Start by deciding what you are actually dealing with, because the great majority of phone virus warnings are web ads rather than infections. Real trouble on a phone almost always traces back to one installed app, a subscribed calendar or a site you granted notification rights to, and each of those has a specific fix.
Most virus warnings on a phone are ads, not infections
A full screen red banner announcing that your device is infected, often with a timer and a button, is a web page. It cannot read your phone. Pages are confined to the browser and have no visibility into installed software, so a scan result shown on one was decided before you arrived. Close the tab and nothing has happened to your device.
Phone operating systems also sandbox apps from one another, which is why self spreading viruses of the kind that plagued desktop computers barely exist here. What does exist is an app that behaves badly, and it normally got on the phone because somebody installed it.
So sort the symptom before you act on it.
| Symptom | Where it is usually coming from |
|---|---|
| Alarming popup while browsing | A scareware ad on that site. Nothing is installed. |
| Events appearing in your calendar unasked | A spam calendar you subscribed to by tapping a link. |
| Notifications from sites you never signed up for | Browser notification permission granted to a web page. |
| Ads appearing over the home screen | An installed app serving ads outside itself. |
| Battery or data use spiking with no change in habits | Worth investigating. Check per app usage in settings. |
Calendar spam and browser redirects each have their own fix
Unwanted calendar events are the one that convinces people their phone is infected, because the entries arrive on their own and often carry threatening wording. Deleting the events does nothing, since they come from a calendar subscription. Open your calendar app, find the list of calendars, locate the one you do not recognize and remove or unsubscribe from it. The events go with it.
Notification spam works the same way. A site asked permission, someone tapped allow, and it now pushes messages that look like system alerts. Open your browser settings, find the site permissions list, and revoke notifications for anything unfamiliar.
Constant redirects usually mean a browser extension on a desktop class browser, or an app on the phone that opens pages on its own. Clearing browsing data and site settings removes any state the page was keeping, and it is a reasonable first move before you start uninstalling.
Safe mode tells you whether a downloaded app is behind it
Android devices can start in a mode that runs the system with downloaded apps disabled. On most phones you hold the power button, then press and hold the power off option until safe mode is offered. If the ads or the sluggishness vanish there, an app you installed is responsible, and the job is now to identify it.
- Reboot into safe mode and confirm whether the symptom disappears.
- Restart normally, then review your app list oldest to newest for anything you do not recognize.
- Line that up against when the trouble started.
- Check which apps hold device administrator or accessibility permissions and revoke any that have no reason to.
- Uninstall suspects one at a time, testing after each one.
Revoking device administrator rights before uninstalling matters. An app holding that permission can refuse to be removed, and the uninstall button will simply appear grayed out until the permission is taken away.
When a reset is the only step left
iPhones have no safe mode, so the equivalent checks are done in settings. Look through the device management or profiles section for a configuration profile you did not add, review which apps hold broad permissions, and remove anything unexplained.
If the symptoms survive all of that on either platform, back your data up and factory reset the phone. Reinstall apps by hand afterward rather than restoring a full image of the old device, because a blanket restore can reinstate whatever caused the problem. Run the operating system update immediately after setup, since many of the tricks used by bad apps depend on flaws that have already been patched.
Frequently asked questions
Can a website really scan my phone for viruses?
No. A page runs inside the browser and has no view of your installed apps, your files or your storage. Anything presenting a scan result, a virus count or a countdown timer is an advertisement built to look like a system alert. Closing the tab is the correct response.
Should I install a security app to clean this up?
Judge each one carefully, because the category attracts imitators. Be especially wary of any app that asks for device administrator rights or accessibility access to do its job, since those are the same permissions that malicious apps request in order to make themselves hard to remove.
Will a factory reset definitely fix the problem?
Usually, with one important catch. Restoring a full backup afterward can put the offending app straight back on the phone along with everything else. Sign in, then reinstall your apps individually from the official store rather than accepting a blanket restore of the old device image.
