).
4. Click on the suspicious application and look at it permissions. If the game asks for access to SMS, Microphone or Geolocation , this is alarming. sign.

U Tele2 has its own application My Tele2which may also seem suspicious due to wide resolutions. However, it can be distinguished by the official icon and publisher TELE2 Russia. If in doubt, compare the APK hash amount with the official version on the operator’s website.

⚠️ Attention: Some spyware (for example, Cerberus or FlexiSPY) can hide themselves from the list of applications. In this case, only checking through ADB or specialized utilities like Malwarebytes.

4. Checking for wiretapping of the microphone and camera

If you are worried that you are being monitored through a microphone or peep through the camera, there are several ways to check this:

• 🎤 Microphone test: Call another phone and leave your device in silence. If you hear extraneous noise at the other end (for example, conversations in the room) - the microphone is active.
• 📷 Camera indicator: B Android 12+ when using the camera, a green dot appears in the top panel. If it is lit without your knowledge, someone is receiving the video.
• 🔍 Check processes: Set Termux and run the command:

  ps -A | grep -i "camera\|microphone"

  If there are unknown processes in the output, this is a cause for concern.

For subscribers Tele2 there is one more nuance: some spyware uses call forwardingTo check:

*#21# → Click “Call”

If the answer contains numbers that you did not set, your calls may be monitored. Also check:

*#62# → Checking forwarding when. inaccessibility

⚠️ Attention: Google has introduced restrictions on background access to the microphone and camera. However, some apps (for example, Android 10+ Google has introduced restrictions on background access to the microphone and camera. However, some apps (for example, Pegasus) bypass these restrictions through vulnerabilities in the firmware. If your phone has not been updated for more than a year, the risk is higher.

5. Analysis of system logs without root access

Even without superuser rights (root), you can view part of the system logs where traces of spyware may be hidden. To do this:

1. Install the application Logcat Extreme (free in Google Play).
2. Start logging and leave the phone for 10-15 minutes without any action.
3. View the logs for suspicious entries, for example:
   • Sending SMS to +79... (if you did not send SMS)
   • Uploading data to http://... (unknown URLs)
   • Audio recording started (recording sound without your knowledge)

Special attention Pay attention to logs related to telephony (calls) and location (geolocation). For example, the line Requesting location updates every 300000 ms may mean that someone is tracking your location every 5 minutes.

6. Verification via USSD commands and Tele2 codes

Operator Tele2 provides several USSD commands that help identify unauthorized activity on your number. Here are the most useful ones:

If in the response to *152*2# you see a number that you did not set - immediately disable forwarding command ##002#. Also check whether paid services are connected to your number via *155# (sometimes spyware activates them to disguise its activities).

⚠️ Attention: Services like “AntiAon” or “Protection from fraudsters” from Tele2 do not protect against spyware. They only block SMS scammers, but do not track application activity on the phone.

7. Free online scanning services (without registration)

If you do not want to install antiviruses, you can use online tools. They do not provide a 100% guarantee, but they help identify obvious threats:

• 🌍 VirusTotal (virustotal.com) - download a suspicious APK file (for example, from a folder /data/app via a file manager).
• 🔍 APKMirror Analyzer - checks application permissions and certificates.
• 📡 IP-Leak Test (ipleak.net) - shows where your data is leaking (turn on VPN before checking if you are afraid of surveillance).

To check via VirusTotal:

1. Download the APK of a suspicious application (for example, via APK Extractor).
2. Upload the file to the website VirusTotal.
3. Look at antivirus reports. If 3+ scanners marked the file as Trojan.Spy or RiskWare —delete it.

Please note: online services do not see active connections on the phone, but only analyze files. For a complete scan, it is better to combine them with other methods from this article.

8. confirmed

If you find evidence of espionage, act quickly but carefully:

1. Turn off the Internet (airplane mode) - this will stop data transfer.
2. Delete suspicious applications via Settings → Applications.
3. Reset the phone to factory settings:

   Settings → General → Reset → Reset data

   Important: First save photos and contacts to an external drive.
4. Change passwords from Google, social networks and banking applications.
5. Check the SIM card: sometimes spyware is installed via SIM-toolkit. Try inserting the card into another phone and see if the suspicious symptoms remain.

If surveillance continues after the reset, this may mean:

• 📱 The phone's firmware is infected (relevant for unofficial firmware).
• 🔌 The device is tapped at the hardware level (for example, through a bookmark in the motherboard).
• 📡 Surveillance is carried out by the operator (unlikely for Tele2, but exceptions are possible at the request of law enforcement authorities).

In such cases, the only reliable way is replacement phoneBefore buying a new one, check it for availability Google Play Protect and update the firmware. regularly.

FAQ: Frequently asked questions about surveillance on Android

Settings → Google → Google account management → Security → Your devices