You can tell if someone accessed your iPhone by checking Screen Time activity logs, looking for unexpected apps or data spikes, monitoring battery drain, and reviewing your Apple ID device list for unfamiliar devices, which reveal usage patterns or unauthorized logins. While no direct "logged in" notification exists for physical access with your passcode, unusual activity in these areas suggests someone might have used or remotely accessed your device.
How to Tell if Someone Has Remote Access to Your iPhone
If someone you don't know or don't trust can sign in to your Apple Account, your account is not secure. Protect your device with a passcode and, for additional protection against the rare instance when someone else has your iPhone and knows your passcode, turn on Stolen Device Protection for iPhone.
Yes, you can see your iPhone's unlock history.
You won't find a timestamped list anywhere within iOS, but you can check your app usage, cellular data, and Screen Time statistics to identify any unauthorized unlock activity.
How to Check If Your Phone Is Being Used without Your Permission
Three-finger gestures on iPhone primarily activate accessibility features like VoiceOver (for screen reading and navigation) and Zoom (magnification), allowing scrolling, zooming, and text manipulation (copy/paste/undo) with specific taps and drags, though some text actions work without VoiceOver enabled for quick editing. Common gestures include three-finger double-tap to toggle VoiceOver speech, triple-tap for the screen curtain, and pinching/spreading with three fingers for copy/paste actions, notes this YouTube video.
Run a malware scan
iPhones don't warn users about malware with pop-ups. If you notice signs of malware on your smartphone, run a scan with a trusted tool like Norton Mobile Security. This is the most reliable way to detect malicious software that may have bypassed Apple's defenses and remove it from your device.
On an iPhone, dialing *#21# is a USSD code used to check the status of your unconditional call forwarding, revealing if your calls, SMS, or data are being redirected and to which number, without actually changing settings; it's a simple privacy check to see if someone has secretly set your phone to forward everything, though it doesn't detect advanced spyware. Dialing this code brings up a message from your carrier about your call forwarding status, often showing "Disabled" or a specific number if it's active.
When two-factor authentication is turned on and a sign-in attempt occurs on a new device, you get a notification on your other trusted devices. The notification includes a map that shows the new device's location. This notification can appear on any trusted iPhone, iPad, or Mac.
Can someone mirror your phone without you knowing? Yes, resourceful cybercriminals have ways to mirror a victim's phone without their knowledge. Once the device is mirrored, the attacker can spy on the victim's screen, tracking their every action.
If someone wants to monitor your activities, it's surprisingly simple for them to load a cell phone tracker onto your device. There are also apps that can access a smartphone remotely with just a phone number.
You can see computers, phones, and other devices where you are or were signed in to your Google Account recently. You can check google.com/devices to make sure no one else has signed in to your account.
If someone else has access to your Apple Account, they can view information that is synced across devices, which may include such things as Messages and location. Learn here how to secure your Apple Account on iPhone, iPad, and Mac.
Call barring allows you to block certain types of incoming or outgoing calls. Dialing *#33# displays your device's current call barring status. If you're receiving excessive spam calls, enabling call barring can help prevent unwanted calls, including those from potential hackers.
Dial *#62# to see if any call forwarding is active on your iPhone. Check for a call forwarding number. Dial *#67# to see where your calls are being forwarded or redirected without your knowledge.
##002# cancels all forwarding on many GSM networks worldwide. Dial ##002# and press call. You'll usually hear a confirmation message.
7 signs your iPhone has been hacked & how to verify it
Signs your phone has been hacked
Unknown apps: If you see any unfamiliar apps on your phone that you don't remember installing, this could mean a possible compromise. However, don't confuse these apps with bloatware, which are the unnecessary pre-installed apps that come with your phone.
These codes can reveal call forwarding, SIM tracking, or conditional redirects that may indicate a compromise: Dial *#21#: This code shows you the status of call forwarding. If calls, messages, or other data are being diverted without your knowledge, this is one of the key signs your phone is hacked.
*3001#12345#* on an iPhone activates the hidden Field Test Mode, a diagnostic tool for network engineers and power users to see detailed cellular data like signal strength (dBm), cell tower info, and network quality, accessible by dialing the code in the Phone app and pressing call, often after turning off Wi-Fi for accurate cellular readings.
You can double-tap or triple-tap the back of iPhone to perform actions such as taking a screenshot, turning on an accessibility feature, running a shortcut, and more. Go to Settings > Accessibility > Touch > Back Tap. Choose Double Tap or Triple Tap, then choose an action.
Messages automatically uses the following screen effects for specific text strings: