How to know if your phone is tapped, monitored or infected with spyware
Battery drain, overheating and strange messages are warning signs, not proof. This guide explains what matters, what does not, and how a forensic network scan turns suspicion into evidence.
Run a free forensic scanStart with evidence, not panic
People search for signs their phone is spied on after a strange call, unexplained battery drain, a border crossing, a breakup, a legal dispute or a high-risk assignment. Those signals deserve attention, but they are not proof. A forensic workflow separates everyday device problems from network behaviour that matches spyware, stalkerware or command-and-control infrastructure.
The strongest signs are network signs
Modern implants may not show a visible icon or file. Pegasus, Predator, Graphite and commercial stalkerware still need to communicate. DNS queries, TLS handshakes, JA3/JA4 fingerprints, direct IP connections, beacon intervals and certificate anomalies are harder to hide than an app name. SmartScan focuses on those network traces.
Symptoms that justify a phone spyware scan
Fast battery drain, phone heating while idle, abnormal mobile data usage, strange messages, suspicious missed calls, unknown VPN or MDM profiles, unexpected accessibility access, dangerous Android permissions and activity after travel or seizure are valid reasons to run a scan. None of them alone proves compromise; together with network evidence they become actionable.
What SmartScan checks
SmartScan captures traffic through a WireGuard tunnel and analyses DNS, SNI, TLS fingerprints, ports, ASN, geolocation risk, direct-IP traffic and beacon timing across 22 forensic engines. The output is a risk-scored PDF with MITRE ATT&CK mapping and IOC tables that you can share with a lawyer, security team or forensic analyst.
What to do before wiping the device
If you are a journalist, lawyer, activist, politician, executive or stalking victim, avoid factory reset before preserving evidence. Run a scan, save the report, document suspicious events and consider forensic advice. Wiping can remove clues that help explain what happened.