Virus & Malware Removal · 6 min read
How to Remove Malware from an Android Phone
Android malware almost always arrives as an installed app — sideloaded from outside the Play Store, or a legitimate-looking utility that abuses accessibility permissions.
Published 2026-08-09 · Last updated 2026-08-09
Boot into safe mode
Safe mode loads the system without third-party apps, which stops overlay malware from blocking your taps. On most devices, press and hold the power button, then long-press Power off until the safe mode prompt appears.
Remove device admin status, then uninstall
Malicious apps register as device administrators so they cannot be uninstalled. Revoke that in Settings under device admin apps, then remove the app normally.
Audit accessibility and permissions
Accessibility services can read the screen and tap on your behalf — the mechanism behind most Android banking trojans. Review which apps hold accessibility, notification access, SMS and install-unknown-apps permissions, and revoke anything that has no business with them.
Run Play Protect and a reputable scanner
Update apps, run a Play Protect scan, and if symptoms persist, install one reputable mobile security app from the Play Store for a second opinion. Android does not need multiple security apps running permanently.
Factory reset as the reliable fallback
If the behaviour continues, back up photos and documents only, factory reset, and reinstall apps from the Play Store individually. Do not restore a full app backup that may contain the malicious package.
Frequently asked questions
- Can an iPhone get the same malware?
- Consumer iOS malware is very rare because apps are sandboxed and sideloading is restricted. Most iPhone 'virus' warnings are browser scam pages.
- Do I need an antivirus app on Android?
- Play Protect plus installing only from the Play Store covers most users. A scanner is worth it if you sideload apps or share the device.