Can my phone be hacked without me knowing?
Key takeaways
- A phone can be compromised without any visible breakage, so the test is whether the indicators are present, not whether the phone seems fine.
- An unfamiliar entry in WhatsApp Settings, then Linked Devices, is the single most valuable check because it names the attacker's session directly.
- Sudden loss of mobile network with working Wi-Fi points to a SIM swap, which is an operator problem you can stop in minutes with a port-out lock.
- Turn on two-step verification with a PIN rather than an SMS code, because SMS delivery follows a hijacked SIM while a PIN does not.
- If a banking or UPI transaction is unfamiliar, report it to the bank and to the National Cyber Crime Reporting Portal and helpline 1930 the same day.
As of 24 October 2026: the service descriptions, prices and turnaround figures on this page are current.
What are the six indicators of a compromised phone?
Six indicators, in the order they are usually found. First, an unfamiliar device under WhatsApp Settings, then Linked Devices. Second, an installed app you do not recognise, particularly one with accessibility-service permission. Third, sudden loss of mobile network while Wi-Fi keeps working, which suggests a SIM swap. Fourth, a battery that drains far faster than normal, consistent with a remote-access agent running a persistent session. Fifth, unexplained mobile data consumption on a plan you do not use heavily. Sixth, unfamiliar UPI, card or bank transactions. Any one of these warrants action; the first two warrant action tonight.
What should I change tonight, in what order?
Work in this order. First, from a different, clean device, change the email password, because email resets every other account. Second, enable two-step verification on WhatsApp, Instagram, Google and your primary bank, and use a PIN or an authenticator app rather than SMS. Third, remove unknown apps and revoke accessibility permissions. Fourth, call your telecom operator and request a port-out lock and a dedicated banking-safe number. Fifth, log out all WhatsApp linked devices and change the account PIN. Sixth, on the suspect device itself, change the screen lock and enable remote wipe, and do not use that device for banking until it has been checked.
How do I report it in India if money is involved?
Report through three routes, all on the same day. Call your bank's fraud helpline and ask for the beneficiary to be flagged and the transaction to be reversed. File on the National Cyber Crime Reporting Portal at cybercrime.gov.in. Call helpline 1930, the cyber crime helpline, which is staffed to take incident reports. Under RBI's June 2026 instructions, effective 1 January 2027, a genuine individual victim with a gross loss up to Rs 50,000 may be compensated at 85% of net loss or Rs 25,000, whichever is less, but only if the fraud is reported to the bank and to the NCRP or 1930 within five calendar days. In 2026 alone, Indians lost over Rs 22,800 crore to telecom fraud and impersonation scams.
What does a professional phone-security check actually cover?
A proper check covers six areas, and it takes under an hour for a consumer handset. Linked and active sessions on WhatsApp, Instagram, Google and Facebook. Installed applications, accessibility services and device-admin rights. Account-recovery configuration, including added recovery contacts and new OAuth consents. Remote-access indicators and persistence mechanisms. Network exposure, including rogue Wi-Fi certificates and tethered hotspots. And financial-app exposure, which is where a phone compromise usually becomes a loss. You get a findings list, a prioritised fix list, and a retest after you apply the fixes.
| Indicator | What it usually means | Action |
|---|---|---|
| Unknown device under WhatsApp linked devices | GhostPairing browser session attached to your number | Log it out, change the account PIN |
| Unrecognised installed app with accessibility access | Remote-access or spyware tooling | Revoke permission, remove, then change passwords |
| No mobile network but Wi-Fi still works | Probable SIM swap | Call the operator, request a port-out lock |
| Battery and data drain far above normal | Persistent remote session running | Switch to airplane mode, preserve evidence |
| Unfamiliar UPI or card transaction | Financial fraud in progress | Bank fraud helpline, NCRP, helpline 1930 the same day |
| New recovery contact or device added to email | Account takeover precursor | Reset email password from a clean device first |
What are the frequently asked questions?
Get a straight answer on this
Book a one-hour phone-security check for your device, with the phone in your hand and the owner present throughout.
Send us the details See pricing