You ended a call and felt something was off — a faint click in the background, your battery sliding from 80% to 20% by lunch, or a stranger online who somehow knew where your kid had just been. The question on your mind right now is whether someone is actually listening to your phone calls, and if so, what you can do about it tonight. This guide walks through the 12 signs worth taking seriously, how to verify the suspicion without paying for a forensic exam, the removal steps that actually work, and a calm decision tree for parents who think a child's phone is the real target. For the legitimate side of call recording, how to record a phone call on any phone lays out what works.
The fear is reasonable, but the threat model matters. Most of what people imagine when they ask 'can someone listen to my phone calls?' falls into a few concrete categories, and each one calls for a different response.
Commercial stalkerware. Apps like FlexiSpy, mSpy, and Cocospy can be installed on an unlocked phone in a few minutes by someone with brief physical access — typically an ex-partner, a controlling family member, or a predator who borrowed a child's device. Once installed, they can stream microphone audio, record call metadata, and forward texts to a hidden dashboard.
Permissioned third-party apps. A flashlight app or game with microphone access can quietly capture audio in the background. This is less about your calls and more about ambient listening.
Carrier-level or SS7 interception. Real, but rare in everyday life — it targets journalists, activists, and high-value corporate accounts, not most households.
Voice assistants and ad-tech. 'Always listening' features feel invasive and sometimes are, but they aren't the same as someone replaying your calls.
For most parents and partners reading this, the real-world scenario is the first one — a person with brief physical access installing something cheap and covert — not nation-state spyware. The good news: that category is the one you can actually detect and remove.
These signs rarely appear alone. One on its own is usually nothing; three or four together is worth taking seriously, especially on a child's device.
Strange noises during calls. Faint clicking, echo, or static — particularly when the connection used to be clean and the same number is involved.
The phone runs hot when idle. A handset that's warm in your pocket without an app open often has a process running in the background.
Battery drains far faster than usual. Stalkerware streams audio and location, both of which burn power.
The mic or camera indicator dot lights up at random. iOS shows an orange (mic) or green (camera) dot at the top of the screen; Android 12+ shows a green dot. If it appears with no app you opened, note when.
The screen wakes or data spikes at 2–4 a.m. Stalkerware tends to sync at night when no one is watching.
The phone is slow or stubborn to shut down. Some spyware delays the power-off sequence so it can finish a sync first.
Texts with random characters or numeric strings. Some commercial stalkerware sends silent command codes over SMS.
Mobile data usage jumps for no clear reason. Compare this week to last week in your data settings.
Hidden or unfamiliar apps appear. Names like 'System Service', 'Wi-Fi', or a blank icon are common disguises on Android.
Settings change on their own. A new accessibility service is enabled, a new device admin appears, or a VPN profile you didn't add shows up.
A stranger knows things they shouldn't. A new 'friend' mentions a place your child has been or a person they just spoke to — the most overlooked sign in the family case.
Performance falls off a cliff. Lag, crashes, and overheating on a device that used to behave is a strong combined signal.
Symptoms aren't proof. Before you reset the phone or accuse anyone, run a verification pass.
Audit permissions. On iOS, open Settings → Privacy & Security → Microphone (and Location Services). On Android, open Settings → Privacy → Permission manager. Look at every app with mic or location access and ask why it needs it.
Watch the indicator dots for 24 hours. Note which app triggered the orange or green dot each time. iOS and modern Android both log this in the Control Center pull-down.
Review the full installed apps list. On Android, tap the three-dot menu in Settings → Apps and toggle 'Show system apps'. Anything you don't recognize is worth a closer look.
Check Device admin apps and Accessibility services. On Android, go to Settings → Apps → Special access → Device admin apps, and Settings → Accessibility. Stalkerware almost always lives in one of these because it can't survive a normal uninstall otherwise.
Look at battery and data by app. Settings → Battery and Settings → Network usage will surface the app responsible for any unusual draw.
Dial the call-forwarding status codes. *#21# shows unconditional forwarding; *#62# shows forwarding when unreachable. If an unknown number appears, calls are being silently rerouted.
Escalate when the stakes are real. If you suspect domestic abuse, a predator targeting a child, or coercive control, do not DIY. Contact a domestic violence hotline, your local police's cybercrime unit, or a forensic mobile-security service before you wipe anything — wiping destroys evidence.
Order matters. Some steps undo themselves if done out of sequence.
Revoke risky permissions first. Pull microphone, camera, and location access from any app you don't fully trust. This often stops the bleeding immediately.
Disable device admin and accessibility access for unknown apps. Stalkerware uses these to prevent uninstall. Strip them before you try to remove the app itself.
Uninstall suspicious apps. Once admin rights are gone, the app should uninstall like a normal one.
Update the OS and run a reputable mobile security scan. Bitdefender, Malwarebytes, and Lookout all have respected mobile scanners.
Factory reset as the clean step. When stalkerware is confirmed, reset the device. Important: restore apps manually from a fresh login, not from a full cloud backup — backups can carry the spyware right back.
Change passwords from a clean device. Email, Apple ID or Google account, banking, and every social account. Use a different phone or computer; the compromised device cannot be trusted yet.
Turn on 2FA and audit active sessions. Review trusted devices in your account and kick out anything you don't recognize.
Call the carrier. Ask them to check for unauthorized call forwarding, SIM swap activity, or unknown lines on your account.
If a stalker, abusive ex, or predator is involved, document first. Photograph the suspicious app screens and forwarding codes before resetting, then contact local authorities or a domestic violence hotline.
The signs and steps above all apply, but the family case has its own playbook.
Watch for child-specific signals. A new online 'friend' asking where they are. Sudden secrecy about a specific app. Mood changes timed to notifications. A stranger who somehow knows your child's school or routine.
Inspect the phone with them, not behind their back. A child who feels surveilled by you will hide future evidence. Frame it as 'let's check this together' — that's how you keep trust intact and still see what's installed.
Decide: preserve or wipe. If a predator or stalker may be involved, screenshot evidence, note app names and times, and consider going to police before wiping. If the device is just compromised and there's no criminal angle, wipe it.
Secure the child's accounts from a clean device. Reset passwords for the Apple ID or Google account, Snapchat, Instagram, TikTok, Discord, and any gaming login. Kick all sessions.
Have the right conversation. Ask who has had the phone, who installed which app, and who they've shared their location with. Stay calm — most kids don't tell because they're afraid of being blamed.
Know when to escalate. Involve the school if another student is the source. Use the in-app safety report to the platform. Call law enforcement if an adult is involved or if the child has shared images.
It's worth saying plainly: covert listening on an adult's phone is not the same as openly supervising a minor child's device. Treating them as the same is how this topic gets muddied. A call and text safety signals view is the lawful version — it surfaces who's calling and texting, not the private content of every conversation.
Stalkerware is illegal in most places. Installing software on another adult's phone to listen to their calls, read their texts, or track their location without consent violates wiretapping, computer-misuse, and stalking laws in nearly every jurisdiction.
Lawful parental supervision is its opposite. A parental safety app on a minor child's phone, set up openly, with the child aware that it exists and roughly what it does, is legal and protective in most countries.
Even parents have lines. Covert call recording, two-way audio fed into the child's speaker, or remote camera control sit on the wrong side of the line regardless of intent. They turn supervision into surveillance.
The right framing. Lawful parental supervision is known to the child, runs as a visible app, and focuses on safety signals — who's calling, what websites, who they're chatting with at 1 a.m. — rather than personal content the child has every right to keep private.
If you've worked through the steps above and the device is clean again, the harder question is how to stop the next incident — especially on a child's Android phone that gets passed around, lent out, or targeted by repeat unknown callers. NexSpy is built for that case as a lawful parental supervision tool, not as a covert tracker. The child knows it's installed; the parent uses it to surface the small set of signals that actually indicate harm.
The Calls and SMS module on Android lets you control who can reach your child's phone:
Call blacklist and whitelist on Android. Block specific numbers entirely — useful when a stalker or controlling ex keeps rotating throwaway SIMs — or flip to a whitelist where only approved contacts can ring through. Whitelist is the right call for younger children whose contact list should be small.
Automatic spam call blocking from the blacklist. Repeat unknown callers, the spoofed-ID numbers stalkers often cycle through, and known scam ranges get auto-rejected without the phone ringing at all.
The Calls and SMS controls also handle the text channel without turning the parent dashboard into a chat-log dump:
Real-time keyword alerts on sent or received SMS. You define the keyword list — drug slang, self-harm language, the name of a stranger you're worried about — and NexSpy surfaces only the messages that match. The rest stay private to the child, which is the point.
Call log context for parent review. After a scare, you can see who has actually been calling the child, when, and how often, without retroactively listening to anything.
This is where parental supervision earns its name. A tool that promised more would be the stalkerware the rest of this article warned about, so NexSpy is deliberate about what it doesn't do:
Calls and SMS controls are Android only. iOS does not expose these APIs to third-party apps, and any product claiming otherwise is either pushing a jailbreak or overstating what it can do.
SMS coverage is keyword-based by default, not a full text dump. It catches what matters and ignores everything else — designed for lawful parental supervision, not covert wiretapping.
Exact behavior depends on the Android version and the permissions you grant during setup. The framing stays inside parental supervision of a minor child, not surveillance of an adult.
If that's the line you want to stay on the right side of, NexSpy gives you the visibility without the creep.
Can someone listen to my phone calls without installing anything on my phone?
Realistically, no — not for ordinary targets. Carrier-level interception (SS7) exists but is used against very specific high-value targets. The vast majority of 'listening' cases involve software installed on the device.
Does *#21# really tell me if my phone is tapped?
It tells you only one specific thing: whether unconditional call forwarding is active. That's useful — silent forwarding is a real stalker tactic — but it does not detect a stalkerware app capturing microphone audio.
Will a factory reset remove spyware that's listening to my calls?
A full factory reset removes almost all commercial stalkerware. The catch: restoring from a cloud backup made while the device was infected can re-install it. Restore apps manually after the wipe.
Can someone listen to my calls just by knowing my phone number?
No. A phone number alone is not enough to access your microphone or call audio. Anyone claiming a phone-number-only tap is selling fear.
How do I tell the difference between a noisy connection and an actual tap?
A bad line repeats on the same routes and with the same towers; a tap tends to follow the device across networks and combines with other signs (battery drain, mic-dot activity, unknown apps). Pattern beats single events.
Is it legal for a parent to monitor a child's calls and texts?
In most jurisdictions, yes, on a minor child's device, when the supervision is open and proportionate. Covert recording of an adult — even your own teenager once they're legally an adult — and surveillance of a partner are not protected.
A parent's step-by-step guide to stop cyberbullying text messages: preserve evidence, block the sender, escalate to police and school, and prevent re-attacks.