Is your phone being monitored? 8 signs that weren’t there last month.

Short answer

Consumer spyware is built to be invisible. Not as a side effect. As the core feature. What follows are behavioural and technical signals worth taking seriously — not as proof, but as a reason to stop assuming nothing is happening.

1. Battery drain that changed without explanation

Spyware runs in the background and transmits data continuously. That process draws battery. If your phone is draining measurably faster than a month ago and nothing else has changed — no new apps, no OS update, no shift in usage — something is running. Gradual decline is normal. A sudden change is not.

2. Data usage higher than your behaviour explains

Background data transmission shows up in usage logs. Open your cellular data settings and go through the apps. An unfamiliar app consuming background data you can’t account for is worth looking at. Check cellular and Wi-Fi usage separately.

3. The device is warm when it should be idle

Face down, screen off, not charging, and warm to the touch. Background processes generate heat. Not conclusive by itself. Worth noting alongside the other signals.

4. An unfamiliar app with full permissions

Go through your complete app list and check permissions. Spyware installs under generic names: System Service, Phone Monitor, Device Manager. Anything with simultaneous access to location, microphone, camera, and contacts that you don’t recognise warrants a closer look.

5. The device was out of your possession

Physical access is required to install device-level spyware on Android and most iOS configurations. If your phone was in someone else’s hands for any period of time, the window for installation existed. This is context, not technical evidence. It is also the single most relevant factor when deciding whether the other signals on this list mean something.

6. Call behaviour that changed recently

Dropped calls at specific times or locations. Interference you haven’t heard before. Some spyware versions have documented conflicts with standard call processing. Note it as part of a broader picture, not on its own.

7. Account activity you don’t recognise

Separate from device-level spyware: if your email, Google, or Apple account shows login activity from a device or location you don’t recognise, someone has your credentials and is accessing your accounts directly. Check login history on every major account now.

8. Unexpected restarts

Some spyware versions restart the device to apply updates or complete installation. A restart with no obvious cause — no software update, no dead battery — is worth noting.

What to do if several of these are present

Don’t act from the monitored device. Use a phone your spouse has never had access to, and work through the full device audit in the divorce checklist. A factory reset removes device-level spyware on both iOS and Android, but speak to a lawyer before doing it. If monitoring is happening, documenting it may be relevant to your case. (See: how your spouse is reading your messages.) (See: digital privacy checklist before filing.) (See: assume your devices are already compromised.)

Frequently asked questions

Can spyware be installed on an iPhone without jailbreaking it?

Yes, through iCloud. If someone has your Apple ID and password, they can access your backup, photos, messages synced to iCloud, and in some configurations your real-time location. No physical access to the device required. That is also why it is harder to detect: nothing installs on the phone itself.

Does a factory reset remove spyware?

On Android, yes. On iOS, restoring from a backup made after installation may restore the spyware with it. Set up as new rather than restoring from backup. Before doing either, consider whether documenting the monitoring first serves your legal interests.


There’s no perfect setup. Anyone selling you perfect is selling fear. The goal is simple: make yourself a harder target than the person next to you.

Similar Posts