Is your phone being monitored? 8 signs that weren’t there last month.
Short answer
Consumer spyware is built to be invisible. Not as a side effect. As the core feature. What follows are behavioural and technical signals worth taking seriously, not as proof, but as a reason to stop assuming nothing is happening.
1. Battery drain that changed without explanation
Spyware runs in the background and transmits data continuously. That process draws battery. If your phone is draining measurably faster than a month ago and nothing else has changed, no new apps, no OS update, no shift in usage, something is running. Gradual decline is normal. A sudden change is not.
2. Data usage higher than your behaviour explains
Background data transmission shows up in usage logs. Open your cellular data settings and go through the apps. An unfamiliar app consuming background data you can’t account for is worth looking at. Check cellular and Wi-Fi usage separately.
3. The device is warm when it should be idle
Face down, screen off, not charging, and warm to the touch. Background processes generate heat. Not conclusive by itself. Worth noting alongside the other signals.
4. An unfamiliar app with full permissions
Go through your complete app list and check permissions. Spyware installs under generic names: System Service, Phone Monitor, Device Manager. Anything with simultaneous access to location, microphone, camera, and contacts that you don’t recognise warrants a closer look.
The mechanics of how this access is set up in the first place, before the app is even installed, are explained in why your spouse is probably reading your messages. Most cases start with shared accounts and forgotten permissions, not with a hostile app.
5. The device was out of your possession
Physical access is required to install device-level spyware on Android and most iOS configurations. If your phone was in someone else’s hands for any period of time, the window for installation existed. This is context, not technical evidence. It is also the single most relevant factor when deciding whether the other signals on this list mean something.
The reasoning for assuming the install happened, regardless of evidence, is laid out in why you should assume your devices are already compromised before filing for divorce. The threshold for action is access, not proof.
6. Call behaviour that changed recently
Dropped calls at specific times or locations. Interference you haven’t heard before. Some spyware versions have documented conflicts with standard call processing. Note it as part of a broader picture, not on its own.
7. Account activity you don’t recognise
Separate from device-level spyware: if your email, Google, or Apple account shows login activity from a device or location you don’t recognise, someone has your credentials and is accessing your accounts directly. Check login history on every major account now.
8. Unexpected restarts
Some spyware versions restart the device to apply updates or complete installation. A restart with no obvious cause, no software update, no dead battery, is worth noting.
What to do if several of these are present
Don’t act from the monitored device. Use a phone your spouse has never had access to, and work through the full device audit in our digital privacy checklist before divorce. A factory reset removes device-level spyware on both iOS and Android, but speak to a lawyer before doing it. If monitoring is happening, documenting it may be relevant to your case.
Frequently asked questions
Can spyware be installed on an iPhone without jailbreaking it?
Yes, through iCloud. If someone has your Apple ID and password, they can access your backup, photos, messages synced to iCloud, and in some configurations your real-time location. No physical access to the device required. That is also why it is harder to detect: nothing installs on the phone itself. For the higher tier of cloud-and-zero-click vectors that target the same surface, see how Pegasus does not need you to click.
Does a factory reset remove spyware?
On Android, yes. On iOS, restoring from a backup made after installation may restore the spyware with it. Set up as new rather than restoring from backup. Before doing either, consider whether documenting the monitoring first serves your legal interests.
Can I detect spyware with an antivirus app?
Sometimes, but not reliably. Mainstream consumer antivirus apps detect commodity malware better than they detect commercial stalkerware, which is built specifically to evade them. A clean detection from one antivirus does not mean the device is clean. Treat antivirus as one weak signal alongside the eight signals above, not as the answer.
Should I take the phone to a forensic specialist?
If the device may become evidence in a legal dispute, yes, before you do anything else. A forensic specialist preserves the device state in a way that is admissible. A factory reset destroys that evidence. The right order is legal advice, then forensic preservation, then whatever device hygiene you decide to do. Skipping the first two steps is the single most expensive mistake people make in these situations.
There’s no perfect setup. Anyone selling you perfect is selling fear. The goal is simple: make yourself a harder target than the person next to you.
