Android · Recovery Guide

    How to Tell If Your Google Account Has Been Compromised on Android

    Spot the signs that someone might have gained unauthorised access to your Google account on an Android device.

    Check Your Google Account Activity

    The first place to look for suspicious activity is directly within your Google Account settings. This shows you recent logins and connected apps.

    1. On your Android phone, open the Settings app.
    2. Scroll down and tap Google.
    3. Tap Manage your Google Account.
    4. Tap Security at the top. On some Samsung phones, you might find this under Privacy & Security.
    5. Under 'Recent security activity', review for any unfamiliar devices or locations. Under 'Your devices', check for any devices you don't recognise. Under 'Third-party apps with account access', look for any apps you haven't authorised.

    If you see a device or app you don't recognise, do not remove access yet. We are currently only identifying potential compromises.

    Review Unusual Email or App Activity

    A compromised account often shows signs in your email or how your apps behave. Look out for messages you didn't send or apps acting strangely.

    • Open your Gmail app or other email client and check your 'Sent' and 'Spam' folders for emails you didn't write. Also, look for password reset emails for accounts you didn't try to access.
    • Check your installed apps for any new apps you don't remember downloading. Go to SettingsApps (or Apps & Notifications) → See all apps.
    • Look for unusual activity in cloud storage apps (Google Drive, Google Photos) such as files you didn't upload or share.
    • Review your Google Play Store activity for app purchases or downloads you didn't make. Open the Play Store, tap your profile icon, then Payments & subscriptionsBudget & history.

    Be cautious of email that appears to be from Google asking you to verify your account or change your password outside of the official Google Account page. These are often phishing attempts.

    Examine Your Phone's Performance and Data Usage

    A compromised account might lead to hidden background activity, which can affect your phone's performance and data consumption.

    1. Go to SettingsNetwork & internetData saver (or Data usage on Samsung phones). Look for unusually high data usage by apps you don't frequently use, or background data spikes.
    2. Check your battery usage: SettingsBattery. Look for apps consuming a lot of battery in the background that you don't recognise or use often.
    3. Notice if your phone frequently feels warm when you're not actively using it, or if its performance has significantly slowed down without a clear reason.

    High data or battery usage can have many causes, but combined with other signs, it can indicate a problem.

    Check for Unexpected Charges or Subscriptions

    If someone has access to your Google account, they might use it for unauthorised purchases or to sign up for services.

    • Review your bank statements and credit card bills for any unfamiliar charges connected to Google Play or other online services.
    • Within the Google Play Store, tap your profile icon, then Payments & subscriptionsSubscriptions. Look for any subscriptions you didn't initiate.
    • Check your Google Pay activity for transactions you didn't make. Open the Google Wallet app (or Google Pay), and review the 'Activity' tab.

    Always review your financial statements regularly, especially for small recurring charges that might go unnoticed.

    More from Device Security

    No image

    How to Block Scam Calls and Filter Spam SMS on Android

    How to Block Scam Calls and Filter Spam SMS on Android

    No image

    How to Detect Spyware or Stalkerware on an iPhone

    How to Detect Spyware or Stalkerware on an iPhone

    No image

    How to Stop Apps Spying Through Your iPhone Camera and Microphone

    How to Stop Apps Spying Through Your iPhone Camera and Microphone