How to Fix a Hacked Android Phone: Easy Signs & Solutions

Download Article

Learn how to regain control of a compromised device

Co-authored by Aydin Yildiz and Travis Boylls

Last Updated: July 23, 2026 Fact Checked

Download Article

• Signs Your Android is Hacked
|
• Removing Hackers
|
• Prevent Future Hacks
|
• Video
|
• Expert Q&A
|
• Tips

|Show more |Show less

It can feel stressful and daunting when someone gets control of your phone. If you suspect that someone hacked your Android device, don't worry—removing the hacker and their point of entry isn't as hard as you'd think. We’ll walk you through the steps. This wikiHow article teaches you common signs that you've been hacked or have malware, walks you through fixing your hacked device, and helps you improve your Android's security to avoid future hacks, with expert tips from electronics repair specialist Aydin Yildiz and technology specialist Brandon Phipps.

Fixing a Hacked Android Phone

• Reset the passwords on all your accounts. Install an antivirus app and run a scan.
• Check for suspicious apps. Revoke administrative access to any apps that don’t need it. Use Safe Mode if necessary to delete any apps you didn’t install.
• Consider factory resetting your phone.

Steps

Section 1 of 3:

Signs Your Android is Hacked

Download Article

1. 
   1
   You are experiencing performance issues. If your device is running slowly and a reboot doesn't seem to help, a hacker may have installed malware on your phone. You may notice your phone is suddenly slower than it used to be, or your battery is draining quickly.

   • This doesn’t necessarily mean that your device has been hacked. Most devices will suffer performance issues over time. Battery life, in particular, will start to degrade after a few years. If you are running resource-intensive apps, such as games or streaming services, your phone will slow down. If you’ve installed a lot of apps and your storage space is nearly full, you may also notice performance issues.
2. 
   2
   You see lots of ads and pop-ups. You may also notice many pop-ups, including ads and payment requests. These pop-ups can be very intrusive. If they are occurring outside of the apps you use that normally have ads, this could be a sign of malware.

   • Check for apps that launch automatically that you didn’t install, or if your phone wakes up automatically without you doing anything.
   Advertisement
3. 
   3
   There are apps you didn't install. According to Yildiz, if you find strange apps in your app list or on your home screen, they may have been installed by someone who has access to your phone. Because apps installed by hackers might be more hidden than your other apps, the best place to look is in the Apps section of the Settings app.

   • Some malware apps may have innocuous-sounding names (i.e., “Android Maintenance,” “Security Features”) in order to try to stay hidden.
4. 
   4
   You find unrecognized texts and emails. If a hacker has access to your phone, they may be using it to send messages to other people, including your contacts. Check for messages you didn't send in your text conversations, as well as in the Sent folder of your email app.

   • It is also possible that someone is spoofing your phone number or email address, which would mean they don't actually have access to your phone.
5. 
   5
   There is account activity you don’t recognize. If you notice unauthorized login attempts, changes to your accounts, or bank transactions you didn’t make, this could be a sign that someone has unauthorized access to your accounts.
6. 
   6
   There is a sudden increase in data usage. If you're suddenly using a lot more of your data plan than usual, malware on your phone may be using the internet without you realizing it. To check your data usage, open your Settings and tap Data Usage. Be especially wary if the bulk of your data usage is coming from an app you don't recognize.

   • Of course, this only applies if you haven't recently changed your internet habits. According to Yildiz, if you're suddenly watching more videos or downloading more media through messaging apps, the increase in data usage is probably justified.
Advertisement

Section 2 of 3:

Removing Hackers

Download Article

1. 
   1
   Change your account passwords. If someone has access to your device, it may be because your Google account or another account is compromised. Go through your Google account, your social media accounts, your bank account, and any other accounts you frequently use and change your passwords.

   • Don't reuse passwords—make sure each is unique. If a hacker gets access to one of your accounts, they’ll have access to any other account that uses the same password.
   • Remove any third-party apps that have access to your account that you don't recognize, and check your account activity for Google, Facebook, or other accounts you can use to create accounts. Check if there's suspicious activity you don't recognize. Sign out and remove any account activity you don’t recognize, or if it is used to create an account for a less-than-reputable service.
2. 
   2
   Reboot into safe mode. If you want to try removing hackers and malware without erasing your device and starting over, start by entering safe mode:

   • Press and hold the power button on your device.
   • When the power options appear, tap and hold Power Off.
   • When prompted, tap Reboot to safe mode.
   • If this doesn't work, try powering off your device. Then, press and hold the power button until your device turns back on, and hold down the Volume Down key until you see "Safe mode" on the screen.
   • These steps might only work with Samsung devices. Check your manufacturer's site for steps on how to boot into Safe mode on your device.
3. 
   3
   Remove administrator access and apps. Hackers will often install apps with administrator privileges on target Android devices, including crypto miners, keyloggers, and spyware tools. Before you start removing apps, you'll want to check for and deactivate device administrator apps:

   • Open Settings. To do so, swipe down from the top of the screen and tap the Gear/Settings icon.
   • To see your device admin apps on a Samsung Galaxy, go to Settings > Security and privacy > More security settings > Device admin apps.
   • To see your device admin apps on stock Android devices (i.e., Google Pixel), go to Settings > Apps > Special Access > Device admin apps.
   • If you can find the device admin settings, use the search bar to search for admin and tap either Device admin apps or Device Administrators.
   • If you see any apps you don't recognize, toggle off their switches to deactivate their administrative rights, or select the app and tap Deactivate.
   • Some admin apps are installed by the manufacturer (or your workplace) and are necessary to remain active to run properly, so only deactivate the ones that you know aren't required.
4. 
   4
   Delete unrecognized apps. According to Yildiz, whether you've found any odd apps with administrator rights or not, you'll want to go through all of your apps and delete the ones you didn't install and don’t recognize.

   • If you see some system apps that came preinstalled on your phone, you might not be able to remove those, but others are easy to uninstall from your app list or in the Settings app under Apps.
   EXPERT TIP

   

   Brandon Phipps

   Technology Specialist

   Brandon Phipps is a Technology Specialist based in Bakersfield, CA. He is the owner of Second Star Technologies and specializes in Managed IT Services for small and mid-sized businesses in Bakersfield, CA. With over 23 years of experience, he offers expert cloud computing, cybersecurity, and network management solutions. Brandon is a committed community member and coach who leads and innovates in tech and sports coaching. His dedication to local businesses and communities is evident in his hands-on, tailored approach to IT solutions.

   

   Brandon Phipps
   Technology Specialist

   Detect spyware by reviewing your system settings regularly. Keep an eye out for unfamiliar apps running, your phone turning off randomly, or strange icons popping up. Be aware that certain spyware may be well-hidden and difficult to detect through a basic system review.
5. 
   5
   Delete apps from unknown sources. According to Yildiz, if you use an alternative app store or download apps from the web rather than the Google Play Store, you won't have the bonus of Google's safety moderation and Play Protect features. Disabling installs from unknown sources ensures that you can only install apps from the Play Store.

   • Open the Settings app.
   • Tap Apps or Apps & notifications.
   • If you're using a Samsung Galaxy, tap the three dots at the top-right, choose Special access > Install unknown apps.
   • On other devices, go to Advanced > Special app access > Install unknown apps.
   • Select each app in the list and toggle its "Allow from this source" switch to Off.
6. 
   6
   Clear app cache. In case anything shady is hiding in your app cache, it's a good idea to delete all cached data. Here's how:

   • Open the Settings app.
   • If you have a Samsung Galaxy, go to Apps, select an app, choose Storage, and then tap Clear cache. Repeat for all apps in the list.
   • On other devices, tap Storage, choose Other Apps, select an app, and then tap Clear cache. Repeat for all other apps.
7. 
   7
   Reboot your phone. Now that you've made these changes, you can reboot your device into normal operating mode.
8. 
   8
   Install antivirus software and run a scan. According to Yildiz, there are many antimalware/antivirus options available in the Google Play Store. Most of the best options have paid upgrade options that allow the software to always run in the background, which can help you avoid getting hacked in the future. But for now, we'll just want to install some software so we can run a malware scan. Some excellent free options are Mobile Security, Sophos Intercept X, AVG Antivirus & Security, and Avast Antivirus & Security. All of these options are available for free in the Play Store.

   • Once you download the app, open it, and then follow the on-screen instructions to scan for viruses and malware.
   • If the scanning tool identifies a threat, you'll be prompted to remove it.
   EXPERT TIP

   

   Brandon Phipps

   Technology Specialist

   Brandon Phipps is a Technology Specialist based in Bakersfield, CA. He is the owner of Second Star Technologies and specializes in Managed IT Services for small and mid-sized businesses in Bakersfield, CA. With over 23 years of experience, he offers expert cloud computing, cybersecurity, and network management solutions. Brandon is a committed community member and coach who leads and innovates in tech and sports coaching. His dedication to local businesses and communities is evident in his hands-on, tailored approach to IT solutions.

   

   Brandon Phipps
   Technology Specialist

   Malwarebytes is a top choice for scanning your Samsung and Android phones for spyware. It monitors your system to see what apps and services are running in the background and detects anything malicious.
9. 
   9
   Consider resetting your device. As long as you back up or sync your device's data to your Google account, one of the more effective ways to get rid of a hacker is to perform a factory reset of your phone.

   • Keep in mind that resetting your device will delete all of its data. However, as long as your photos, videos, contacts, and personal data are synced to your Google account, it'll resync back to your device once you sign back in.
   • To factory reset a Samsung Galaxy device, go to Settings > General Management > Reset > Reset all settings and follow the prompts.
   • To factory reset a stock Android device (i.e., Google Pixel) go to Settings > System > Reset options > Erase all data (factory reset).
   • After resetting your phone, change your Google account password if the hacker has access to your account. You can do so in the Settings app—just go to Google > Manage your Google Account > Security > "'Signing in to Google"' > Password to do so from your device.
Advertisement

Section 3 of 3:

Prevent Future Hacks

Download Article

1. 
   1
   Keep your device and apps up to date. Installing the latest versions of the Android operating system and Play Store app updates ensures that your device has the latest security patches. You should also make sure all the apps you have installed are up-to-date.
2. 
   2
   Use a password manager. A password manager can generate strong and unique passwords for all of your accounts. Avoid using the same password for any two accounts.
3. 
   3
   Enable two-factor authentication on all your accounts. Two-factor authentication (2FA) provides an extra step that hackers must clear when trying to access your account. When logging in to your account, you will also need to enter a one-time passcode sent to your text messages or retrieved from an authenticator app in order to log in. This adds an extra layer of security.
4. 
   4
   Use a VPN on public Wi-Fi. When you access the internet through a VPN, all of your internet activity is encrypted, making it difficult for potential hackers to monitor your activity. It's especially important to use a VPN when connecting to public hotspots, such as at a café or on campus. Choose a reputable VPN service rather than a free option.
5. 
   5
   Avoid rooting your device. While rooting your device gives you more customization options, it also enables access to malicious apps that can take advantage of your administrator privileges. Androids are highly customizable as-is—if security is a concern, don't install custom ROMs.
6. 
   6
   Only install apps from the Google Play Store. According to Yildiz, the apps you install from alternative app stores and sideloaded from APK files aren't necessarily inspected for malware. When you stick to apps in the Google Play Store instead of installing alternative app stores, you have the added protection of Google's quality assurance and safety oversight.
7. 
   7
   Turn on Google Play Protect. This feature of the Play Store runs safety checks on apps before you download them, which can protect you from malware and other harmful apps. The feature is turned on by default, but may have been disabled. Here's how to check:

   • Open the Play Store app and tap your profile icon.
   • Tap Play Protect.
   • Tap Settings.
   • Turn on "Scan apps with Play Protect."
8. 
   8
   Keep your eyes on your device at all times. Don't let your device out of your sight—a hacker might look at an unguarded device as an easy hacking opportunity.

   • Your PIN or password should be difficult to guess—using "1234" is not a good idea, even if it is easy to remember. If possible, use biometrics, such as your fingerprint or face, to unlock your phone.
9. 
   9
   Don't fall victim to phishing scams. Sometimes hacks occur because an unsuspecting user clicks a link in an email or text message and enters their login information, thinking they are signing into a website they use often. If you're not completely sure that a message comes from a trusted source, never click unfamiliar links, open attachments, or reply to messages with personal information.

   • Phishing websites are often designed to look like websites you commonly use, such as your bank website or your social media websites. Check the URL in your web browser to make sure it is correct. If you receive an email claiming there is a problem with your account, contact customer service or go to the official website/official app instead of clicking the links in the email or text message.
10. 
    10
    Avoid charging your device at public charging stations. "Juice jacking" is a type of hacking that occurs when you plug a susceptible phone into a charging station that has malware installed. To avoid data theft and malware installation without your consent, stick to using your own charger.
Advertisement

Want to save this article? Download it as a PDF.

How to Fix a Hacked Android Phone: Easy Signs & Solutions

Get the full formatted PDF you can save, print, or read offline. Anytime, anywhere.

Download PDF for $2.99

One-time purchase

Expert Q&A

Search

Add New Question

• Question

  How can I be safe with my phone?

  

  Aydin Yildiz
  Electronics Repair Specialist

  Aydin Yildiz is an Electronics Repair Specialist based in San Diego, California. He is the founder of Fix4Less, a professional cellphone repair business that has been in business since 2014. Aydin has over a decade of experience in the electronics repair business, and he works with phone, tablet, and computer repairs. Fix4Less serves individuals, corporate customers, and wholesale buyers in both repairing and recycling Apple products. Aydin holds an MBA from Southern States University.

  

  Aydin Yildiz

  Electronics Repair Specialist

  Expert Answer

  Always check and see what's running in the background of your phone. Make sure you know what permissions these apps have, and that they aren't doing anything you don't want them to do, like tracking your location.

  Thanks! We're glad this was helpful.
  Thank you for your feedback.
  If wikiHow has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission. Support wikiHow

  Yes No

  Not Helpful 12 Helpful 26
• Question

  How can I reset my phone to factory defaults?

  

  AnotsSpaen

  Community Answer

  You should first use a secure, separate device to change the passwords for all your compromised online accounts, enable two-factor authentication, and contact the service providers. To address the phone itself, obtain your device's official firmware and a compatible flashing tool (like Odin for Samsung) from a trusted source, such as your phone's manufacturer or XDA Developers, onto a computer. Then, follow instructions to enter download mode on your phone and reflash the full firmware. This process will reset your phone to its factory state, removing any malware.

  Thanks! We're glad this was helpful.
  Thank you for your feedback.
  If wikiHow has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission. Support wikiHow

  Yes No

  Not Helpful 3 Helpful 7
• Question

  My passwords keep getting compromised even after I change them; how can I prevent this from happening?

  

  Ennan Geographic

  Top Answerer

  To prevent password compromise, you must use strong passwords. Avoid common words, names, or easily guessable sequences, as these are often targeted by hackers. Instead, create unique passwords that combine uppercase and lowercase letters, numbers, and symbols, like `@6utterf1y`.

  Thanks! We're glad this was helpful.
  Thank you for your feedback.
  If wikiHow has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission. Support wikiHow

  Yes No

  Not Helpful 3 Helpful 2

See more answers

Ask a Question

200 characters left

Include your email address to get a message when this question is answered.

Submit

Advertisement

Video

Tips

• If the hacker performed activities that increased your phone bill, such as overusing your data plan or making long-distance phone calls, contact your mobile provider to let them know you were hacked. Depending on the situation and the provider, you may be able to get a discount on the overage charges.
  Thanks

  Helpful 0 Not Helpful 0

Submit a Tip

All tip submissions are carefully reviewed before being published

Name

Please provide your name and last initial

Submit

Thanks for submitting a tip for review!

Advertisement