If you suspect spyware on your Android phone, run a Google Play Protect scan right now and enable “Improve harmful app detection,” then check Accessibility, Notification access, and Device admin for apps you don’t recognize and revoke their access before uninstalling anything. If removal could put you in physical danger from whoever installed it, stop and contact a survivor-support resource or a professional repair technician instead of handling it alone.
TL;DR:
- Running a Google Play Protect scan and checking for unfamiliar Accessibility, Notification, or Device admin apps are essential first steps to detect spyware.
- Uninstalling spyware requires revoking its elevated permissions before removal, especially using safe mode if necessary to handle stubborn infections.
- Monitoring sudden battery drain, overheating, and unexpected data usage can reveal spyware even if no suspicious apps are visible.
- Resetting the device to factory settings is a last resort, but users must backup personally and reinstall only from trusted sources to avoid re-infection.
- Contacting a professional for in-person spyware removal is recommended if the infection risks physical danger, persists after resets, or involves complex or concealed malware.
Table of Contents
- Quick Checklist: Immediate Actions for Spyware Removal on Android
- How to Detect Spyware on Android: What to Check and Why
- Removing Spyware from Android: Revoke Access, Uninstall, and Reset If Needed
- Aftercare: Securing Your Accounts After Spyware Removal
- When Spyware Removal Needs a Professional, Not a DIY Fix
- On-Site Malware and Spyware Removal from Repair Genius
- Sources
- FAQ
Quick Checklist: Immediate Actions for Spyware Removal on Android
Move fast, but move in the right order. Uninstalling a tracking app before cutting its access can trigger alerts to whoever planted it, so triage first.
- If you think someone is actively tracking your location, switch to airplane mode or turn off Wi-Fi and cellular data. This cuts the live feed immediately.
- Open the Play Store, tap your profile icon, go to Play Protect, and run a scan. Turn on “Improve harmful app detection” for a deeper check.
- Check battery usage and mobile data usage in Settings for the last 24 to 48 hours. A spike tied to an app you don’t remember installing is a red flag.
- Go into Accessibility, Notification access, and Device admin apps (all under Settings) and look for anything unfamiliar. Revoke it.
- If you plan to install a scanning app for a second opinion, confirm the developer name matches the official vendor before you tap install.
Pro Tip: Screenshot each suspicious permission screen before you revoke anything. If you end up needing survivor support or a repair technician, that documentation speeds up the whole process.
How to Detect Spyware on Android: What to Check and Why
Spyware and stalkerware rarely announce themselves. The tells are usually small and easy to dismiss as “the phone’s just acting weird.”
Watch for a battery that drains fast even when the phone sits idle, a device that runs warm without heavy use, background data usage that doesn’t match your habits, or texts and calls you never sent. Consumer-grade stalkerware is often installed outside Google Play and disguised as parental-monitoring or family-safety software, and it commonly hides its own icon from the home screen so the person carrying the phone never sees it listed among their apps.
Here’s where to actually look:
- Play Protect status: Play Store → profile icon → Play Protect → tap “Scan.” Google’s own malware removal guidance lists this as the first step, and it’s worth running even if Play Protect shows as “on,” since it can be silently disabled.
- Installed apps and their install dates: Settings → Apps → see all apps. Sort by name and scan for anything with a generic-sounding label (“System Update,” “Device Health”) that you didn’t install yourself.
- Accessibility services: Settings → Accessibility → look for apps you don’t recognize with toggles switched on. Accessibility access is the single most abused permission in stalkerware, because it lets an app read screen content and simulate taps.
- Notification access: Settings → Apps → Special app access → Notification access. Anything unfamiliar here can read every notification that hits your lock screen.
- Device admin apps: Settings → Security (or Security & privacy) → Device admin apps. This is a short list, so an unfamiliar entry stands out fast.
Document what you find. Take a screenshot of each suspicious permission screen and note the install date next to the app’s icon in the app info menu. That record matters if you end up reporting this to a survivor-support organization or handing the phone to a technician, since it tells them exactly what to look for without you having to re-explain it from memory.
Removing Spyware from Android: Revoke Access, Uninstall, and Reset If Needed
Order matters here more than almost anywhere else in tech support. Try to uninstall a stalkerware app before stripping its permissions, and Android will often just gray out the uninstall button.
- Revoke elevated access first. Go to Accessibility, Notification access, and Device admin apps, and turn off any suspicious entry in that order. This alone frequently unlocks the “Uninstall” option for an app that was previously stuck.
- Uninstall the app. Settings → Apps → find it → Uninstall. If it hid its icon, you’ll still find it listed here by name even if it never appeared on your home screen.
- Boot into safe mode for anything persistent. Hold the power button, then long-press “Power off” until you’re prompted to reboot into safe mode. Safe mode disables third-party apps, which makes stubborn or self-protecting spyware much easier to remove.
- Run a second scan with a trusted tool. Malwarebytes offers a free scanner that’s sufficient for a one-off check, but confirm the developer name in the Play Store listing before installing anything, since fake “cleaner” apps are a known problem. Google has removed 1.75 million policy-violating apps from its ecosystem in enforcement sweeps, which gives a sense of how common these impostors are.
- Factory reset as a last resort. If the app keeps reappearing or you can’t get rid of it, back up only your photos and documents individually, not a full system backup, since that can restore the infection. After the reset, reinstall apps exclusively from the Play Store.
Skipping step one is the most common mistake. Revoke elevated permissions before you touch uninstall, every time.
Aftercare: Securing Your Accounts After Spyware Removal
Removing the app is half the job. Whatever data it already grabbed, passwords, messages, location history, is still out there, so lock down the accounts it could have touched.
- Change your Google account password from a different, trusted device, then run a full Google Security Checkup to review recent activity and connected apps.
- Turn on two-factor authentication and revoke access for any third-party app you don’t recognize under connected apps and devices.
- Reset passwords for email, banking, and social accounts, especially if the phone was ever used to log into them while the spyware was active.
- Update Android and every app to the latest version. Many infections exploit outdated software, and a patched OS closes doors that older versions leave open.
- Set a strong screen lock, a PIN or pattern longer than four digits, and add biometrics if your device supports it.
Pro Tip: Do the account recovery steps from a device you’re sure is clean, not the phone you just cleared. If the spyware logged your old password before removal, typing the new one on the same device defeats the purpose.
When Spyware Removal Needs a Professional, Not a DIY Fix

Safety comes before troubleshooting. If removing this software could escalate a dangerous situation with an abusive partner or family member, don’t touch the phone until you’ve talked to a trusted survivor-support resource. Stalkerware is built to alert its installer when it’s tampered with or removed, which makes DIY fixes genuinely risky in abuse situations.
Beyond the safety question, some infections are just harder than a settings menu can fix. Apps that reinstall themselves after a factory reset, or a device that behaves strangely even on a fresh OS, often point to a deeper compromise that needs hands-on diagnostics. A technician working on-site can inspect the device directly, verify the reset actually took, and confirm nothing survived it, something no app can promise from inside the phone itself.
— Michael
On-Site Malware and Spyware Removal from Repair Genius
If the checklist above didn’t fully clear the problem, or you’d rather have a professional confirm the phone is clean, Repair Genius handles that without asking you to ship your device anywhere or sit in a shop waiting room. A technician comes to your home or office in Orlando or Winter Park, diagnoses the device on-site, attempts safe removal, and walks you through exactly what was found before touching anything.

That in-person visit matters most when data safety is the concern: nothing leaves your hands, and every step, from the initial scan to the final security recommendations, happens in front of you with transparent pricing and no hidden fees. Whether the infected device is your Android phone or a laptop showing the same suspicious behavior, on-site computer repair covers both under one visit. Book a same-day appointment and get a clear diagnosis before you decide on a factory reset yourself.
Sources
For official platform steps, see Google’s own malware removal guide. If safety is a concern, Stop Stalkerware offers survivor-focused guidance. For scanner testing data, AV-Test publishes independent lab results on Android security products.
- Your Android phone could have stalkerware — here’s how to remove it
- Remove malware or unsafe software – Android
- How to remove malware from Android and prevent it getting back in | Proton
- Free Anti Spyware Scanner & Removal
- Information for survivors — StopStalkerware
FAQ
How Do I Check If My Android Phone Has Spyware?
Start with a Play Protect scan (Play Store → profile icon → Play Protect → Scan), then check Accessibility, Notification access, and Device admin apps under Settings for anything unfamiliar. Battery drain, overheating, and unexplained data usage spikes are common secondary signs worth checking alongside those menus.
How Do I Get Spyware Off My Android Phone?
Revoke the app’s elevated permissions first (accessibility, notification access, device admin), then uninstall it through Settings → Apps. If it won’t uninstall or keeps reappearing, boot into safe mode to remove it, or perform a factory reset as a last resort.
Can Someone Put Spyware on My Phone Without Me Knowing?
Yes. Stalkerware is often installed by someone with brief physical access to the device, and it’s designed to hide its icon and run without visible notifications. It’s frequently distributed outside the Play Store disguised as parental or family-tracking software.
Is There a Code to Check If Someone Is Spying on Your Phone?
There’s no universal dial code that reliably detects spyware on Android, despite claims circulating online. The dependable method is manually checking Play Protect, Accessibility, Notification access, and Device admin settings, or running a scan with a trusted secondary tool.
Does Repair Genius Remove Spyware from Android Phones?
Yes, Repair Genius offers on-site malware and spyware removal for Android devices with a focus on data safety throughout the visit. Pricing is quoted upfront on the cellphone repair page before any work begins.
Recommended
- 3 Windows Virus Symptoms That Need Immediate Action, Diagnose & Fix
- 7 Steps to Stop an Infection Now for Home Users: Malware vs Virus
- 4 Urgent Mac Malware Signs and What to Tell a Technician





