Is Your iPhone Being Monitored? The Settings to Check

    Most iPhone monitoring isn't spyware — it's built-in features someone abused: text forwarding, a shared Apple Account, location sharing, configuration profiles. Here's every setting to check.

    JDCS
    By Jordan Dickson · Reviewed by CSG Security Engineers

    Updated July 2026 · 8 min read

    Real iPhone monitoring is rarely dramatic spyware — that’s hard and expensive. Far more often it’s someone who has, or once had, your passcode or Apple Account password quietly switching on features Apple built for sharing: a forwarded copy of your texts, your iMessages landing on their device, your location ‘temporarily’ shared a year ago. A spyware scan won’t flag any of it, because nothing is malware — it’s your own settings, used against you. Here’s every place to look.

    Rule out spyware first

    If you haven’t already ruled out actual spyware, do that first — then work through these settings. The two together cover almost every way an iPhone gets watched.
    Scan for spyware first

    The settings to check, one by one

    Start with your Apple Account (formerly Apple ID). It’s the master key to your iPhone — anyone signed in to it can read your messages, see your photos and follow your location through iCloud, with nothing installed on the device at all. That makes it the most common way someone keeps watch without you knowing, so it’s where we begin.

    Before you remove anything

    The steps below don’t just find monitoring — they walk you through removing it, and that part needs care. If the person could turn aggressive, taking away what you find may tip them off, so it can be safer to leave it in place until you’ve sought assistance and have a safety plan. If it might lead to legal proceedings, photograph anything unusual from another device (a friend’s phone or a camera) — but keeping the phone itself intact matters more than any screenshot, so be careful before you delete anything.
    1

    Who's signed in to your Apple Account

    From your home screen, open Settings and tap your name at the very top, then scroll down to the Devices list. Every device signed in here can see your messages, photos and location through iCloud — tap anything you don’t recognise and choose Remove from Account.

    9:41
    FaceTime
    Calendar
    Photos
    Camera
    Maps
    Clock
    Notes
    Settings

    iPhone home screen opening Settings, tapping your name, scrolling to the Devices list and removing an unrecognised Mac

    2

    The addresses that can reset your account

    Back on the Apple Account screen, open Sign-In & Security and look at Email & Phone Numbers — every address and number that can sign in to and reset your account. An entry you don’t recognise is a way back in even after you change your password, so remove anything that isn’t yours.

    9:41
    Apple Account
    Y

    Your Name

    yourname@icloud.com

    Personal Information
    Sign-In & Security
    Payment & Shipping
    Subscriptions
    iCloud
    Find My
    Media & Purchases

    iPhone Apple Account, Sign-In & Security, Email & Phone Numbers with an unknown recovery address flagged

    3

    Who receives your login codes

    Still in Sign-In & Security, tap Two-Factor Authentication and check the Verify Using list — the devices and trusted numbers that receive your login codes. A trusted number you don’t recognise gets your codes whenever you sign in, so remove it.

    9:41

    Email & Phone Numbers

    yourname@icloud.com

    Primary email

    Add Email or Phone Number

    These addresses and phone numbers can be used to sign in, verify your identity, and help recover your account.

    Security

    Change Password
    Two-Factor Authentication

    Your trusted devices and phone numbers are used to verify your identity when signing in.

    Recovery Methods

    Recovery ContactsSet Up
    Recovery KeyOff

    Regain access to your account and data if you forget your password or device passcode.

    Legacy ContactSet Up

    A legacy contact is someone you trust to have access to the data in your account after your death.

    Automatic VerificationOn

    iPhone Sign-In & Security, Two-Factor Authentication, Verify Using list with an unknown trusted number flagged

    That covers your Apple Account

    That’s the main ways into your Apple Account itself — the devices signed in, the addresses that can reset it, and the trusted numbers that receive your codes. If any of them looked wrong, remove it and change your Apple Account password straight away (screenshot anything unusual first, in case you need it later). The steps that follow cover the other, more general ways someone can keep watch on your phone.
    4

    A management profile you didn't install

    Mobile Device Management (MDM) is the most powerful foothold of all. It’s built for companies to run work phones, so a profile like this can monitor your traffic, see your location, silently install or remove apps, and even lock or wipe the device remotely. On a personal iPhone you should never see one you didn’t set up yourself.

    To check, head back to the main Settings list and open General → VPN & Device Management — a personal phone is usually empty here, or shows only your employer or school. Treat any profile you don’t recognise as a serious red flag (but read the note on evidence above before you delete it).

    9:41

    Settings

    Airplane Mode
    Wi-Fi
    Bluetooth
    Mobile Data
    Personal Hotspot
    Battery
    General
    Accessibility
    Camera
    Control Centre
    Display & Brightness

    iPhone Settings, General, VPN & Device Management showing an unexpected configuration profile flagged

    5

    Where your FaceTime calls ring

    Now into the messaging apps. Open Settings, scroll to the bottom and tap Apps, then open FaceTime. Under You Can Be Reached By FaceTime At, an address you don’t recognise means your FaceTime calls also ring on someone else’s device — untick it.

    9:41

    Settings

    General
    Accessibility
    Camera
    Notifications
    Sounds & Haptics
    Screen Time
    Face ID & Passcode
    Emergency SOS
    Privacy & Security
    Game Center
    iCloud
    Wallet & Apple Pay
    Apps

    iPhone Settings, FaceTime, You Can Be Reached By FaceTime At, with an unknown address unticked

    What this does and doesn't mean

    An address listed here doesn’t, on its own, mean someone is monitoring you — it doesn’t expose your messages or data. But it does let FaceTime calls be made and answered from your account on another device, so an entry you don’t recognise could mean calls are being started or picked up as you without your knowing. Like iMessage, these are the addresses tied to your Apple Account that you reviewed in step 2 — if you cleared anything unfamiliar there, nothing new should appear here. Worth removing either way.
    6

    Where your iMessages land

    Now back on the Apps screen, scroll down to Messages and open it, then tap Send & Receive. This lists every phone number and email that receives your iMessages. An address you don’t recognise means your private messages are also arriving on someone else’s device — untick it.

    9:41
    Apps

    A

    App Store
    Apple Store

    F

    Facebook
    FaceTime
    Files
    Find My

    M

    Mail
    Maps
    Messages

    iPhone Settings, Messages, Send & Receive with an unknown email address being unticked

    These come from your Apple Account

    iMessage can only use the email addresses and phone numbers attached to your Apple Account — the same ones you reviewed in step 2. So if you already removed anything that wasn’t yours back there, nothing unfamiliar should appear here. If an address you don’t own still shows up, go back to step 2 — it’s a sign one slipped through.
    7

    Who else gets your texts

    Back on the Messages page, scroll down to Text Message Forwarding and open it. Every device listed here receives a copy of the SMS texts sent to your number — including bank and login codes. Switch off anything you don’t recognise; if the screen is empty, no forwarding is set up.

    9:41
    Messages
    iMessage

    iMessages are sent between iPhone, iPad and Mac.

    Send & Receive3 Addresses
    Show Contact Photos
    Text Message Forwarding

    Allow your iPhone text messages to also be sent and received on other devices.

    Send Read Receipts
    Retry as Text Message

    TEXT MESSAGING

    MMS Messaging
    Blocked Contacts

    iPhone Settings, Messages, Text Message Forwarding showing an unrecognised device switched off

    These are your signed-in devices

    The devices that can appear here are only ones signed in to your Apple Account — the same list you reviewed in step 1. If you already removed any you didn’t recognise there, none should show up here. If an unfamiliar device still appears, go back to step 1 — it means it’s still signed in to your account.
    8

    Where your calls really go

    Back on the Apps screen, scroll down to Phone and open it, then tap Call Forwarding. If it’s switched on and pointing to a number you don’t recognise, your calls are being routed to someone else before they ever reach you — switch it off.

    9:41
    Apps

    P

    Passwords
    Patreon
    PayPal
    Phone
    Photoroom
    Photos
    Pinterest

    iPhone Settings, Phone, Call Forwarding switched on and forwarding to an unknown number

    What this does and doesn't mean

    This isn’t call ‘tapping’ — forwarding doesn’t let someone listen in on your calls. What it does is send your incoming calls to another number, so that person answers calls meant for you. It can be used to intercept who’s trying to reach you, catch verification calls, or cut you off from people — all common in coercive control. Switch it off either way.
    9

    A Screen Time passcode you didn't set

    Back in the main Settings list, scroll down to Screen Time and open it. Tap a locked option like Downtime — if it asks for a Screen Time passcode you never created, someone else has set one. Screen Time can hide apps, log activity and lock settings down, so a passcode you don’t control is a classic way to monitor and restrict a partner’s phone.

    9:41

    Settings

    General
    Accessibility
    Camera
    Display & Brightness
    Home Screen & App Library
    Wallpaper
    Notifications
    Sounds & Haptics
    Focus
    Screen Time

    iPhone Screen Time passcode prompt that someone else has set, the entry shaking on a wrong guess

    10

    Who can see your location

    Find My isn’t a Settings page. Close Settings, return to your home screen and open the Find My app, then tap People. This is exactly who can see your location — anyone here you don’t recognise can follow you in real time, so tap them and choose Stop Sharing My Location.

    9:41
    FaceTime
    Calendar
    Photos
    Camera
    Maps
    Clock
    Notes
    Find My

    Find My app People list showing an unknown person who can see your location, flagged red

    Summary & next steps

    If you came here wondering whether someone is tracking your phone, you’ve now been through every setting someone can abuse to watch an iPhone without installing a thing — the Apple Account and the devices signed in to it, your account aliases and two-factor numbers, device-management profiles, FaceTime and iMessage addresses, text-message and call forwarding, the Screen Time passcode, and location sharing in Find My. Anything you removed along the way has already cut off that access.
    Where you go from here depends on what you found. The options below cover the two most common next moves: getting court-ready proof if you know who’s behind it, or closing the doors that never show up in these settings at all — the account- and network-level monitoring you can’t see from the phone — so it stops for good.

    Found something — and you know who's behind it?

    If this could become a legal matter — a family court case, a protection order — resist the urge to delete it. Removing it tips them off and destroys the proof. Screenshot what you can and get advice before you change anything.
    Preserve the evidence — get it examined

    Just want it to stop?

    Some monitoring never shows up in your iPhone settings at all — a compromised account, an email forwarding rule, the Wi-Fi or mobile network you connect through, or your phone number. Close those account- and network-level doors in one pass so there’s nothing left for anyone to use.
    Stop your phone being monitored

    Common questions

    Can someone read my iMessages without installing spyware?
    Yes — and it's the most common method. If they've added their device to your Apple Account, or your number or email to their own Send & Receive list, your iMessages simply arrive on their device too. No app, nothing for a scan to find.
    Will a spyware scan find any of this?
    No. A scan (like Certo) looks for malicious software and jailbreak traces. Everything on this page is a legitimate Apple feature being misused, so a scan reports a clean device while the monitoring carries on. That's why you check both.
    If I turn off forwarding or remove their device, will they know?
    They may notice their copies stop arriving. If you're dealing with a controlling partner and there's any safety risk, think about timing and have support in place before you change things — and if you might need it for a legal case, preserve the evidence first.
    Is changing my Apple Account password enough?
    It's the single most important step — it signs other devices out and cuts off iCloud access. But change your passcode too, and still work through the list above, because forwarding and shared-location settings can outlive a password change.

    Was this guide helpful?

    Know someone who needs this? Send them the guide.

    JD

    Written by

    Jordan Dickson

    Founder, CyberSecurityGuides

    Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.

    Reviewed by CSG Security Engineers

    More from Device Security