As of 2025, there were roughly 1.6 billion active iPhone users globally.
And while Apple has made its devices pretty tough to hack, that “doesn’t make them invincible”, according to Kevin Walker, cyber security consultant at Black Swan Cyber Security Solutions.
With cyber security top of mind for a lot of people right now – the last month or so has seen headlines about cyber-security flaws identified in the programming language underpinning a number of websites, as well as retailer hacks, and rising ‘add me on WhatsApp’ and romance scams – we asked experts for the signs that our iPhones might’ve been compromised.
After all, there’s not a day goes by when dodgy emails, messages and even push notifications ask us to click links that may well result in jeopardy.
How can an iPhone be hacked?
iPhones are “pretty difficult to hack, largely because of how tightly [Apple] controls the operating system and the apps you can install,” said Walker.
That said, he noted there “have been some pretty sophisticated attacks exploiting vulnerabilities in iOS [operating system] and messaging apps, including ones where the victim hasn’t even had to click anything”.
There are two key threats, and how susceptible you are will depend on who you are and what you do.
For the average iPhone owner, though, Walker said he’d be “far more concerned about somebody getting into their Apple Account or email”.
“Criminals can use convincing phishing messages, stolen passwords or scams to get access to personal information without ever having to compromise the phone itself,” he said.
Kurtis Baron of Echo Secure agreed it’s not usually the phone that’s the target, but rather the account. He noted a “phished or reused password, or a SMS code tricked out of you” could give someone access to your iCloud data.
“We see a lot of phishing texts and fake login pages like fake delivery scams or ‘Apple ID locked messages’ leading to phishing pages,” he said.
“Malicious device profiles are another avenue of attack. You get talked into installing a profile that can route your traffic to attackers and control device settings.”
The signs you might’ve been ‘hacked’
A quick Google search suggests a drained battery might be a key sign your iPhone’s compromised, but experts agree this isn’t a reliable indicator and, as Pistolas said, “these symptoms usually have much more mundane explanations”.
Instead, keep an eye out for:
- Apple sending notifications about sign-ins you don’t recognise or receiving verification codes you haven’t requested,
- Unfamiliar devices being linked to your account,
- Password changes you didn’t make,
- Messages being sent that you know nothing about or account activity you don’t recognise,
- Location sharing turned on which you didn’t enable.
“Unfortunately, some of the more sophisticated spyware doesn’t give you any obvious warning. Your phone could appear perfectly normal,” added Walker.
That’s why it’s important to identify your likely threat level.
“For the average person, unexplained account activity is signal number one,” added Pistolas.
What can iPhone users do if they suspect an issue?
Your best bet is to check your Apple account and see which devices are signed in as you – if there’s anything you don’t recognise, “investigate it, remove unauthorised devices and change your password”, advised Walker.
“Check the trusted phone numbers as well, because there’s little point changing your password if somebody else can still receive your security codes.”
You should also look at Settings > General > VPN & Device Management for any configuration profiles you don’t recognise – remove them if you find them.
“Apple’s Safety Check feature is also worth using to review which people and apps can access your information,” the expert added.
Both Pistolas and Walker advise getting specialist advice if you think your phone has actually been compromised, particularly with spyware.
“A factory reset could wipe evidence that might help establish what happened,” added Walker.
How to prevent hacks in the first place
If you’ve conducted all the relevant security checks and there aren’t any issues, there are still preventative measures you can put in place to keep hackers at bay.
“For most iPhone users, the fundamentals still provide the greatest benefit: keep iOS updated, use strong and unique passwords, enable two-factor authentication, protect your phone with a strong passcode and turn on Stolen Device Protection,” said Pistolas.
He also urges iPhone users to be sceptical of unexpected security alerts, never share verification codes with others, and regularly review which devices and people have access to your accounts and information.
“For higher-risk individuals, Apple’s Lockdown Mode provides additional protection against sophisticated, targeted attacks, including certain spyware techniques,” Pistolas said.
“Zero-click exploits make alarming headlines, but they shouldn’t distract most people from the threats they’re considerably more likely to encounter.”
Walker said that after nearly 30 years working in IT, he’s learned people “often worry about the wrong things” when it comes to being hacked.
“A phone getting warm or needing charging twice a day isn’t particularly unusual,” he ended. “Somebody accessing your Apple Account from a device you’ve never heard of is a different matter entirely.”
