How to find out which application is eating traffic on Android: 5 methods with instructions

Did you notice that the mobile data on Android suddenly began to end much faster, although you did not download anything? Or does the smartphone suspiciously “heat up” in the background, and the battery runs out in a few hours? Most likely, one or more applications are to blame, which secretly waste traffic - sometimes up to several gigabytes per day. Moreover, these are not always obvious instant messengers or social networks: the culprits can be system services, updates or even malware.

In this article you will find 5 proven ways identify “gluttonous” applications - from standard tools Android to hidden functions and third-party utilities. We will also look at how to separate legitimate traffic (for example, from cloud backups) from suspicious trafficand what to do if the culprit is pre-installed software that cannot be removed. All instructions are relevant for Android 10–14 (including shells MIUI, One UI, ColorOS etc.).

1. Built-in traffic statistics in Android settings

The fastest way to check traffic consumption is to use built-in monitoring Android. It shows data for the last month (or other period) broken down by application. However, this method has nuances: some manufacturers (for example, Xiaomi or Huawei) modify the menu, and on older versions of the system, statistics may be reset after a reboot.

To open the report:

1. Go to Settings → Connectivity and network → Data transfer → Mobile data usage (the path may differ depending on the shell).
2. Scroll down to the list of applications. Here it is displayed total traffic consumption and separately for each application.
3. Click on any application to see details: background traffic (the most dangerous!) and traffic in the foreground.

⚠️ Attention: If there are no suspicious applications in the list, but traffic is still leaking, check System applications (hide the “Show only custom” filter). Often the culprits are Google Play Services, Android System or proprietary services of the manufacturer (for example, Mi Push Service on Xiaomi).

2. Hidden developer settings: detailed network analysis

If standard statistics do not give a complete picture, enable developer mode and use hidden tools to monitor the network. This method is suitable for experienced users, as it requires working with ADB or analyzing logs.

How to enable developer mode:

1. Open Settings → About phone.
2. Find the item Build number and click on it 7 times in a row (a notification “You have become a developer” will appear).
3. Return to the main settings menu and find the new section For developers.

Now you can:

• 📊 Enable Traffic log (shows real-time activity).
• 🔍 Use Do not save actions for applications to limit their background activity.
• 🛠️ Connect to the PC and through ADB execute the command for a detailed network log:

  adb shell netstats detail

⚠️ Attention: Not all manufacturers leave these functions available. For example, on some devices Samsung the traffic log may be missing. In this case, proceed to the next method.

What to do if there is no "For Developers" section

If after 7 clicks on "Build Number" the section does not appear, try:

1. Update the firmware to the latest version.

2. Use an alternative method: enter the code in the telephone dialer ##4636## and select "Phone Information" → "Usage Statistics".

3. On some devices (for example Huawei), the path to developer mode may be different: Settings → System → Developer options.

3. Third-party applications for traffic monitoring

If the built-in tools Android do not provide enough data, install specialized utilities. They not only show traffic consumption, but also block background activity, notify about suspicious connections, and can even distinguish mobile traffic from Wi-Fi.

Top 3 applications for traffic analysis:

Application	Features	Cons
GlassWire	Real-time traffic visualization, application blocking, notifications of new connections.	Paid version is needed for advanced functions.
NetGuard	Blocking network access for individual applications without root access.	Complex interface for beginners.
My Data Manager	Convenient reports, setting limits, support for multiple SIM cards.	Advertising in the free version.

✅ Tip: After installing any of these applications Reset traffic statistics in settings Androidso that the data is not duplicated. Also check the utility's permissions - some require access to VPN for monitoring (this is normal, but may conflict with other VPN services).

Install and open the application|Enable mobile data monitoring|Configure notifications for exceeding the limit|Check reports every 2–3 days-->

4. Checking the background activity of applications

Many applications consume traffic not only when you use them, but also in the background. For example, Facebook can update the feed every 15 minutes, and Google Photos can upload photos to the cloud. To stop this: Google Photos data-i="130">Settings → Auto-update applications → Only via Wi-Fi

Ways to limit background traffic:

• 🔄 Disable Auto update for applications in Google Play: Settings → Auto-update applications → Only via Wi-Fi.
• 🚫 Prevent background activity for unnecessary applications: Settings → Applications → [Select an application] → Mobile data → Background data.
• ⚡ Use Battery optimization (it automatically limits background activity for rarely used applications).

⚠️ Attention: Some applications (for example, instant messengers or email clients) will stop running after background activity is turned off Accept notifications. If push messages are important to you, add these applications to exceptions in the battery settings.

🔍 How to find hidden background processes:

1. Install CPU Monitor or Battery Historian (to analyze CPU and network usage).
2. Check the list of active processes via ADB:

   adb shell dumpsys battery unplug

   (shows which applications are draining the battery and using the network).

5. Search for malware and suspicious services

If traffic flows “to nowhere” and there are no obvious culprits in the statistics, perhaps there are malware or spyware moduleson the device. They can masquerade as system processes (for example com.android.system) or be embedded in legitimate applications.

Signs of infection:

• 📉 Traffic is consumed even when the phone is idle (at night or on an airplane).
• 🔋 The battery runs out in 2-3 hours without active use.
• 📱 Unknown applications or advertisements appear in the status bar.

How to check your device:

1. Install an antivirus (Malwarebytes, Dr.Web or Kasperskyand perform a deep scan.
2. Check the list of installed applications: go to Settings → Applications → Show system ones i sort by installation date. Remove anything suspicious.
3. Use VirusTotal to check APK files (if you installed applications from unknown sources).

⚠️ Attention: Some manufacturers (for example, Xiaomi or Oppo) are preinstalled advertising SDKs, which can consume traffic. They cannot be removed without root access, but can be disabled in the advertising settings: Settings → Advanced → Advertising → Disable personalized advertising.

6. Traffic analysis through a router (for experienced users)

If none of the previous methods helped, try tracking traffic at the network level. To do this, connect your smartphone to the Wi-Firouter and analyze the logs. This method requires technical skills, but gives the most accurate data.

How to do it:

1. Connect your smartphone to the router (it is advisable that there are no other devices on the network).
2. Go to the router control panel (usually at 192.168.1.1 or 192.168.0.1).
3. Find the section Logs, Traffic statistics or DHCP clients.
4. See which IP addresses and ports are actively used by your device.

🔍 What to look for in the logs:

• 🌍 Suspicious domains (for example, ad., track., analytics.*).
• 🔄 Constant connections to the same servers (may be a sign of a botnet).
• 📤 Large volumes of outgoing traffic (your device may be used for DDoS attacks).

⚠️ Attention: Not all routers support detailed statistics. If your router does not save logs, use alternative solutions like Pi-hole (for blocking ads and trackers) or Wireshark (for deep packet analysis).

How to configure Pi-hole to block background traffic

1. Install Pi-hole on Raspberry Pi or virtual machine.

2. Configure your smartphone to use Pi-hole as a DNS server.

3. In the Pi-hole control panel, disable domains associated with advertising and trackers (lists can be downloaded on the Internet).

4. Check the statistics: Pi-hole will show which applications are trying to connect to blocked domains.

FAQ: Answers to frequently asked questions

Is it possible to find out which application is eating traffic without root access?

Yes, all the methods in this article work without root. However, with root access you will receive more detailed information (for example, through Packet Capture or NetMonitor).

Why does Google Play Services consuming so much traffic?

This is a system process responsible for updates, synchronization and push notifications. If it consumes >100 MB/day, check:

• Auto-update of applications in Google Play.
• Synchronization Google Photos, Drive or Gmail.
• Geolocation settings (disable Search for Wi-Fi and Bluetooth devices in Settings → Geodata).

How to turn off background traffic for all applications at once?

In Android 9+ yes function Adaptive batterythat automatically limits background activity. Enable it in Settings → Battery → Adaptive battery. For more stringent restrictions, use NetGuard with global rules.

Can a virus masquerade as a system application?

Yes. Some malware imitates the names of system processes (for example, com.android.google instead of com.google.android). Check:

• Date of application installation (viruses often appear recently).
• Application signature (in Settings → Applications → [Select] → Certificate).
• Reviews in Google Play (if the application is in the store).

Why is traffic consumed even when mobile data is turned off?

Possible reasons:

• Some applications (for example WhatsApp) may use Wi-Fi Calling or VoLTEthat work via the mobile network even when the Internet is turned off.
• Error in the firmware (reboot the device).
• SIM card supports background services (for example, MMS or USSD, which can send data.

If, after checking all the points, traffic continues to “leak”, there may be a problem on the operator’s side (for example, an error in billing) Contact support and request details of traffic consumption for the last month - sometimes you can see connections that are not displayed. in smartphone statistics.