Spyware on my phone :/

Accounts are easily compromised, especially when using the same password on multiple services, but your phone is not. Start by changing your Passwords on your:

• Apple Account
• Email Account
• Dropbox Account
• Chime Account
• Box Account (as I assume from your screenshot)
• All Social Media Accounts

Also enable Two Factor Authentication on every account that supports it so someone is not able to gain access just by typing your Password. Changing the password on an account only prevents further access, it would not remove any data that they previously had access to. So for accounts such as banking account, you will also want to change those account numbers to prevent further use of any linked cards.

Mandyfkingdandy wrote:

Oh and I had my emails and Apple account passwords on my phone and I gave someone my password to one of my email accounts now when I go to sign into a Google account it gets stopped by Cloudflare and the coding files say that they rerouted some websites that I visit so say I go to Google accounts it said next to dont allow access.

Was this email account also your password-reset path?

Because if that email account was your password reset path for some or all of your accounts, that was also your account security for all other that-email-associated accounts.

You might be able to regain control of these accounts, but whoever you were handing out passwords to has input into any attempted recovery, too.

Given you’ve compromised this password and potentially with other secondary compromises, start here:

• If you think your Apple Account has been compromised - Apple Support.

Given your fears, and given your password security practices, and given your reported network routing messes, just get rid of all this gear. You won’t ever be assured this gear is not compromised, and nobody can claim it isn’t compromised with certainty. Proving a negative, etc.

It is very unlikely that anyone put spyware on your phone – especially if you maintained physical possession of the phone.

However, you may want to check that

• You are not sharing an Apple Account with anyone else
• Your Apple Account is secure – nobody else knows, or can easily guess, the password
• You are not sharing e-mail accounts with anyone else
• Your e-mail accounts are secure - nobody else knows, or can easily guess, their passwords

If you think your Apple Account has been compromised - Apple Support

Mandyfkingdandy wrote:

Oh and I had my emails and Apple account passwords on my phone and I gave someone my password to one of my email accounts now when I go to sign into a Google account it gets stopped by Cloudflare and the coding files say that they rerouted some websites that I visit so say I go to Google accounts it said next to dont allow access.

If you gave the password to one of your email accounts to "someone", that person (or anyone to whom they. told the password) could have viewed any of your emails in that account, or sent emails from that account.

That wouldn't involve "spyware" at all. It would be like you handing a random person on the street the key to get into your house.

Mandyfkingdandy wrote:

I use passkeys for my emails that I have I do have like 5 or 6 different email addresses that I use but I created a passkey on one of them and just deleted it and then j tried to recreate one and it said this device doesn’t support me to be able to create one it said use my other device that I’m signed into . See it’s always something and now my airdrop won’t turn on no matter what I do and it’s not even there when you look it up ill show you its supposed to be right there but it’s not

https://discussions.apple.com/content/attachment/bc987713-a353-4aaa-ae02-e99cfd4835b8

Go to Settings > Screen Time > Privacy & Security > Allowed Apps & Features > AirDrop, and make sure it is turned on. With it off, you will not see it in Settings just like in your Screenshot. It would not have been turned off by default.

To determine if there are any others devices signed into your account, go to Settings > [name on top], and scroll to the bottom. The device list there are currently signed into your account and you can tap on any to delete them.

If you are using a Passkey on another device linked to that email account, you can use AirDrop to share that Passkey.

• https://support.apple.com/guide/iphone/share-passwords-securely-with-airdrop-iph0dd1796bb/ios
• https://support.apple.com/en-us/120758

Because all my email accounts have devices logged into them and I recieved coding files that showed transactions to bank accounts that were in my name but I never saw any of the money and I have direct deposit slips authorizing my employer to put all of my paycheck into these accounts and it had my name signed and dated I’ve found weird photos on my phone of screenshots they’ve taken but the ip address always comes back as mine .

And when we went to to the at&t store to get upgraded iPhones our phone numbers were already on them like they were expecting us to come in and I saw a file that showed some weird things downloaded onto the phone before I got it .

Oh and I had my emails and Apple account passwords on my phone and I gave someone my password to one of my email accounts now when I go to sign into a Google account it gets stopped by Cloudflare and the coding files say that they rerouted some websites that I visit so say I go to Google accounts it said next to dont allow access.

Oh and when I go to sign into my Apple account or get a code from a recovery account that I’m trying to access the code gets sent to a different number than mine and the files that I got sent said that someone changed my recovery email for my account and it has the date and time and someone has had access to my phone especially when I’m sleeping I’ll see screenshots in the morning of a video they sent out a personal one if you know what I mean :(

Things like this would cause the suspicion Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23G83 [FBAN/FBPageAdmin;FBAV/504.0.0.30.106;FBBV/1050314614;FBDV/iPhone15,4;FBMD/iPhone;FBSN/iOS;FBSV/26.6.1;FBSS/3;FBID/phone;FBLC/en_US;FBOP/5;FBDI/55F9D4FD-EB26-4F6F-BB2F-5723A99A84BD;FBRV/0

jennbruhn wrote:

Things like this would cause the suspicion Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23G83 [FBAN/FBPageAdmin;FBAV/504.0.0.30.106;FBBV/1050314614;FBDV/iPhone15,4;FBMD/iPhone;FBSN/iOS;FBSV/26.6.1;FBSS/3;FBID/phone;FBLC/en_US;FBOP/5;FBDI/55F9D4FD-EB26-4F6F-BB2F-5723A99A84BD;FBRV/0

Why would it cause suspicion?

Which word, phrase, or set of random characters seem suspicious?

Of those words, phrases or set of random characters, what should the values be to allay suspicion?

jennbruhn wrote:

Things like this would cause the suspicion Mozilla/5.0 (iPhone; CPU iPhone OS 26_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23G83 [FBAN/FBPageAdmin;FBAV/504.0.0.30.106;FBBV/1050314614;FBDV/iPhone15,4;FBMD/iPhone;FBSN/iOS;FBSV/26.6.1;FBSS/3;FBID/phone;FBLC/en_US;FBOP/5;FBDI/55F9D4FD-EB26-4F6F-BB2F-5723A99A84BD;FBRV/0

Looks like a browser string from the Facebook Pages Admin or some other Facebook app.

Probably on an iPhone 15 running iOS 26.6.1.

You’ll want to be more specific about what you’re suspicious about here.

Other than the concerns with Facebook apps and activities that some people will have, that is.

Because I have files on my phone that I didn’t put there for example my chat got has chats that I didn’t do so I think someone has logged onto my email account and is using things thru that to get my info

Mandyfkingdandy wrote:

Because I have files on my phone that I didn’t put there for example my chat got has chats that I didn’t do so I think someone has logged onto my email account and is using things thru that to get my info

Do you have two-factor authentication enabled?

Has the Apple Account password been used on other services?

Yes it has been used on other devices it’ll tell me in my Google account setting you know under devices and where your logged in at and the files that I had sent to my phone said that another iPhone 17 pro max was on my email but they Firefox mozilla and I never use that I have duck duck go and an email for syncing data from duck duck go was sent from my phone to someone’s email I’ll show you

[Edited by Moderator]

And I didn’t send that I didn’t even have that in my emails it was just a screenshot that happened to end up in my photos cuz someone has my back lol they’ve been sending me everything and it’s mind blowing they had opened accounts ts and were transferring money in and out of it without me even knowing from chime banking I’m suing them by the way their already investigating it cuz it’s well over 50,000 and my sex videos were put online and then a deposit would come thru but to who did it go to ??? lol

I use passkeys for my emails that I have I do have like 5 or 6 different email addresses that I use but I created a passkey on one of them and just deleted it and then j tried to recreate one and it said this device doesn’t support me to be able to create one it said use my other device that I’m signed into . See it’s always something and now my airdrop won’t turn on no matter what I do and it’s not even there when you look it up ill show you its supposed to be right there but it’s not

Your device cannot be remotely accessed or controlled. What makes you think that it is being accessed?

Yes I’ve seen files just like that on my phone but I never use Mozilla as my browser I use duck duck go