10 codes to check if your phone is hacked and how to fix it

Your smartphone is a gateway to your digital life, and hackers want in. As Luis Corrons, Security Evangelist at Gen (the company behind Norton), puts it, “You’re not just carrying a phone anymore; you’re carrying your identity, your memories, your finances, your secrets. And that’s exactly what cybercriminals are after.”

If a hacker gains access to your phone, they can compromise your privacy in two main ways:

• Malware: If malware is installed on your device after you click on a phishing link or download an infected file, hackers could spy on your activity or remotely access your device.
• Call forwarding: Bad actors could enable your call forwarding settings via malware or social engineering schemes, allowing them to intercept your incoming calls and texts or redirect them to a third party.

If you think you might have been targeted by a phone hacker, USSD codes are a good first place to check for signs. These codes allow you to check your carrier’s forwarding settings and access other network data, so you can quickly spot if your calls are being redirected without your knowledge.

But remember: incorrect settings are only one symptom of a hacked phone. Read on for a list of useful USSD codes, and learn other signs of a malware infection.

1. Dial *#21# to check for unconditional call forwarding

Dialing *#21# lets you check whether unconditional forwarding is enabled for your number. This setting automatically redirects all incoming calls to another phone number.

Call forwarding doesn’t automatically mean your phone is hacked or tapped, but if this setting was turned on without your knowledge, you may have been exposed to security risks. If hackers set call forwarding up on your number without you realizing, they may be able to answer phone calls intended only for you.

Note that this code may vary depending on your carrier’s network infrastructure. While *#21# should work for any 4G, 5G, or GSM networks like AT&T and T-Mobile, if you’re a Verizon or US Cellular customer on an older CDMA network, try alternate codes like *92 or *72.

2. Dial *#002# to disable unconditional call forwarding

Dialing *#002# disables all carrier-based unconditional call forwarding instructions, meaning incoming calls will stop being redirected to other numbers and instead ring directly on your device.

Aside from carrier-provided call forwarding, which is managed by your mobile network, most phones also have a built-in call forwarding function that can’t be disabled by dialing a code. If this is enabled, you’ll need to turn it off in your phone’s settings.

Here’s how to disable call forwarding on iPhone:

1. Navigate to Settings.
2. Tap Apps, then scroll down to Phone.
3. Under Calls, tap Call Forwarding and toggle the switch off.

Here’s how to disable call forwarding on Android:

1. Open the Phone app.
2. Tap the three-dot menu in the top right corner and select Settings.
3. Tap Calls, then Call Forwarding, and turn off Always forward.

3. Dial *#67# to check for conditional call forwarding when busy

Dialing *#67# lets you check the status of conditional call forwarding, which only triggers when you’re already on another call or manually decline an incoming one. If this feature is active, you’ll also see the number that is receiving your diverted calls.

Don’t panic if a number appears, as it may just be your carrier’s designated voicemail number or the default forwarding number of your service provider.

If it’s not a number that you recognize as belonging to your carrier after doing some research, dial ##67# to cancel conditional call forwarding and stop calls from being redirected to another number when your line is busy.

4. Dial *#62# to check for conditional call forwarding when unreachable

While ##67# lets you check what happens to incoming calls when your line is busy, dialing *#62# checks what happens when your phone is turned off, in Airplane Mode, or has no signal. If call forwarding settings are enabled when your line is unreachable, *#62# will reveal the specific number receiving your calls and texts during those service gaps.

5. Dial *#004# to view all conditional call forwarding settings

Dialing *#004# is another way of getting information about your network-level conditional call forwarding settings. It displays where your calls are forwarded to if you don’t pick up, your line is busy, or you don’t have a signal.

If you notice your calls are being forwarded to strange numbers that you don’t recognize as belonging to your carrier, dial ##004# to disable conditional call forwarding.

However, note that this may also turn off voicemail, depending on your carrier’s settings. Call your carrier’s customer service team in advance to check if it’s their number, or note it down before disabling call forwarding so you can restore it if necessary.

6. Dial *3001#12345#* to access the FTM dashboard on iPhone

Dialing *3001#12345#* on an iPhone opens the field test mode (FTM) dashboard, which provides detailed network and signal information. This data is largely technical, but it may help you identify potential connection issues or network anomalies. Key details available in the FTM dashboard include:

• Carrier.
• Capabilities.
• Type allocation code (TAC).
• Network public land mobile network (PLMN).
• Phone number.
• Band.
• Bandwidth.

7. Dial *#*#4636#*#* to open the testing menu on Android

You can dial *#*#4636#*#* on an Android device to open the testing menu, where you can view various insights related to your phone’s network settings and performance. This menu provides the following information:

• IMEI.
• Phone number.
• Current network.
• Data service.
• Signal strength.
• Bandwidth.

Reviewing your network settings can help you spot unusual patterns or network anomalies that could indicate a security concern.

8. Dial *#197328640# to view network connection details on Samsung

If you have a Samsung Galaxy device, dial *#197328640# to open a service menu where you can view network connection details, such as signal strength and cell tower information. While this won’t directly confirm that someone hacked your phone, identifying hardware malfunctions or network connection issues can help you determine whether your phone is behaving abnormally.

9. Dial *#33# to check call barring settings

Call barring lets you block specific incoming or outgoing calls. Dialing *#33# displays your device’s current call barring status. If you’re receiving excessive spam calls, enabling call barring can help prevent unwanted calls, including those from potential hackers.

10. Dial *#06# to view your phone’s IMEI number

You can dial *#06# to display your phone’s International Mobile Equipment Identity (IMEI) number, a 15-digit figure that identifies your device. While the IMEI itself won’t tell you if somebody hacked your phone, you’ll need it to report a lost or compromised device to your mobile carrier. Your carrier can also use this number to block the device from accessing the network.

Signs your phone is hacked

USSD codes can reveal signs of hacking in the form of changes to your call forwarding or network settings, but that only scratches the surface of what hackers can do. Modern malware, such as mobile viruses and Remote Access Trojans (RATs), is designed to be invisible. To find it, look out for these more subtle signs your phone is hacked:

• Rapid battery drain: Your battery draining faster than usual could indicate that malware is running in the background. However, first make sure to rule out other factors that could be causing rapid power loss, such as a faulty battery or an active VPN connection.
• Unexplained data usage: A sudden spike in your data usage, reflected in your phone’s data usage settings or on your phone bill, may signal that malware is using up data as it transmits information to hackers.
• Hot to the touch: Your phone getting hot could be a sign of a malicious program using up system resources. Just bear in mind that a hot phone can also be a symptom of using applications that require considerable processing power, like gaming or streaming apps.
• Slow speeds: Your phone running slowly could also indicate that malware running in the background is consuming resources like RAM without your knowledge.
• New apps: If you notice unfamiliar apps on your phone that you didn’t download, it could indicate that your device is infected with malware that allows a hacker to access it remotely.
• Unexpected camera or microphone activity: If you notice your camera or microphone indicator lights — usually a small green or orange dot — turning on when you aren’t using an app, your device could be compromised. Similarly, finding photos or videos in your gallery that you didn’t take is a major red flag.
• Strange notifications or pop-up ads: Frequent pop-ups or unusual notifications in your mobile browser or on your home screen could be a sign of adware or malware on your phone.
• Unrecognized outgoing calls: If your call history includes numbers you don’t recognize or calls you didn’t make, a hacker may be using your device to make premium-rate calls on your dime.

If you notice any of these signs, run an antivirus scan to detect viruses or malware on your device and take steps to remove them before they cause further harm to your phone or compromise your personal data.

Next steps to take if your phone is hacked

If you confirm that your phone has been compromised — either through call forwarding being enabled without your consent or hidden malware installed without you realizing — act fast to remove hackers from your phone, secure your data, and help protect against future threats.

Follow these steps to get your privacy and security back:

1. Disable unauthorized call forwarding instructions using the USSD codes above or the call forwarding settings in your phone app.
2. Alert your contacts that your phone was hacked and advise them to ignore any suspicious messages that appear to come from your phone, especially requests for money or personal information.
3. Run a malware scan using a trustworthy cybersecurity app to detect and remove malicious software from your phone.
4. Delete any suspicious apps that were flagged as harmful in an antivirus scan or that you didn’t download yourself and don’t recognize.
5. Update the login credentials for any potentially compromised online accounts, including email, banking, and social media, with new, secure passwords.
6. Consider resetting your device as a last resort to restore it to factory settings if you’re unable to remove malware or problematic apps. Just remember that this could cause you to lose your data if you haven’t backed it up.
7. Enable security settings like automatic malware protection in your cybersecurity app to help protect against future threats, including viruses and RATs.

Boost your mobile security

Now you know what to dial to see if your phone is hacked and what signs to look out for if you suspect it has malware. The next step is to secure your device with powerful cybersecurity software.

Install Norton 360 Deluxe to help safeguard against hackers and get access to a range of industry-leading features, including malware protection and AI-powered scam detection, on up to five mobile or desktop devices.

FAQs

Can I run a test to see if my phone is hacked?

Yes, running an antivirus scan using a mobile security app like Norton 360 Deluxe can help you identify malware infections that could be granting hackers access to your device or data.

What do I dial to see if my phone is being monitored?

While no USSD code can confirm whether your phone is being monitored, dialing *#21# lets you check whether unconditional call forwarding is enabled, meaning your phone calls are being redirected to another number. Follow this check with a malware scan for added peace of mind.

Does *#21# really tell you if your phone is hacked?

No, dialing #21# doesn’t explicitly confirm whether your phone is hacked; it only shows the current status of your call forwarding settings. While a hacker could theoretically use these settings to redirect your calls, seeing a number here is usually a standard part of your cellular service. In most cases, the number that appears belongs to your carrier’s voicemail system rather than a hacker.

What is the code to stop someone from tracking your phone?

Unfortunately, there are no codes to check whether your phone is being tracked or to stop someone from tracking it. However, you can disable location services and tracking cookies in your device’s settings.