Search for a free spyware check and you will find websites offering to scan your phone from the browser. Enter your number, or just click Scan, and watch a progress bar find threats.
Every one of those is a scam, and the reason is worth understanding, because it also tells you what a real free check looks like.
Why no website can scan your phone
A web page runs in a sandbox inside your browser. It cannot list your installed apps, read your files, see your running processes, or inspect system settings. This is not a limitation that a clever site works around; it is the fundamental security model of every modern browser, and if a web page could do those things, the browser would be the vulnerability.
So when a site shows a scan animation and announces threats, nothing was scanned. The progress bar is a graphic. What happens next is one of a few things:
- Affiliate funnelling. The "threats" lead to a paid subscription the site earns commission on.
- Data collection. The phone number you entered is now on a list, and phone numbers of people actively worried about surveillance are commercially valuable.
- The install. You are prompted to install an app to remove the threats. On Android that may be sideloaded, outside the Play Store, with permissions you would never grant if you were not frightened.
The last one is the cruel version: a site that claims to find spyware, and installs it.
How to recognise one in five seconds. It asks for your phone number. It shows results before you install or connect anything. It names specific threats without access to the device. It creates urgency with a countdown. It cannot tell you what it examined, because the honest answer is nothing.
What free detection can actually do
Quite a lot, as it happens, as long as it runs somewhere with real access.
The checks you run yourself. Free, and they catch most commercial stalkerware, because that software needs permissions that appear in ordinary settings screens.
On Android: Play Protect (including whether somebody disabled it), Accessibility services, notification access, device admin apps, special app access, and the full app list with system apps shown. On iPhone: configuration profiles under VPN and Device Management, your Apple ID device list, app permissions, and jailbreak artefacts.
Our walkthroughs: Android and iPhone.
Built-in platform protection. Play Protect scans installed apps on Android at no cost. Apple sends threat notifications to people it believes were targeted by mercenary spyware, and Lockdown Mode is free and genuinely effective against that class of attack.
Free forensic tooling. Amnesty International's Security Lab publishes the Mobile Verification Toolkit, which analyses an iPhone backup or an Android device against published indicators of compromise. It costs nothing and it is the real thing, used in the investigations that made this subject public. It is also a command-line tool that assumes you can install Python packages and read forensic output. We wrote an honest guide to it in MVT and easier alternatives.
A free scan from a computer. This is what Haris Shield's free tier is: connect the phone by cable, the computer performs the analysis, and you find out whether anything was detected. The paid part is the detailed report, the removal guidance and continuous monitoring. We would rather say that plainly than imply that everything is free and surprise you later.
What free cannot do
Being straight about the limits is the whole point of this article.
Nothing free will reliably catch state-grade spyware. Mercenary tools like Pegasus exploit flaws deep in the operating system, sometimes leave no icon, sometimes do not survive a reboot, and are actively maintained to evade detection. MVT is the best free answer and even it depends on indicators that are published after a campaign is discovered. If you have concrete reason to think you are a target, free tooling is a starting point, not a conclusion — see checking an iPhone for Pegasus.
No free App Store scanner works on iPhone. iOS does not permit system scanning by any app, at any price. Free or paid, an iPhone antivirus app is checking your Wi-Fi and warning about bad websites.
Free rarely gives you documentation. If you may need to show somebody what was found — a lawyer, a police officer, a support worker — a screenshot of a settings screen is weak. That is usually where paid tooling earns its place, and it is worth knowing that before you need it rather than after.
A free check you can do in the next ten minutes
- Play Protect on Android, and note whether it had been turned off.
- Accessibility services, notification access, device admin apps. On iPhone, configuration profiles.
- Your Apple ID or Google account device list, plus the recovery email and phone number on the account.
- The full app list with system apps shown, looking for duplicates of ordinary tools.
- Location sharing: Find My, Family Sharing, Google Maps sharing, Family Link.
- Battery and data as supporting detail only, never as a verdict.
That costs nothing and rules out the large majority of real cases.
If you find something
Do not delete it yet if the person you suspect is someone in your life. Many monitoring products alert whoever installed them when they stop working, and deleting the software destroys evidence. Get advice first, from a device the other person has never had access to. Stalkerware: the signs, and what not to do covers the order that keeps you safest.
The short answer
No website can scan your phone. A page that shows you results without ever touching the device found nothing, and is either selling you something or collecting you.
Real free detection exists: the settings checks you run yourself, Play Protect, Apple's threat notifications and Lockdown Mode, MVT for the technically confident, and free scanning from a computer. What free will not reliably give you is certainty against state-grade spyware, anything at all through an iPhone app, or documentation you can hand to somebody else.
Sources
- Google, Play Protect: support.google.com/googleplay/answer/2812853
- Apple, About Apple threat notifications: support.apple.com/en-us/102174
- Apple, About Lockdown Mode: support.apple.com/en-us/105120
- Amnesty International Security Lab, Mobile Verification Toolkit: mvt.re
- Electronic Frontier Foundation, Surveillance Self-Defense: ssd.eff.org