What to Dial to See If Your Phone Is Hacked: USSD Codes That Actually Work

Luglio 01, 2026 • security

Wondering if your phone has been hacked? There are specific codes you can dial right now to check for suspicious activity — from call forwarding set by someone else to SIM cloning detection. These are official network diagnostic codes built into every Android and iPhone.

Below are the exact codes to dial, what the results mean, and additional steps to take if your phone shows signs of compromise.

USSD Codes to Detect Phone Hacking

USSD (Unstructured Supplementary Service Data) codes communicate directly with your carrier’s network, bypassing your phone’s operating system. This makes them reliable even if malware is present on your device.

*#21# — Check if Your Calls Are Being Forwarded

Dial *#21# and press call.

This code reveals all active call, SMS, and data forwarding settings on your line. If the results show forwarding is enabled to a number you don’t recognize, someone may have set up call forwarding without your knowledge — a technique used by hackers to intercept your calls and 2FA SMS codes.

What a clean result looks like: “Not forwarded” or “Disabled” next to Voice, Data, Fax, and SMS.

What a compromised result looks like: A phone number listed under “Voice calls forwarded to” or “SMS forwarded to” that you did not set.

*#62# — Check Where Calls Go When You’re Unreachable

Dial *#62# and press call.

This shows the number your calls are forwarded to when your phone is switched off or has no network coverage. Hackers use this setting to divert calls to their own numbers when your device is unavailable.

Expected result: Your carrier’s voicemail number.

Suspicious result: Any unfamiliar number that is not your carrier’s voicemail.

*#67# — Check Forwarding When Your Line Is Busy

Dial *#67# and press call.

This code checks where calls go when your line is busy. Like *#62#, it should show your voicemail number. An unknown forwarding number here is a red flag.

##002# — Disable All Call Forwarding Immediately

If any of the above checks reveal unauthorized forwarding, dial ##002# to erase all call and data forwarding settings on your line immediately. This is a universal code supported by most carriers on both Android and iPhone.

After dialing, call *#21# again to confirm all forwarding has been cleared.

*#06# — Check Your IMEI Number

Dial *#06# to display your phone’s IMEI (International Mobile Equipment Identity) number.

Your IMEI is your phone’s unique hardware identifier. Write this number down and compare it to the IMEI printed inside your phone’s battery compartment or under Settings → About Phone. If the numbers don’t match, your phone’s software may have been tampered with to spoof a different device identity.

What These Codes Work On

CodeiPhoneAndroidScopo
*#21#✅ Yes✅ YesCheck all call/SMS forwarding
*#62#✅ Yes✅ YesCheck forwarding when unreachable
*#67#✅ Yes✅ YesCheck forwarding when line is busy
##002#✅ Yes✅ YesCancel all forwarding
*#06#✅ Yes✅ YesDisplay IMEI number

Carrier support varies. If a code doesn’t work on your line, contact your carrier directly to check forwarding settings through their account portal.

Other Signs Your Phone Has Been Hacked

The dial codes above check for network-level interference. Malware and spyware require different detection methods. Look for these additional signs:

Battery Draining Faster Than Normal

Spyware and monitoring apps run continuously in the background, consuming battery at an unusually high rate. If your phone’s battery life has suddenly dropped without any change in your usage habits, malware may be the cause.

Check: Settings → Battery → Battery Usage (Android) or Settings → Battery (iPhone). Look for apps consuming an abnormal percentage of battery that you don’t actively use.

Phone Gets Unusually Hot

Background processes — like those run by stalkerware — heat up your processor. If your phone is warm even when idle and you’re not charging it, this warrants investigation.

Unexpected Data Usage Spikes

Spyware transmits your data (calls, messages, photos, location) to a remote server. This shows up as unusual mobile data consumption.

Check: Settings → Mobile Data (iPhone) or Settings → Network & Internet → Data Usage (Android). Sort by highest usage. Any unfamiliar app consuming significant data is suspicious.

New Apps You Didn’t Install

Scroll through your installed apps and look for anything you don’t recognize. Stalkerware sometimes disguises itself with generic-sounding names like “System Service,” “Phone Manager,” or “Sync Tool.”

Texts or Calls You Didn’t Make

Check your sent messages and call log. If you see outgoing messages or calls you didn’t make, your device is compromised.

Camera or Microphone Indicator Lights Activating Unexpectedly

On newer iPhones and many Android devices, a green dot appears when the camera or microphone is in use. If these indicators appear when you’re not using any app that needs them, spyware may be accessing your camera or microphone.

How to Check If Your iPhone Has Been Hacked

Check App Privacy Permissions

Go to Settings → Privacy & Security. Review which apps have access to your Location, Microphone, Camera, and Contacts. Revoke access for any app that doesn’t need those permissions for its core function.

Check for Profiles (iOS)

Malicious apps sometimes install configuration profiles that grant elevated access to your device.

  1. Go to Settings → General → VPN & Device Management.
  2. If you see any profile you didn’t install — especially from an unknown organization — delete it immediately.

Check Your Apple ID Login Activity

  1. Go to Settings → [Your Name].
  2. Scroll down to see all devices signed into your Apple ID.
  3. Tap any device you don’t recognize and select “Remove from Account.”

How to Check If Your Android Phone Has Been Hacked

Check for Unknown Apps with Device Admin Rights

Some spyware grants itself Device Administrator privileges to prevent uninstallation.

  1. Go to Settings → Security → Device Admin Apps.
  2. Review every app listed. Only apps you trust (like MDM software from your employer) should appear here.
  3. Deactivate and uninstall any unknown apps.

Check Google Account Activity

  1. Go to myaccount.google.com/security.
  2. Review recent sign-in activity and devices with access to your Google account.
  3. Sign out any devices you don’t recognize.

Run a Malware Scan

Android has Google Play Protect built in. Go to Google Play Store → tap your profile icon → Play Protect → Scan. For a more thorough check, use a reputable security app like Malwarebytes for Android.

What to Do If Your Phone Is Hacked

  1. Dial ##002# to clear all call forwarding.
  2. Change all critical passwords from a different, secure device — email, banking, social media, and any account using SMS 2FA.
  3. Enable 2FA with an authenticator app (not SMS) on all important accounts.
  4. Revoke all app permissions that seem unnecessary.
  5. Check for unknown device profiles (iPhone) or Device Admin Apps (Android) and remove anything suspicious.
  6. Run a security scan with a trusted antivirus or anti-malware app.
  7. Contact your carrier and ask them to place a SIM swap lock on your account to prevent unauthorized number porting.
  8. Factory reset as a last resort — if you cannot remove the threat, a factory reset removes all software, including malware. Back up essential data to a cloud service first, but do not restore from a full backup as this may re-introduce the malware.

Domande Frequenti

What is the number to dial to check if your phone is being monitored?

Dial *#21# to check if your calls and messages are being forwarded to another number. If forwarding is active to an unknown number, dial ##002# to cancel it immediately and contact your carrier.

Does *#21# actually work on iPhones?

Yes. *#21# works on both iPhone and Android devices on most major carriers. It queries your carrier’s network directly and displays the current call and SMS forwarding status for your line.

Can someone tap my phone without me knowing?

Yes. Call forwarding can be set remotely if someone has access to your carrier account or your phone’s settings. Spyware installed on your phone can also record calls and transmit data without any visible indication.

What does *#62# tell you?

*#62# shows the number your calls are forwarded to when your phone is switched off or has no signal. It should display your carrier’s voicemail number. Any other number is suspicious and may indicate unauthorized forwarding.

Can you tell if someone is reading your text messages?

Standard SMS messages can be forwarded using carrier-level divert codes (visible via *#21#). However, end-to-end encrypted messages (like iMessage or WhatsApp) cannot be forwarded at the network level. Spyware on the device itself can read messages regardless of encryption.

What should I do if I find unauthorized call forwarding?

Dial ##002# to cancel all forwarding immediately. Then change your carrier account password, add a PIN to your account, contact your carrier to report unauthorized changes, and change passwords for all accounts that use SMS-based 2FA.

security, Cybersecurity Author at Security Briefing

sicurezza

admin è una redattrice senior per Government Technology. In precedenza ha scritto per PYMNTS e The Bay State Banner e ha conseguito una laurea in scrittura creativa alla Carnegie Mellon. Risiede fuori Boston.

it_ITItalian