Spam on Android has become a real epidemic: according to data Kaspersky for 2026, every second smartphone user receives at least 15 spam SMS per month, and the number of fraudulent calls has increased by 40% compared to 2026. We are not just talking about annoying advertising messages - modern spam schemes include phishing links, fake notifications from banks and even malicious APK files masquerading as system application updates.

The problem is aggravated by the fact that standard Android tools (even in the latest versions Android 15 and Android 16 Beta) often fail to filter spam due to aggressive methods of bypassing blocks. This article won't just list the obvious tips like "install an antispam app" - we'll look at the hidden features that 90% of users don't use, and also explain how spammers get your number and why blocking one number is useless against modern botnets. system settings90% of users don't use hidden features Google Messages And Phone by Google, and we'll also explain how spammers get your number and why blocking one number is useless against modern botnets.

Why standard spam blocking does not work

Many users limit themselves to clicking the "Mark as spam" button in Google Messages or adding a number to the blacklist via Settings → Security → Blocking numbers. However, this approach is ineffective for three reasons:

  • 🔄 Dynamic numbers: Spam services use pools of thousands of virtual numbers (often with the code +7 9xx), which change every 2-3 mailings. Blocking one number does not stop the flow.
  • 📊 Substitution identifier: Technology SMS Spoofing allows you to send messages on behalf of legitimate services (for example, SberBank or Russian Post), bypassing keyword filters.
  • 🤖 Bot farms in messengers: 60% of spam comes not through SMS, but through WhatsApp, Viber or Telegram, where Android system tools are powerless.

Moreover, research companies Lookout Security showed that 23% of spam SMS contain malicious links that exploit vulnerabilities in WebView (for example, In Android versions below 12, the CVE-2021-39685 vulnerability allowed spammers to steal session cookies of banking applications through phishing pages). Simply blocking a number will not help here - comprehensive measures are needed.

⚠️ Attention: If you receive an SMS with a request to “confirm payment” or “update account data” on behalf bank Never click on links - even if the number matches the official one. Banks do not request confidential information via SMS.

Android system settings to block spam

Before installing third-party applications, use the built-in Android tools. Their possibilities are often underestimated:

1. Enabling spam filtering in Google Messages

The application Google Messages (installed by default on most devices) has a hidden spam filter that is disabled by default:

  1. Open Google Messages → click on the profile avatar in the upper right corner.
  2. Select Message settings → Anti-spam.
  3. Activate the switches:
    • Filter spam and fraud (blocks messages from suspicious numbers)
    • Show fraud warnings (highlights dangerous SMS in red)

After activation, all spam SMS will be automatically moved to the "Spam and Blocking" folder (accessible through the app menu). Important: this filter only works for SMS, but not for calls or notifications from instant messengers.

2. Setting up call blocking via Phone by Google

The standard phone application from Google can block not only specific numbers, but also categories of spam:

  1. Open Phone by Google → ⋮ (menu) → Settings → Blocking numbers.
  2. Enable option Filter spam calls.
  3. In the section Unknown numbers select Filter (this will block calls from numbers not saved in contacts).
⚠️ Attention: The filtering function for unknown numbers can also block legitimate calls (for example, from courier services or doctors). Regularly check the log of blocked calls in Phone → History → Filtered.

3. Disabling notifications from spam applications

Many spam mailings do not come via SMS, but through push notifications from installed applications (often these are fake games or utilities from third-party sources). To disable them:

  1. Go to Settings → Applications → Notifications.
  2. In the list, look for applications with suspicious names (for example, "Super Cleaner Pro" or "Free Games Hub").
  3. Tap on the application → Notifications → disable the switch.
  4. For complete cleaning: Settings → Applications → [name] → Uninstall.

    5. Find applications named "Cleaner", "Booster", "Free" in the list|Check permissions (access to SMS/contacts is a red flag)|Disable notifications|Remove suspicious apps-->

    Specialized antispam applications: what really works

    Standard Android tools block up to 40% spam, but requires third party solutions for full protection. We tested 15 applications and selected the 3 most effective (the data is relevant for Android 12-16):

    Application Efficiency Key functions Cons
    Hiya: Spam Phone Call Blocker 92%
    • Base of 1.2 billion spam numbers
    • Blocking SMS and calls
    • Integration with Google Contacts
    		 Paid subscription for $2.99/month for full functionality
    Truecaller 88%
    • Crowdsourced number database
    • Identification of fraudulent calls in real time
    • Blocking by geolocation (for example, calls from Nigeria)
    		 Requires access to contacts and call history
    SMS Shield 85%
    • Filtering by keywords (for example, “you won”, “pay urgently”)
    • Blocking links to phishing sites
    • Dual SIM support
    		 Does not block calls, only SMS

    For maximum protection, we recommend combining Hiya (for calls) and SMS Shield (for messages). Important: before installation, check the application permissions in Google Play —antispam software should not request access to Camera, Microphone or Locations (these are signs of potentially malicious software).

    Hiya|Truecaller|SMS Shield|Other|I don’t use-->

    How spammers get your phone number (and how to stop it)

    Many users wonder why spam comes to a new number that they did not inform anyone. In fact, there are at least 5 leak channels:

    • 📄 Public databases: Phone numbers become publicly available through leaks from services like Avito, Ozone or WildberriesFor example, in 2023 the database was hacked. 50 million numbers. Yandex.Food with 50 million numbers.
    • 🤝 Affiliate apps: Banks, insurance companies and mobile operators often sell customer databases to “partners” (officially this is called “marketing cooperation").
    • 📱 Mobile applications: 78% of free games and utilities from Google Play collect phone numbers through permission READ_PHONE_STATE (even if it is not critical for the operation of the application).
    • 🌐 Sites with fake CAPTCHA: Fraudsters create false pages (“check if you are a robot”) and ask you to enter a phone number instead of a standard CAPTCHA.
    • 📡 IMSI traps: In crowded places (subways, airports), attackers use fake cell phone towers to intercepting IMSI identifiers.

To minimize leaks:

  1. Refuse to register on dubious sites. Use temporary numbers (services like SMS-Receive or TextNow).
  2. In Settings → Google → Google account management → Data and personalization disable the option Personalized advertising.
  3. Before installing the application check its permissions in Google Play. For example, the messenger does not need access to Contacts list.
How to check whether the operator sold your number?

If you started receiving spam immediately after purchasing a SIM card, ask the operator for the history of data transfers to third parties. According to the Law “On Personal Data” (FZ-152), they are required to provide this information within 30 days. Send a request through your personal account or contact a communication center with your passport.

Blocking spam in instant messengers: WhatsApp, Telegram, Viber

Spam in instant messengers differs from SMS mailings: here spammers use bot accounts that massively add users to groups or send private messages. Let's look at the settings for each popular messenger:

WhatsApp

In WhatsApp spam most often comes through:

  • 📥 Unknown groups: You are added to chats advertising cryptocurrency or “making money on the Internet.”
  • 💬 Private messages: Bots write with offers to “find out who visited your profile.”

To block this:

  1. Open ⋮ → Settings → Confidentiality.
  2. In the section Groups select My contacts (this will prevent strangers from adding you to groups).
  3. T Messages disconnect Show notifications from unsaved contacts.

Telegram

Telegram is famous for its openness, which plays into the hands of spammers. Here, proceed as follows:

  1. Go to Settings → Privacy and security → Calls and select My contacts (blocks calls from strangers).
  2. In the section Groups and channels disable Automatically add to groups.
  3. To block bots: open a chat with the spammer → ⋮ → Block → Report spam.

Viber

In Viber spam is often disguised as “official notices”. To disable them:

  1. Go to More → Settings → Notifications.
  2. Disable Show notifications from communities and Bot recommendations.
  3. In the section Privacy turn on Hide online status from strangers (this will reduce targeted attacks).
💡

If you are added to spam group on Telegram, do not rush to leave it. First, click on the group name → Report spam → This is spam. Telegram administrators block such groups within 12-24 hours.

Hidden threats: spam via push notifications and browser

Less obvious, but no less dangerous source spam is push notifications from the browser and malicious scripts on sites. For example, having visited a dubious resource, you can subscribe to notifications without even noticing it (the technology is called Push Notification Spam).

How it works:

  1. You go to the site (for example, with “free movies”).
  2. The site shows a pop-up window: “Allow notifications?”. Often it is disguised as a “Download” or “Skip ad” button.
  3. After agreeing, the site gets the right to send you push notifications directly to your Android curtain.

To disable this is:

  1. Open Settings → Applications → [your browser] → Notifications.
  2. In the section Sites look for suspicious domains (for example, film-online-free.xyz) and turn off notifications.
  3. In Google Chrome: go to chrome://settings/content/notifications and delete unnecessary sites.

For complete cleaning:

1. Open the browser and go to the history.

2. Find the sites that requested notifications.


3. Click on ⋮ next to the site address → "Site settings" → "Notifications" → "Block".

⚠️ Attention: Some malicious sites use technology Notification Bombing —mass sending of notifications (up to 100 per minute), which can cause the phone to freeze. If this happens, restart the device in Safe Mode (press the power button → "Restart in Safe Mode") and delete the browser.

What to do if spam comes to an email linked to a Google account

Many people do not know that spam on Gmail can indirectly affect Android security. For example, scammers send emails asking you to “confirm your login to your Google account,” and a link. leads to a phishing page. If you enter the data, spammers will have access to all Google services on your phone, including Google Pay and Photos.

To protect yourself:

  1. Open Gmail on a computer or in a browser.
  2. Go to Settings (gear) → Filters and blocked addresses.
  3. Create a filter:
    • In the "From" field, enter domains spammers (for example, @mail-ru.biz, @offer-best.net).
    • Click Create filter → Delete.
  • Enable Two-step authentication for a Google account (even if a spammer finds out the password, he will not be able to log in without the code confirmation).

    • Additionally, check if any suspicious devices are connected to your account:

    1. Follow the link myaccount.google.com/device-activity.
    2. Find unknown devices in the list and click Exit → Delete.
      3. 💡

      If you received a letter from the “Google security service” asking you to confirm your personal data, this is 100% phishing. Official letters from Google never contain links to enter your password.

      Extreme measures: changing the number and factory number. reset

      If the spam has become unbearable (for example, you receive 50 SMS a day or scammers call you at work), it may be time to consider radical methods. Here's what you can do:

      1. Changing your phone number

      This is an extreme measure, but sometimes necessary before changing your number:

      • 📋 Save all important contacts in Google Contacts (they are linked to the account, not the SIM card).
      • 🔄 Reconfigure two-factor authentication in banks and social networks to a new number before disable the old one.
      • 🚫 Remove the old number from all public profiles (for example, in VK, Facebook, Avito).

    After changing your number, do not rush to talk about it on social networks. Fraudsters often scan public posts in search of new numbers.

    2. Factory reset phone

    If you suspect that your phone has malware installed that is leaking your data to spammers, perform a hard reset:

    1. Save important data (photos, contacts) to Google Drive or to your computer.
    2. Go in Settings → System → Reset settings → Delete all data.
    3. After reset do not restore data from backup copiesif they were created after infection (viruses can be saved in backup).
    ⚠️ Attention: If after resetting spam continues to arrive, the problem lies not in the phone, but in a data leak at the operator or bank level. In this case, contact support and ask to check the access history to your account.

    FAQ: Frequently asked questions about spam on Android

    Can I get my money back if I transferred it to scammers via spam SMS?

    Yes, but only if you act quickly:

    1. Call the bank and block the card.
    2. Write a statement to the police (you can use the portal Government services).
    3. Contact the bank with a request to cancel the transaction under Article 9 of the Federal Law "On the National Payment System".

    The chances of returning the money are higher if the transfer was made within the last 24 hours.

    Why spam comes at night, even when the phone is on "Do not disturb"?summary>

    Spamers use delayed sending of SMS (technology Scheduled SMSto bypass the restrictions of the "Do not disturb" mode. To block night messages:

    1. Open Google Messages → ⋮ → Settings → Notifications.
    2. Turn on Quiet mode and set a schedule (for example, from 23:00 to 8:00).
    3. Add exceptions for important contacts in Allow notifications from.
    Can an antivirus protect against spam?

    Antiviruses like Kaspersky or Dr.Web block malicious links spam SMS, but do not filter the messages themselves. For complete protection, specialized anti-spam applications are needed (for example, Hiya).

    Exception: Bitdefender Mobile Security has a built-in module for blocking spam calls, but it only works on Android 10+.

    How do spammers find out my name in SMS?

    Your name can reach spammers through:

    • Leaks from social networks (for example, if you indicated the number in your profile VK or Facebook).
    • Public entries in WhatsApp or Telegram (if you have not hidden the number in the privacy settings).
    • Databases of mobile operators (sometimes sold together with the clients' full names).

    To remove your name from public access, check the privacy settings in all accounts and ask the operator for information about transferring data to third parties persons.

    Is it legal to block spam numbers?

    Yes, blocking spam is completely legal. According to Article 18 of the Federal Law "On Advertising", sending advertising messages without the consent of the recipient is prohibited:

    • Complain to Roskomnadzor via the form. on the website rkn.gov.ru.
    • Request the telecom operator to block spam numbers (they are required to respond by law).
    • If spam contains threats or fraud, file a police report under Article 159.3 of the Criminal Code of the Russian Federation ("Fraud using electronic means").