Module 62 - Tool

Stalkerware Device Check

A guided checklist for common signs of monitoring software. Work through each check and record what you find.

Before you begin: If you believe you are being monitored by someone dangerous, use a device they do not have access to. Do not delete suspicious apps without reading the guidance at the end - removal can alert the person monitoring you.

0 / 6 checked
🔋
Unusual battery drain
Monitoring apps run continuously in the background to send location and activity data. They drain battery faster than normal apps.
Normal battery life is a good sign. Continue checking other indicators.
Unexpected battery drain is a key stalkerware indicator. Note this finding. Check Settings > Battery to see which apps are using the most power.
To check: Settings > Battery > Battery Usage. If an unfamiliar app appears near the top, investigate it further.
📶
Background data usage spikes
Spyware uploads your data (location, messages, photos) to a remote server. This shows as unexplained data usage, especially when the phone is idle.
No unexplained background data usage. Continue to the next check.
Unexplained background data is a significant indicator. Note the app name. Do not uninstall yet - see the guidance at the end.
To check on Android: Settings > Network > Data Usage > sort by background usage. On iOS: Settings > Mobile Data > scroll down to see per-app usage.
🎙️
Microphone or camera indicator lighting unexpectedly
On modern iPhones and Android 12+, a dot appears when the microphone or camera is active. It should only appear when you're in a call or using the camera.
Indicators only appearing during calls or camera use is expected. Continue checking.
An unexpected microphone or camera indicator is a serious signal. Note the time it appeared and what you were doing. This is worth investigating with a specialist.
On Android 12+: the green dot in the top-right corner activates when mic or camera is in use. On iPhone: orange dot = microphone, green dot = camera. Check these during normal use.
🔑
Unknown apps with device administrator permissions
Stalkerware often grants itself device administrator status to prevent removal and to maintain access to system functions like calls, SMS, and location.
Only familiar apps with admin permissions is a good sign. Continue to the next check.
An unknown device admin app is a strong stalkerware indicator. Note its name. Do not remove it yet - read the safety guidance at the end before acting.
Android: Settings > Security > Device Admin Apps. iOS: Settings > General > VPN & Device Management. You should only see apps you recognise and intentionally installed.
👤
Unfamiliar accounts in app settings
Monitoring apps sometimes connect to an account the abuser controls to export your data. This account may appear in your phone's linked accounts list.
Only your own accounts - good. Continue to the final check.
An account you don't recognise is a significant finding. Note the email or username. Do not remove it until you have a safety plan - see guidance below.
Android: Settings > Accounts. iOS: Settings > [your name] > iCloud and Settings > Mail/Contacts. You should only see accounts you set up yourself.
📱
Phone behaves strangely during calls or when idle
Unexpected screen wakes, strange sounds on calls, or the phone being warm when not in use can indicate active background processes.
Normal device behaviour. Review your summary below.
Unexplained device behaviour combined with other findings strengthens concern. Document what you've noticed with dates and times if possible.
Occasional behaviour may be normal. It is most relevant as a corroborating signal alongside other findings in this checklist.
No strong indicators found
Your checks did not surface obvious signs of monitoring software. This does not guarantee a device is clean - some sophisticated spyware avoids all these indicators. If you have ongoing concerns, contact the National Stalking Helpline (UK: 0808 802 0300) or a specialist digital safety organisation.
One or more concerns flagged
You found indicators that warrant further investigation. Before taking any action, read the safety note below.