Rule out spyware first
The settings to check, one by one
Before you remove anything
Who's signed in to your Apple Account
From your home screen, open Settings and tap your name at the very top, then scroll down to the Devices list. Every device signed in here can see your messages, photos and location through iCloud — tap anything you don’t recognise and choose Remove from Account.
iPhone home screen opening Settings, tapping your name, scrolling to the Devices list and removing an unrecognised Mac
The addresses that can reset your account
Back on the Apple Account screen, open Sign-In & Security and look at Email & Phone Numbers — every address and number that can sign in to and reset your account. An entry you don’t recognise is a way back in even after you change your password, so remove anything that isn’t yours.
Your Name
yourname@icloud.com
iPhone Apple Account, Sign-In & Security, Email & Phone Numbers with an unknown recovery address flagged
Who receives your login codes
Still in Sign-In & Security, tap Two-Factor Authentication and check the Verify Using list — the devices and trusted numbers that receive your login codes. A trusted number you don’t recognise gets your codes whenever you sign in, so remove it.
Email & Phone Numbers
yourname@icloud.com
Primary email
These addresses and phone numbers can be used to sign in, verify your identity, and help recover your account.
Security
Your trusted devices and phone numbers are used to verify your identity when signing in.
Recovery Methods
Regain access to your account and data if you forget your password or device passcode.
A legacy contact is someone you trust to have access to the data in your account after your death.
iPhone Sign-In & Security, Two-Factor Authentication, Verify Using list with an unknown trusted number flagged
That covers your Apple Account
A management profile you didn't install
Mobile Device Management (MDM) is the most powerful foothold of all. It’s built for companies to run work phones, so a profile like this can monitor your traffic, see your location, silently install or remove apps, and even lock or wipe the device remotely. On a personal iPhone you should never see one you didn’t set up yourself.
To check, head back to the main Settings list and open General → VPN & Device Management — a personal phone is usually empty here, or shows only your employer or school. Treat any profile you don’t recognise as a serious red flag (but read the note on evidence above before you delete it).
Settings
iPhone Settings, General, VPN & Device Management showing an unexpected configuration profile flagged
Where your FaceTime calls ring
Now into the messaging apps. Open Settings, scroll to the bottom and tap Apps, then open FaceTime. Under You Can Be Reached By FaceTime At, an address you don’t recognise means your FaceTime calls also ring on someone else’s device — untick it.
Settings
iPhone Settings, FaceTime, You Can Be Reached By FaceTime At, with an unknown address unticked
What this does and doesn't mean
Where your iMessages land
Now back on the Apps screen, scroll down to Messages and open it, then tap Send & Receive. This lists every phone number and email that receives your iMessages. An address you don’t recognise means your private messages are also arriving on someone else’s device — untick it.
A
F
M
iPhone Settings, Messages, Send & Receive with an unknown email address being unticked
These come from your Apple Account
Who else gets your texts
Back on the Messages page, scroll down to Text Message Forwarding and open it. Every device listed here receives a copy of the SMS texts sent to your number — including bank and login codes. Switch off anything you don’t recognise; if the screen is empty, no forwarding is set up.
iMessages are sent between iPhone, iPad and Mac.
Allow your iPhone text messages to also be sent and received on other devices.
TEXT MESSAGING
iPhone Settings, Messages, Text Message Forwarding showing an unrecognised device switched off
These are your signed-in devices
Where your calls really go
Back on the Apps screen, scroll down to Phone and open it, then tap Call Forwarding. If it’s switched on and pointing to a number you don’t recognise, your calls are being routed to someone else before they ever reach you — switch it off.
P
iPhone Settings, Phone, Call Forwarding switched on and forwarding to an unknown number
What this does and doesn't mean
A Screen Time passcode you didn't set
Back in the main Settings list, scroll down to Screen Time and open it. Tap a locked option like Downtime — if it asks for a Screen Time passcode you never created, someone else has set one. Screen Time can hide apps, log activity and lock settings down, so a passcode you don’t control is a classic way to monitor and restrict a partner’s phone.
Settings
iPhone Screen Time passcode prompt that someone else has set, the entry shaking on a wrong guess
Who can see your location
Find My isn’t a Settings page. Close Settings, return to your home screen and open the Find My app, then tap People. This is exactly who can see your location — anyone here you don’t recognise can follow you in real time, so tap them and choose Stop Sharing My Location.
Find My app People list showing an unknown person who can see your location, flagged red
Summary & next steps
Found something — and you know who's behind it?
Just want it to stop?
Common questions
Can someone read my iMessages without installing spyware?
Will a spyware scan find any of this?
If I turn off forwarding or remove their device, will they know?
Is changing my Apple Account password enough?
Was this guide helpful?
Know someone who needs this? Send them the guide.
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers