What to Dial to See If Your Phone Is Hacked 2026

No dial code can confirm your phone is hacked. Codes like *#21# only show your call forwarding settings, which is one trick fraudsters use. Dial them as a first check, then scan for malware, review your apps, and lock down your accounts.

You searched what to dial to see if your phone is hacked. Good instinct.

But here's the catch: most guides oversell these codes.

I dug through the telecom standard, FTC advice, and Apple and Google help pages, so you don't have to. Below, I'll show you exactly what each code does, where it fails, and what to do next.

What Do Phone Hacking Codes Actually Do?

These codes don't scan your phone. They ask your carrier one question: "Where are this number's calls going?"

That matters because call forwarding lets an attacker catch your bank's verification calls. So a quick check is worth two minutes of your time.

The codes come from a telecom standard called 3GPP TS 22.030, and your carrier's network processes them. That's why, per Hackr.io, they work on both iPhone and Android.

Even so, TechPrevue is clear that they can't detect spyware, malicious apps, or SIM swap attacks.

Which Codes Should You Dial?

Here's the cheat sheet, in plain words. Screenshot it if you like.

Start with *#21#. It shows whether unconditional call forwarding is on, meaning every call gets redirected before your phone rings. The normal result is "not forwarded." A number you don't recognize is your red flag.

Next, try *#61#, *#62#, and *#67#. They show where calls go when you don't answer, when you're unreachable, and when you're busy. Normally, each one points to your carrier's voicemail number. Again, only an unfamiliar number is a problem.

Want a shortcut? Dial *#004# to see all conditional call forwarding rules at once.

Finally, there's ##002#. This one isn't a check. It cancels every forwarding rule on your line, so use it only after you've spotted something suspicious.

Keep in mind that a forwarding number isn't automatically bad. As Norton explains, it's often just your carrier's voicemail. Results can also vary by carrier.

How Do You Check for Call Forwarding Step by Step?

This takes about two minutes, and you don't need any app.

Follow the steps in order, because each one builds on the last. Do it now, while you're thinking about it. Then set a reminder to repeat it every few months.

1. Open your phone's dialer.
2. Dial *#21# and press call. "Not forwarded" is normal.
3. Dial *#004# to check every conditional rule in one shot.
4. Compare any number you see with your carrier's voicemail number.
5. See a number you can't explain? Dial ##002# and press call to cancel all forwarding.
6. Dial *#21# again to confirm it's clear.
7. Call your carrier and change your passwords.

Got an "Invalid MMI code" message? That's your carrier's quirk, not proof of a hack.

Can Someone Trick You Into Dialing the Wrong Code?

Yes, and it happens more than you'd think. A call forwarding scam starts with a call from "your bank" or "your phone company." The caller says there's a problem, then tells you to dial a "fix."

That fix forwards your calls, including one time passwords, to the scammer. Scary, but easy to avoid once you know the pattern.

India's Department of Telecom warned about the *401# scam and said providers never ask you to dial it. In the US, WKYC reports that banks flag *72 and **21 the same way.

My rule: never dial a code a stranger gives you. Also skip random "secret code" lists. On older phones, Samsung's *2767*3855# starts a reset with no confirmation.

What Are the Signs Your Phone Is Hacked?

One symptom proves nothing. Two or three together deserve attention.

Here's the checklist I'd use. The first items come from the FTC's malware guide, and the rest from Google's malware help page.

• Your phone suddenly slows down, crashes, or shows repeated error messages
• Pop-ups that won't go away
• Your browser homepage or search engine changes without permission
• Messages go out from your accounts that you never sent
• Your storage shrinks with no explanation
• Unexplained data usage or battery drain, per Hackr.io

Notice one? Stop banking and shopping on that device until you've checked it.

Also, watch your accounts. Sudden logouts don't always mean a hack, but they're worth understanding. If you keep getting kicked out, read why Facebook logged you out and how to secure your account.

How Do You Really Check Your Phone for Spyware?

Codes only cover forwarding. To find spyware and stalkerware, you need the security tools already on your phone.

Google says Play Protect scans 200 billion Android apps daily. Meanwhile, Apple says it relies on its own threat intelligence to spot mercenary spyware.

What Can You Check on Android?

On Android, start with Google Play Protect. It runs a daily scan, and you can start a full scan any time.

Next, open Settings, then Apps, and switch on system apps, so you can spot unknown ones. Then check your device administrator apps for anything you didn't approve. Finally, on Android 12 and newer, use the Privacy Dashboard to see which apps used your microphone or camera, and when.

What Can You Check on iPhone?

iPhone works differently, because there's no scan you run yourself. Instead, Apple sends threat notifications to people it believes are individually targeted.

Still, you can check a lot by hand. Scroll your app list for anything unfamiliar. Then open Settings, General, then Profiles & Device Management to look for management profiles you didn't install. On iOS 16 and newer, Safety Check shows who can see your location and data.

What about extreme cases? Apple offers Lockdown Mode, but Apple stresses that most people are never targeted by that level of attack. Still, Apple reportedly sent spyware warnings to users in 110 countries in August 2026.

Experts also use Amnesty's Mobile Verification Toolkit. It's powerful, but it's built for investigators, not casual self checks.

What If You Suspect Stalkerware From a Partner?

Slow down. Removing a monitoring app can alert the person who installed it, and it may destroy evidence.

Make a safety plan first. The Coalition Against Stalkerware lists survivor resources by country.

Could Someone Hijack Your Number Without Touching Your Phone?

Yes, through SIM swap and port-out fraud. No dial code catches these. Luckily, the FCC now requires carriers to notify you immediately about SIM change and port-out requests. So never ignore those alerts.

Frequently Asked Questions

Does *#21# mean my phone is hacked?

No. It only shows whether your calls are forwarded. A voicemail number is normal, and only an unknown number needs action.

Do these codes work on iPhone and Android?

Yes. Your carrier's network processes the forwarding codes, so they work on both. Results vary by carrier.

Can a code detect spyware?

No. Codes can't detect spyware, malicious apps, or SIM swaps. Use Play Protect, app reviews, and a mobile security app instead.

What should I do if I find an unknown forwarding number?

Dial ##002# to cancel it, confirm with *#21#, then call your carrier and change your passwords.

Are secret codes like *#06# or *2767*3855# safe?

Not always. Some are brand specific, and some can wipe your phone. Only dial codes you understand.

Should I install a security app?

Yes, but choose carefully. The FTC warns that some "security" apps are actually malware, so check independent reviews first.

Conclusion: Your Best Move After Checking If Your Phone Is Hacked

Let's recap. Dial codes are a fast first check, but they cover only call forwarding. Real protection takes layers.

So here's the plan I'd follow:

1. Run the forwarding checks above.
2. Turn on automatic updates for your phone and apps.
3. Enable two-factor authentication on email, banking, and social accounts.
4. Ask your carrier about a port-out PIN or number lock.
5. Tighten your passwords and storage with this guide to digital security and privacy with BUNKR.
6. Install [Your Product Name], then run a full scan tonight.

Will this make you completely hackproof? No, nothing does. But it shuts the door on the most common attacks, and that's a bargain compared to a drained bank account.