Warning signs your phone may be hacked or under surveillance, experts say

0
174
Unexpected OTP messages, unusual battery drain, overheating, and unexplained camera or microphone activity may be warning signs that a smartphone has been compromised, cybersecurity experts say.

PATTAYA, Thailand – Cybersecurity experts are urging smartphone users to pay close attention to unusual messages, unexpected login alerts, and suspicious device behavior, warning that these could be early indicators of hacking attempts, spyware infections, or unauthorized access to personal and financial information. According to security specialists, many people routinely ignore messages from unfamiliar numbers or dismiss notifications that appear out of the ordinary. However, these seemingly harmless alerts may sometimes signal that cybercriminals are attempting to gain access to a device or even control it remotely.

One of the most significant warning signs is receiving one-time passwords (OTPs), login verification codes, or account security alerts from social media platforms, banking applications, or online services that the user did not request. Experts say such messages could indicate that someone is attempting to access personal accounts without authorization. Cybercriminals frequently use phishing messages disguised as communications from government agencies, courts, banks, delivery companies, or service providers. These messages often create a sense of urgency, warning recipients of legal action, account suspension, or missed deliveries unless they click a link. Once opened, the link may install malicious software or direct victims to fake websites designed to steal sensitive information.



Experts also warn against dismissing unusual text messages containing random characters, strings of code, or even blank messages. In some cases, such messages may be linked to malicious software already installed on a device, potentially allowing attackers to send commands remotely or exploit vulnerabilities. A smartphone infected with spyware may display a number of unusual symptoms. One of the most common is rapid battery drain. Because spyware often runs continuously in the background, tracking location data, recording activity, or transmitting information, it can place significant demands on a device’s battery and processing power.

Users may also notice that their phones become unusually warm even when not actively being used. Increased data usage is another potential warning sign, as personal information, photos, messages, or files may be transmitted from the device without the owner’s knowledge. In more serious cases, a compromised device may exhibit strange behavior such as the screen lighting up unexpectedly, random restarts during the night, or indicators showing that the camera or microphone is active even when no applications are open. While these symptoms do not always mean a device has been hacked, experts recommend investigating any persistent or unexplained activity.


If users suspect that their phone may have been compromised, cybersecurity professionals recommend disconnecting it from the internet immediately. This can be done by turning off Wi-Fi, disabling mobile data, or activating airplane mode to prevent further communication between the device and a potential attacker. The next step is to review all installed applications and remove any that appear unfamiliar or suspicious. Users should also check application permissions and revoke unnecessary access to contacts, messages, photos, the camera, microphone, and location services.

For devices that appear heavily infected or continue exhibiting suspicious behavior, experts advise backing up only essential personal files, such as photographs and important documents, to a trusted cloud service or external storage device. Backing up all applications and settings may inadvertently preserve malicious software. As a final measure, performing a factory reset can help eliminate malware or spyware hidden within the operating system. After resetting the device, users should change passwords for important accounts, including email, banking, social media, and cloud storage services, to reduce the risk of future unauthorized access. Cybersecurity experts stress that while not every unusual notification or technical issue indicates a hacking attempt, remaining vigilant and responding quickly to warning signs can significantly reduce the risk of personal data theft and financial loss.