Skip to content

ACTIVE CRISIS

I think my phone is hacked after a scam — what do I do now?

You're in the right place. A scammer cannot hack your phone just by calling you or sending you a text — but if you clicked a link, installed an app, or gave someone remote access, there are clear steps to take right now.

In an active crisis?

  • Call your bank
  • Call the platform (Amazon, PayPal, MobilePay, etc.)
  • Call local police

Step 1 — Work out what actually happened

What you did during the scam determines the risk. Work through this:

  • You only received a call or text — your phone is not compromised. Receiving a call or text does not give anyone access to your device. Block the number and move on.
  • You clicked a link in a text or email — there is a small risk. Check for apps you did not install. Run a security scan.
  • You installed an app the scammer told you to install — treat your phone as compromised. Follow Steps 2–4 below.
  • You gave someone remote access to your phone — treat your phone as compromised. Follow Steps 2–4 below.
  • You gave out your Apple ID or Google account password — change those passwords immediately from a different device.

Important: A scammer cannot install anything on your phone without your action. If you only received a call, your phone is safe. The risk comes from what you did during the call.

Step 2 — Remove any apps the scammer told you to install

Do this now: Go to your phone's app list and look for any app you installed during or after the scam call. Common ones used in phone scams: AnyDesk, TeamViewer, QuickSupport, Alfred, or any "support" or "security" app you were directed to. Delete them immediately.

On iPhone: hold the app icon → Remove App. On Android: Settings → Apps → select the app → Uninstall.

Step 3 — Change your passwords from a different device

Do this now: Use a computer or a different phone to change the passwords for your Apple ID or Google account, your email, and your bank. Do not change passwords from the phone you think is compromised until it has been checked.

Your Apple ID or Google account controls your entire phone — if the scammer has those credentials, they can access your photos, messages, and accounts. Change those first.

Important: If your banking app was open or you logged in to your bank during the scam, call your bank immediately. Use the number on the back of your card, not a number from the internet.

Step 4 — Check your phone for signs of compromise

Signs that something may still be running on your phone: battery draining unusually fast, phone getting warm when idle, data usage much higher than normal, or apps opening by themselves.

If you see these signs after removing the suspicious app, consider a factory reset. Back up your photos and contacts to a trusted cloud service first, then reset the phone to factory settings. This removes everything, including any software the scammer installed.

Important: If you are not comfortable doing a factory reset yourself, take the phone to your carrier's store or a trusted technician and explain what happened.

Step 5 — Report it

Report the scammer to the authorities in your country.

You're safer once you've done this: Suspicious apps removed, passwords changed from a clean device, bank called if needed, phone checked for signs of ongoing access. You have done the right things.

What happens next

For most people, removing the app and changing passwords is enough. Monitor your accounts over the next few days for any activity you did not authorise.

This is not your fault. Phone scams often start with a convincing fake alert — a text that looks like it is from your bank, a call that appears to be from Apple Support, or a warning that your phone has been compromised. The urgency is designed to stop you thinking clearly.

Related situations

This page was last reviewed: June 26, 2026.
Crisis pages are drafted with AI assistance, then reviewed line-by-line by the editor, sourced against official reporting authorities, and tested for tone and clarity before publication.