Is Your Android Being Monitored? The Settings to Check

    Most Android monitoring isn't an app you can scan for — it's built-in features someone abused: a paired Messages device, a linked Google account, shared location, notification access. Here's every setting to check.

    JDCS
    By Jordan Dickson · Reviewed by CSG Security Engineers

    Updated June 2026 · 3 min read

    Not all Android monitoring is a hidden app. Just as often it’s someone who has, or once had, your PIN or Google account password switching on features Android and Google built for sharing: a paired device that mirrors your texts, your notifications read by another app, your location ‘temporarily’ shared a year ago. A malware scan won’t flag any of it, because nothing is malware — it’s your own settings, used against you. Here’s every place to look.

    Rule out stalkerware first

    If you haven’t already scanned for a monitoring app, do that first — then work through these settings. The two together cover almost every way an Android phone gets watched.
    Scan for stalkerware first

    The settings to check, one by one

    1

    Paired devices in Google Messages

    Open Messages → profile icon → Device pairing (or Messages for web). Any browser or device paired here receives a live copy of your texts — including bank and login codes. Unpair anything you don’t recognise.

    2

    Devices signed into your Google Account

    Go to Settings → Google → Manage your Google Account → Security → Your devices. Anything signed in here can reach your email, photos, backups and location. Tap a device you don’t own and Sign out.

    3

    Who can see your location

    Check Google Maps → profile icon → Location sharing and Find My Device for anyone you’re sharing with. Stop any sharing you didn’t set up or no longer want.

    4

    Notification access

    Open Settings → Notifications → Device & app notifications (or search Notification access). An app with this permission can read every notification you get — message previews, codes, everything. Revoke it for anything you don’t recognise.

    5

    Call and SMS forwarding

    In the Phone app → Settings → Call forwarding, check nothing is quietly sending your calls elsewhere. Watch too for any ‘SMS forwarder’ app that copies your texts onward.

    6

    Your Google account recovery details

    In Google Account → Security, check the recovery phone and email. A number or address someone else added lets them reset their way back in even after you change your password. Remove anything that isn’t yours.

    Found something — and you know who's behind it?

    If this could become a legal matter — a family court case, a protection order — resist the urge to delete it. Removing it tips them off and destroys the proof. Screenshot what you can and get advice before you change anything.
    Preserve the evidence — get it examined

    Just want it to stop?

    Once you’ve been through the settings above, close every remaining door at once — your accounts, your network and your number — so there’s nothing left for anyone to use.
    Stop your phone being monitored

    Common questions

    Can someone read my texts without installing spyware?
    Yes — and it's common. If they've paired a device in Google Messages, or your texts are mirrored to an app with notification access, your messages reach them with no monitoring app to scan for.
    Will a malware scan find any of this?
    No. A scan looks for malicious apps. Everything here is a legitimate Android or Google feature being misused, so a scan reports a clean phone while the monitoring continues. That's why you check both.
    Is changing my Google password enough?
    It's the most important single step — it signs other devices out and cuts off account access. But also remove any recovery phone or email they added, unpair strange devices, and work through the list, because forwarding and sharing settings can outlive a password change.
    If I remove their access, will they know?
    They may notice their copies stop. If you're dealing with a controlling partner and there's any safety risk, think about timing and support before you change things — and if you might need it for a legal case, preserve the evidence first.

    Was this guide helpful?

    Know someone who needs this? Send them the guide.

    JD

    Written by

    Jordan Dickson

    Founder, CyberSecurityGuides

    Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.

    Reviewed by CSG Security Engineers

    More from Device Security

    No image

    How to Secure Your Google Account

    Lock down the Google account behind your Android phone: move it to a private email, set a strong unique password, turn on app-based 2-Step Verification, remove devices you don't recognise, and close the recovery back doors.

    No image

    How to Secure Your Apple ID

    Lock down the Apple Account behind your iPhone, step by step: move it to a private email, set a strong unique password, tighten two-factor, remove recovery contacts, add a recovery key, turn on Advanced Data Protection, close iCloud.com web access, and switch on Stolen Device Protection.

    No image

    How to Secure the Account That Runs Your Phone

    Your Apple ID or Google account is the master key to your phone — anyone signed in can see everything. Here's why it matters and how to lock it down, with step-by-step guides for iPhone and Android.