How to Remove a Hacker from Your Phone

Contain from a clean device

1. Secure the primary email account.
2. Change the Apple/Google password and revoke unknown sessions.
3. Contact the mobile provider if SIM swap or account takeover is possible.
4. Protect banking, password-manager and social accounts.

Clean the phone

• Install system and app updates.
• Remove unknown apps, configuration profiles, device administrators and accessibility access.
• Revoke unnecessary camera, microphone, SMS, contact and location permissions.
• Run the platform’s built-in security checks.

When to reset

A factory reset may be justified after persistent compromise, unknown management software or malware that cannot be removed. Back up personal files carefully, preserve recovery codes and avoid restoring suspicious apps automatically.

Verify afterwards

• Use new unique passwords and 2FA.
• Check account sessions again.
• Confirm the SIM and number are under your control.
• Monitor bank and email activity.

When professional help is sensible

Seek the device manufacturer, employer IT team or a reputable repair service when management profiles cannot be removed, the phone is rooted or modified unexpectedly, or compromise returns after a clean reset. Do not give a remote caller unrestricted access to the phone.

Secure the accounts before cleaning the device

Deleting a suspicious app does not remove access if an attacker still controls email, recovery numbers or active sessions.

• From a trusted device, change the primary email and password-manager credentials first.
• Revoke unknown sessions, app passwords, forwarding rules and recovery methods.
• Only factory-reset after preserving evidence and confirming that you can sign back into essential accounts.