Why am I getting random ads on my phone?

Random pop-up ads are almost always caused by adware — a type of malware disguised as a legitimate app. On Android, adware typically comes from apps installed outside the Google Play Store (sideloaded APKs) or from sketchy apps that passed Play Store review. On iPhone, adware is rare because iOS restricts app installation to the App Store, but it can occur through malicious website notifications, compromised Safari profiles, or rogue calendar subscriptions that push fake 'virus alert' notifications.

How do I find which app is showing ads on my Android phone?

Method 1: When an ad appears, press the Recent Apps button (square icon) immediately — the app running the ad should be visible as the most recent app. Note its name. Method 2: Settings → Apps → sort by 'Last Used' or 'Recently Installed' — adware apps are usually recently installed apps you don't recognise. Method 3: Boot into Safe Mode (hold Power Off for 2 seconds → tap 'Safe Mode') — this disables all third-party apps. If ads stop in Safe Mode, the problem is definitely a third-party app. Uninstall recently installed apps one by one until the ads stop.

Can iPhones get malware?

Traditional malware (viruses, trojans) is extremely rare on iPhones because iOS sandboxes every app and restricts installation to the App Store. However, iPhones can get: (1) adware through malicious calendar subscriptions — fake 'virus detected' alerts that look like system notifications, (2) malicious Safari profiles that redirect your browser, (3) web-based phishing that tricks you into entering passwords, and (4) compromised apps that passed App Store review (rare, Apple removes these quickly). Jailbroken iPhones lose all of these protections and are vulnerable to real malware.

Do I need antivirus on my phone?

iPhone: No. iOS's built-in security (sandboxing, App Store review, system integrity protection) is more effective than any third-party antivirus. 'Antivirus' apps on iPhone can't actually scan the system — they're just web filters and VPNs. Android: Optional but helpful for less tech-savvy users. Google Play Protect (built-in, free) scans apps automatically. Third-party options like Malwarebytes (free) provide an extra layer. More important than antivirus: don't install apps from outside the Play Store, don't grant unnecessary permissions, and keep your phone updated.

Ads popping up on your phone? How to find and remove malware

How adware gets on your phone

Android (most common): Adware typically arrives as a legitimate-looking app — a flashlight app, a QR scanner, a "phone cleaner," a free game, or a wallpaper app. These apps work as advertised but also run an ad service in the background that displays full-screen pop-up ads, even when the app itself isn't open. Some come from the Google Play Store (they pass review then push adware via updates), others come from APK files downloaded from websites. Budget phones (especially carrier-branded Telstra and Optus phones) sometimes come with pre-installed bloatware that behaves like adware.

iPhone (less common but still happens): iOS restricts what apps can do, so traditional adware is rare. But iPhones get: malicious calendar subscriptions (you accidentally tap "Subscribe" on a website and your calendar fills with fake "virus detected" events), compromised Safari profiles (a website tricks you into installing a configuration profile that redirects your browser), and web-based pop-ups from websites you visit (not actual malware — just aggressive web ads).

Android: how to find and remove the adware app

Step 1: Catch it in the act

Next time a pop-up ad appears, immediately tap the Recent Apps button (square icon or swipe up and hold). The app displaying the ad should be the most recent one in the list. Note its name — this is your culprit. If you see an app name you don't recognise, that's almost certainly the adware.

Step 2: Check recently installed apps

Settings → Apps → sort by "Last installed" or "Recently updated." Adware problems almost always start after installing a new app. Look at everything installed in the last 1-2 weeks. Common adware disguises: "Phone Cleaner," "Battery Optimizer," "Free VPN," "PDF Scanner," "QR Reader," "Weather Live," "Wallpaper HD," flashlight apps, and apps with generic names like "System Service" or "Update Manager."

Step 3: Boot into Safe Mode to confirm

Safe Mode disables all third-party apps — only pre-installed system apps run. How: Hold Power button → long-press "Power Off" until "Safe Mode" option appears → tap it. Phone reboots in Safe Mode (you'll see "Safe Mode" in the corner). Use the phone for 10-15 minutes. If ads stop: Confirmed — a third-party app is the cause. If ads continue: The issue is either pre-installed bloatware or browser-based (see Step 5).

Step 4: Uninstall the culprit

Settings → Apps → select the suspect app → Uninstall. If the Uninstall button is greyed out, the app has Device Admin privileges. Go to Settings → Security → Device Admin Apps → deselect the rogue app → then try uninstalling again. If you can't identify the specific app, uninstall everything installed in the last 2 weeks, one at a time, checking if ads stop after each removal.

Step 5: Clean up the browser

Some "ads" are actually browser notifications from websites you accidentally allowed. Chrome: Settings → Site Settings → Notifications → find and block suspicious websites. Samsung Internet: Settings → Notifications → Website Notifications → remove unknown sites. Also clear browser cache: Chrome → Settings → Privacy → Clear browsing data → select "Cookies" and "Cached images."

Step 6: Run a malware scan

Google Play Protect (built-in): Play Store → tap your profile → Play Protect → Scan. This checks all installed apps against Google's malware database. Malwarebytes (free): Install from Play Store → run a full scan. Malwarebytes catches adware that Play Protect sometimes misses. After the scan, uninstall Malwarebytes if you want — it's done its job.

Step 7: Nuclear option — factory reset

If you can't find the adware or it keeps coming back, a factory reset removes everything. Back up your data first (see our backup guide), then Settings → System → Reset Options → Erase All Data. After reset, reinstall apps one at a time from the Play Store only — don't restore from a backup that might re-install the adware.

iPhone: how to remove fake virus alerts and ad pop-ups

Remove malicious calendar subscriptions

These create fake "virus detected!" or "your iPhone is infected!" events in your calendar. Fix: Settings → Calendar → Accounts → look for a suspicious calendar account you didn't add (often called "Events," "Calendar Events," or a random URL) → tap it → Delete Account. The fake notifications stop immediately.

Remove rogue configuration profiles

A malicious website may have tricked you into installing a configuration profile that redirects Safari. Fix: Settings → General → VPN & Device Management. If you see any profiles you didn't intentionally install (from your workplace or school), delete them. If you don't have a "VPN & Device Management" section, you don't have any profiles installed — the issue is browser-based.

Clear Safari data

Settings → Safari → Clear History and Website Data. This removes cookies, cached data, and site permissions that may be causing redirects or pop-ups. Also: Settings → Safari → toggle ON "Block Pop-ups" and "Fraudulent Website Warning."

Disable notification spam from websites

Settings → Notifications → scroll through apps → look for Safari or any browser showing excessive notifications → toggle off. Some websites trick you into enabling push notifications that then send ad-like alerts.

How to prevent adware in the future

Android — the rules:

1. Only install from Google Play Store. Never install APK files from websites, Telegram groups, or file-sharing services. "Modded" free versions of paid apps are the #1 source of adware.

2. Check permissions before installing. A flashlight app that wants access to your contacts, camera, and phone calls is suspicious. A QR scanner that wants to display over other apps is likely adware.

3. Avoid "cleaner" and "optimizer" apps. Apps that promise to "clean your phone," "boost RAM," "cool your CPU," or "extend battery life" are almost universally adware or useless. Android manages its own memory and resources — these apps do nothing helpful and many inject ads.

4. Keep Play Protect on. Play Store → Profile → Play Protect → Settings → toggle on "Scan apps with Play Protect." This automatically checks apps for malware.

iPhone — the rules:

1. Never install configuration profiles from websites. If a website asks you to "install a profile" or download a ".mobileconfig" file, decline. The only legitimate profiles come from your employer or school IT department.

2. Don't tap "Allow" on notification prompts from unknown websites. If a website asks "example.com wants to send you notifications" — tap "Don't Allow" unless it's a site you genuinely want notifications from.

3. Don't subscribe to calendars from unknown sources. If a website asks you to subscribe to a calendar, decline. Legitimate calendar invitations come through email, not website pop-ups.

Warning about fake "virus detected" pop-ups: If your phone shows a pop-up saying "Your phone is infected! Download this app to clean it!" — this is itself the scam. Your phone is NOT infected (the pop-up is just a website ad). Close the browser tab. Do NOT download the suggested app — it's the actual malware. Real virus alerts come from your phone's operating system (Google Play Protect, iOS security alerts), never from websites.

When it's a hardware problem, not malware

Sometimes what looks like malware is actually a hardware issue. If your phone is randomly opening apps, typing characters, or behaving erratically, it might be ghost touch from a damaged screen — not adware. Ghost touch symptoms: the phone taps random areas, opens apps you didn't tap, types gibberish text. This is a screen/digitiser fault that needs physical repair, not a software fix.

If your phone is also overheating or experiencing rapid battery drain alongside the ad pop-ups, the adware might be running background processes. Removing the app should fix all three symptoms simultaneously.

For any hardware issues, use the repair calculator to check costs, or browse our troubleshooting guides.

Ads popping up on your phone? Here's how to find and remove the malware.