What is spyware?
Definition
Spyware is software that secretly collects information from your device, such as what you type, where you are or what you browse, and passes it to someone else without your knowledge.
- Category
- Attacks
- Also called
- spy software, stalkerware, Computer spyware
- Last updated
Spyware is a kind of malware, harmful software installed on a device without the owner's knowledge. CISA says spyware can track your location and communications, access data on your device, and switch on the camera and microphone without you knowing. Stalkerware is a related category: apps installed to watch a partner or family member.
How it gets on a device
Typical routes are a link or attachment in a phishing message, software bundled with a free download, fake "cleaner" or "anti-spyware" offers, and apps installed by someone with physical access to the device. CISA warns that some supposed spyware-removal tools are spyware themselves.
Signs to look for
On a computer, CISA lists endless pop-ups, unexpected redirects, new toolbars, a changed home page and a sudden slowdown. On a phone, the FTC points to faster battery drain, unexpected data use, overheating and unexpected restarts. Spying apps can hide in the settings under bland names like "System Service". None of these signs prove spyware, since ordinary faults cause the same things.
Why it matters
What spyware collects can include your passwords, messages, location and photos, depending on what it can reach. That means identity theft, account takeover or being tracked by someone who shouldn't know where you are.
Spyware vs. related terms
- Malware is the broad category.
- Keyloggers record what you type and are one kind of spyware.
- Adware shows unwanted ads. It can also track you.
- Stalkerware is spyware installed to monitor someone close to you.
How to protect yourself
- 1
Keep your device and apps updated
Updates fix weaknesses that malware uses to get in.
- 2
Download from trusted sources only
Skip pirated software and random "free" tools, and don't click pop-ups or links in unexpected messages.
- 3
Scan with up-to-date security software
CISA notes that real-time monitoring can miss spyware, so a dedicated scan can help.
- 4
Change passwords and turn on two-step verification
Do it from a clean device, since the spyware may have captured your logins. The FTC suggests holding off on sensitive logins such as banking until the device is clean.
- 5
Consider a factory reset
The FTC says a factory reset can remove a spying app. Don't restore old backups or apps, since that can bring it back.
- 6
If someone close to you may be responsible
The FTC advises speaking to a domestic violence advocate before removing stalkerware, because removing it may alert the person watching you.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
How do I know if I have spyware?
Look for slowdowns, pop-ups, redirects, new toolbars or odd battery and data use. A security scan is a better check than guessing.
Can spyware be removed?
Often, yes. A scan with security software can remove it, and a factory reset can clear a device. Change your passwords afterwards from a clean device.
What is the difference between spyware and a virus?
A virus is malware that spreads by copying itself. Spyware's purpose is collecting your information in secret, and it doesn't need to spread.
Sources
- consumer.ftc.gov/articles/malware-how-protect-against-detect-and-remove-it
- cisa.gov/news-events/news/recognizing-and-avoiding-spyware
- consumer.ftc.gov/articles/stalkerware-what-know
- cisa.gov/resources-tools/training/follow-cybersecurity-best-practices-protect-yourself-tracking-technologies-and-spyware
Something wrong or out of date? Tell us and we'll re-check it.