What you need to know about phone hacking

For many people, your phone is an extension of you. It goes where you go, it tells you what you need to know, and it stores your precious memories. And that’s all the more reason to be extra careful about protecting your personal data.

While the newest smartphones and operating systems are built to be more secure than ever, 82% of phishing sites specifically target mobile devices.^{Disclosure 1} The good news is there are ways you can help yourself stay safer.

How does phone hacking happen?

As common as smartphones have become, so have the risks of advanced cyber threats. Everyday activities like getting a link in a text, downloading an app, or using a public Wi-Fi network could potentially open you up to phone hacking—giving someone access to your phone’s data.

These are a few of the most common ways phone hacking can happen:

• Phishing: Any attempt to get you to open a malicious link is called “phishing.” These links can be shared through emails, texts or SMS messages (aka “smishing”), and QR codes (aka “quishing”).
• SIM swapping: Also known as SIM hijacking, this is when a hacker gains access to your mobile carrier account and phone number, potentially giving them access to login codes or links that would normally be sent to you via text. This could allow them to reset passwords and access your accounts.
• Unsecured Wi-Fi and Bluetooth: Wireless connections in places like airports and cafes can expose your data in a few different ways. If the network you’re on is unencrypted, a hacker could more easily intercept your data or target you with malware. Sometimes, they also set up fake Wi-Fi hotspots.
• Spyware: This is a specific form of malware that could allow a hacker to steal your data or even spy on you. It can end up on your device due to phishing attacks, an unsecured Wi-Fi connection, or downloading a malicious app or content.

How to know if your phone’s been hacked

There’s no simple way to say for sure whether or not your phone’s been hacked—but here are some signs to look out for. (The more of these signs you notice, the more likely it could be that your phone’s been hacked.)

• Strange texts or calls: Check your outgoing calls and messages. If you’re seeing messages you didn’t send or calls you didn’t make, it could be a hacker.
• Apps you don’t recognize: If there are apps on your phone you didn’t download, delete them. Hackers may use these apps to install malware. In fact, the most common method for phone hacking is through malicious apps and links.^{Disclosure 2}
• Pop-ups: It’s possible you’ve seen an “urgent” or explicit pop-up ad while browsing an unfamiliar site on your computer. Website pop-ups like these can contain viruses, so it’s best to avoid clicking them. And if pop-ups like these appear on your phone while you’re not browsing the internet, it could be a sign that your phone’s infected.
• Your phone running slowly or crashing often: There are multiple reasons this could be happening—and it may just be that your phone could benefit from a cleanup—but it’s possible that a hacker’s under-the-radar activity could be the cause.
• Unusual activity on your accounts: If a scammer gets into your phone, there’s a good chance they’ll look for your private personal information and attempt to reset some of your passwords. If you’re noticing unusual activity on your social media, email accounts, or banking and finance apps, that could be another sign of phone hacking.
• The battery draining rapidly: Malware often runs silently in the background, and it adds to the drain on your phone’s energy supply. If your device suddenly can’t hold a charge or heats up even when idle, it could be a signal that something’s happening behind the scenes without your permission.
• Odd microphone or camera behavior: Is your camera opening on its own? Or is your microphone indicator showing it’s active when it shouldn’t be? These could be signs of phone hacking.

4 steps that may help if you suspect your phone’s been hacked

If you suspect your phone’s been hacked or are worried about its security, doing one or all of these things may help protect not only your data, but your peace of mind, too.

Step 1: Check your bank and credit card statements to help you pinpoint any transactions you didn’t make. You can dispute the charges with your bank if you’ve been a victim of fraud.

If you’re a Truist customer, you can report a claim here.

Step 2: Change your passwords. (Here are some tips for creating strong passwords.)

Step 3: Delete any suspicious apps from your phone, and run antivirus software if you have it. There are a number of free anti-malware products for your phone and other devices.

Step 4: Let your important contacts know you’ve been hacked so they know not to click any links from “you.” Hackers will sometimes use your phone to target your personal network, posing as you through texts or your social accounts—so letting your friends know that you’ve been hacked could help protect them from being scammed, too.

For extra peace of mind: For good measure, you can reset your phone to its factory settings to wipe all the data—just be sure to back up your memories and other important files first.

Proactive ways to protect your phone from hackers

When it comes to mobile security, there’s plenty you can do to be proactive. Implementing just one of these tips—no matter how small some of them might seem—may help get you a step closer to feeling secure.

1. Turn on automatic updates for upgraded protection as soon as it’s available. (Often, companies include security fixes in their software updates.)
2. Create strong, unique passwords for all of your accounts.
3. Use a password manager to make it easier to safely store and access your complex passwords.
4. Choose multifactor authentication (MFA) where available, as it’s one of the best ways to keep hackers out of your accounts. MFA adds another layer of security because it requires more than just entering a password—like a one-time passcode—to log into an account. Using biometric locks like Face ID can also help boost account security.
5. Securely store any sensitive information on your phone. For example, using a digital wallet can help you safely store your credit card while keeping it handy wherever you go. Or, if you have any sensitive files on your phone, using a password-protected cloud service can help keep them secure.
6. Be careful when using public Wi-Fi, and avoid making payments on unsecured networks. Disabling automatic network connections and turning off Bluetooth and Wi-Fi when they’re not in use may also help.
7. Bring your own power bank instead of using a free charging station to keep your devices going whenever you’re on the go. Hackers can install malware in public charging stations to steal your information.
8. Think before you click. Use caution when downloading or clicking on any unknown links, and delete emails that are suspicious or from unfamiliar sources.
9. Only install apps you trust. Look at ratings and reviews to make sure apps are trustworthy before downloading—and only download apps from your phone’s official app store.
10. Don’t share passwords or PINs. The more you share, the more opportunities hackers have to access your money and more.
11. Reset or wipe your device’s hard drive when it’s time to upgrade. Make sure all your data is securely transferred to your new device and that the old one is properly wiped.
12. Apply a tinted screen protector on your phone that makes it harder for others to see your screen when you use it in public.
13. Turn on phone-finding features, which can help you find your phone in case it’s ever lost or stolen.
14. Install a trusted cybersecurity app, which may help protect your phone against malware and hacking attempts.

Remember, Truist won’t reach out to you through phone or email to ask for confidential information such as passwords, PINs, Social Security numbers, or account numbers. If you think an email or text message seems fishy, contact the organization directly using a legitimate customer service number. And if your device is lost or stolen, try to remotely lock your device and let your carrier know as soon as you can.

The technology behind phone hacking is complex, but these simple steps may help you protect yourself. Taking a few minutes to brush up on your security and privacy can help keep you, your data, and your peace of mind safe.