How to detect spyware on iPhone and remove it

Spyware for iPhones is malicious software that tracks your activity across the device, including your message and call history – but it can also track your physical location by hijacking your phone’s location services. If you’ve noticed slower-than-usual performance, a battery that drains more quickly, random shutdowns, unwanted pop-ups or apps, or overheating issues, you may have spyware on your iPhone.

If your iPhone has been infected with spyware, it’s essential to take action immediately. Otherwise, your data and security could be at risk, and a third party could even track your movements. You can start by updating your phone’s iOS software to the latest available version, checking for apps you don’t recognize, and running a malware scan with a trusted security application, like TotalAV.

How to detect hidden spyware on iPhone

While iOS devices may be more secure than Android devices, iPhones aren’t immune to the risks of spyware. Cyber criminals continue to detect and exploit iOS vulnerabilities, so it’s crucial that you know how to check for spyware on iPhone – here are the steps to do so.

1. Check for apps you don't remember installing

Start by going through your installed applications on the home screen and check whether there are any that you don’t recall installing yourself. Spyware is good at disguising itself as a game application for example, or hiding itself within app folders. A far simpler way to check all of your apps is via the Settings application:

1. Open Settings
2. Tap on General
3. Tap on iPhone Storage

Now, you’ll see a list of all apps that can be ordered by Size, Name, or Last Used Date. Using these filters, you can check through all your installed apps for unrecognized software. If your device issues started recently, check for the most recently installed applications by looking for the Last Used Date beneath the app’s name. I recommend reviewing the application’s permissions and taking a moment to understand if it could be spyware before you remove it.

2. Review the app's permissions

Spyware apps have been known to abuse your device’s permissions, gaining access to sensitive functionality like your microphone, your camera, and even your location services. This could give the software’s owner permission to listen or spy on you, or even track your movements in real time. You can check which permissions are afforded to an app within your iPhone’s settings menu:

1. Open Settings
2. Tap on Privacy & Security
3. Tap an option to check app permissions – for example, Location Services

Here, you’ll be able to not only check whether an app has more permissions than it should, but also amend them and remove permissions where necessary. While you should expect apps like Google Maps to have access to Location Services, other apps like TikTok or mobile games generally do not need this level of access to your data. Making these checks a regular part of your cyber hygiene routine can help limit the data that spyware has access to should it manage to infiltrate your device.

3. Scan your iPhone using security software

It’s a misconception that iPhones cannot get infected by malicious software – they’re much less susceptible than Android devices, but an iPhone can still be infected with spyware and malware. That’s why I recommend using a trustworthy iPhone antivirus to scan for any spyware that might be hiding on your device. During our TotalAV review, this antivirus performed best thanks to having robust anti-spyware features and a comprehensive spyware signature database. Antiviruses look for signatures – unique identifiers or patterns that indicate a particular type of spyware or malware, before comparing them against a known database to identify and eliminate threats.

Visit TotalAV now

How to remove spyware from iPhone

If you’ve identified spyware on your iPhone, then it’s time to remove it and restore your device security. Here’s how to remove spyware from an iPhone once and for all.

Step 1: Update your iOS device

Apple routinely patches security flaws and vulnerabilities, releasing them in the form of iOS updates that often contain new features too. Keeping your iOS software up to date ensures not only that you have access to the latest features, but also that any security backdoors are fixed before cyber criminals can exploit them to infect your device. To check you’re running the most recent version of iOS:

1. Open Settings
2. Tap on General
3. Select Software Update
4. Tap Update Now (or Update Tonight if you’re not on a Wi-Fi network)

You’ll notice that my Automatic Updates are set to “On” so that I get the latest security patches by default. This is a good idea to ensure you’re always protected from emerging threats in case you forget to routinely update your phone’s OS.

Step 2: Remove suspicious apps

If you’ve identified apps that could be responsible for spyware-triggered symptoms like battery drain or sluggish performance, it’s time to remove them.

1. Press and hold the app’s icon until a menu opens
2. Tap on Remove App

Alternatively, you can long press the app icon until all your installed apps begin to wiggle, before tapping on the small cross symbol in the upper-right corner of the app’s icon. You can also revisit the list of apps installed on your phone in Settings > General > iPhone Storage and delete an app from the list in this way.

Step 3: Clear Browsing Data and History

Your browser caches page information to help load pages more quickly next time you’re visiting them, but your cache – containing browsing data and history – can also contain some forms of sneaky spyware that hides itself among your legitimate data. This can give malicious third parties the ability to spy on your browser data. So, clear your browsing data with these simple steps:

1. Open Settings
2. Tap on General > iPhone Storage
3. Select Safari from your list of installed apps
4. Tap Website Data
5. Finally, select Remove All Website Data

Step 4: Use an antivirus to scan for and remove spyware

The best way to remove spyware from your iPhone is to trust a reliable antivirus for iPhone that can quickly identify common spyware signatures that you might easily miss yourself. Not only will it help to clean up your device of spyware, but it’ll also improve your overall protection against future spyware and malware threats. Here’s how to use an antivirus to remove spyware from your iPhone:

1. Install a trusted antivirus on your iPhone. I recommend TotalAV, now 80% off!
2. Choose a plan and create an account.
3. Tap on the magnifying glass to start a Smart Scan.
4. Wait for the scan to complete and review your results, following the app’s recommendations for improving your device security.

TotalAV and other trusted iPhone antiviruses can help protect you from other threats too by blocking malicious websites and intercepting attempted phishing messages. TotalAV is available with a 7-day free trial to new users on mobile, so it’s a good starting point to scan your device risk free.

Last resort: Consider a factory reset

If you’ve exhausted all the above options and still believe your iPhone is infected with spyware or trackers, you can perform a factory reset to restore the device back to its original settings. Be mindful that this will wipe all your data, including photos, applications, and account credentials, so it’s essential to back up your device’s data before you get started.

1. Open Settings and tap on your Apple Account at the top
2. Tap on iCloud
3. Select iCloud Backup
4. Finally, tap on Back Up Now

Once you’ve created your iCloud backup file, you can go ahead and follow the steps below to reset your phone to factory settings:

1. Open Settings > General
2. Select Transfer or Reset iPhone
3. Tap on Reset
4. Finally, confirm Reset All Settings to initiate the wipe

Once your phone has reset and has been restarted, you can set the phone back up and choose the option to restore your iPhone from an iCloud backup. This is where you’ll find the backup that you created prior to wiping your settings.

What is pegasus spyware on iPhone

Pegasus is a sophisticated type of mobile spyware that was created by NSO Group, an Israeli company, for anti-terrorism purposes and criminal monitoring. However, it has been said that the software is still used in some regions to monitor political opponents. It can easily infiltrate an iPhone, or Android device, without the phone’s owner taking any action – otherwise known as a zero-click exploit.

Pegasus infects iPhones by preying on software vulnerabilities in certain applications such as WhatsApp and iMessage. After it has established a foothold, Pegasus can harvest personal data that includes messages and emails, call history, location service data, and login credentials. In some instances it has shown evidence of being able to monitor camera and microphone activity too.

Because Pegasus was developed by an advanced organization as opposed to a lone-wolf cybercriminal, it is hard to detect and remove compared to traditional spyware. That said, Apple released a Threat Notification system that displays a warning at the top of your Apple account if you’ve been impacted. It also sends an SMS and email to the contact details registered to that account.

If Pegasus has managed to infiltrate your iPhone, the only known workaround is currently to fully reset your device back to its factory settings, before installing the latest version of iOS. Remember, this is a highly targeted form of spyware that is typically aimed at individuals in positions of power, such as political leaders. For these people, activating Lockdown Mode is a good tactic – there’s more on this below.

How to prevent spyware on iPhone

To prevent spyware on an iPhone, I recommend ensuring that your iOS software and that of your installed applications is kept up to date. You should also use strong passwords on your device alongside two-factor authentication, while avoiding clicking on any suspicious links and attachments and only installing official apps from the Apple App Store. Here’s a more detailed look at how to protect your iPhone from spyware:

1. Keep your software updated

Regularly updating your iPhone’s operating system software (iOS) is one of the most effective ways to prevent spyware on an iPhone. Apple’s ecosystem is already fairly airtight, but cybercriminals prey on vulnerabilities that appear from time to time. These are usually patched quickly, and getting the latest iOS updates ensures you’re protected. However, you should also keep your software apps up to date for the same reason – many are developed by third-party companies who may unintentionally introduce a zero-day vulnerability, so getting the latest version ensures your app is fully patched and as secure as it can be.

2. Secure your account

Your Apple ID is one of the most sensitive accounts tied to your iPhone and should be protected by a strong, unique password. That said, the same applies to any of your accounts, whether that’s your email inbox, banking app, or social media accounts. Using the same password for every account is a bad idea; if a cybercriminal gets into one of your accounts, they could potentially access everything else you own. While nobody wants to remember countless passwords, a hacked account is much worse – fortunately, a reliable password manager can help suggest strong passwords, and manage and store them for you in a secure vault.

Two-factor authentication (2FA) is also crucial, as it adds a second layer of defense in the case that somebody manages to crack your password. I recommend enabling 2FA for your Apple ID as a start, before considering other applications that should be protected.

1. Open Settings
2. Go to Sign-In & Security
3. Tap on Two-Factor Authentication
4. Add a secondary verification method

Personally, I use 2FA with my email addresses, financial applications, and social media accounts at a minimum. This ensures that even if somebody gets your password, they won’t be able to get into your account without having your device too.

3. Be cautious online

When reading messages and emails, you should be wary of clicking on any links contained within. Similarly, don’t download attachments without being certain that the file is a safe attachment from a trusted sender, and avoid downloading unofficial apps – stick to the Apple App Store since Apple carefully vets all new apps.

If you plan on connecting to public Wi-Fi networks, make sure that you’re using a reliable VPN to protect your data from third parties who can eavesdrop on these notoriously unsecured networks. The best way to check both boxes at once is to consider getting an antivirus with a VPN included. Also, make a habit of regularly clearing your cache and browser history to avoid spyware that may be lurking in cached files.

4. Monitor your iPhone

Moving forward, monitor for any unusual behaviors from your iPhone, like unrecognized applications, speedier battery drain, or overheating. I recommend also reviewing the permissions your apps have on a regular basis, removing any apps you don’t remember installing and limiting permissions on apps that don’t require them. I also suggest using an app like TotalAV to scan your iPhone for spyware on a regular basis, which will also recommend tips to improve your device’s security.

As a final piece of advice, I recommend Lockdown Mode only to the most exposed individuals like political leaders and journalists or those who are concerned about being tracked by a malicious individual such as a former partner.

1. Open Settings > Privacy & Security
2. Tap on Lockdown Mode
3. Finally, tap on Turn On Lockdown Mode

Lockdown Mode is a high-security failsafe feature designed to protect people who may be at increased risk of cyberattacks that target them specifically. However, it limits some device functionality like iMessage attachments and certain website features. It’s generally seen as a last-resort option for people with a target on their back and a lot to lose.

Conclusion

While iPhones are better protected against malware and spyware than Android devices, it’s a common misconception that they can’t suffer an infection at all. Your iPhone can be infected with spyware that can siphon off your sensitive user data, as well as monitoring your microphone, camera, and location services – a huge breach of privacy.

So, monitor your device for unusual activity like a faster-draining battery, sluggish performance, unrecognized apps, and apps that have excessive permissions. What’s more, be sure to scan your device with a robust iPhone antivirus – I recommend TotalAV, which also provides enhanced protection against malicious websites and phishing scams.

---

---

FAQ

Can someone spy on my iPhone without me knowing?

Yes, somebody could spy on your iPhone without your knowledge by installing spyware on your device. While this often requires physical access to the iPhone, it's possible to be infected by spyware like Pegasus via vulnerabilities in iMessage and other apps. Once your phone has been infected with spyware, the person responsible for the malicious software could intercept your personal data, monitor you via your microphone or camera, or even track your real-life location via location services.

Can someone install spyware on my iPhone?

Yes, somebody could install spyware on your iPhone despite Apple having a more secure operating system than Android. Once installed through physical access to the device or remotely, this software could track your internet use, location, calls, and messages. The most common attack vectors are through spyware disguised as legitimate apps, phishing attacks, or somebody connecting your phone to a computer to install the spyware. If you’ve noticed device slowdown, increased battery drain, or other weird behaviors, check for spyware using TotalAV’s free trial.

How can you tell if someone is remotely accessing your iPhone?

You can usually tell if somebody is remotely accessing your iPhone with spyware, as you'll see signs like faster battery drain, your phone overheating, increased data usage, or unfamiliar apps appearing on your phone. Review your installed applications in Settings > iPhone Storage for any you don’t recognize – though a faster way is to perform a Smart Scan with an antivirus for iPhone like TotalAV.

What apps detect spyware on iPhone?

Due to the way that Apple’s security ecosystem works, no app can perform a full spyware scan on an iPhone. However, iPhone antivirus apps like TotalAV offer useful tools that help you find signs of infection, scan for malicious links, and protect your privacy. It’s a solid second layer of defense — particularly if you regularly browse, download, or connect to public Wi-Fi.