How to Detect mSpy on an Android Phone

Commercial spyware has made phone monitoring disturbingly easy. Anyone can now install tracking software on someone’s device—no technical skills required. This accessibility has led to a sharp rise in unauthorized phone monitoring over recent years.

The problem is getting worse. Spyware apps are available for as little as $30, putting invasive surveillance tools within reach of almost anyone. This makes it more critical than ever to know how to detect and protect yourself against these threats.

What is mSpy?

One example of this commercially available spyware is mSpy—a popular monitoring app designed primarily for parental control.

It allows parents to monitor their children’s activities on Android and iOS devices.

The app tracks a wide range of data, including phone calls, WhatsApp chats, text messages, location, social media interactions, and internet browsing history (more on this below).

Even though it’s designed as a tool for keeping children safe, many people don’t use it this way. This is something that mSpy seems well aware of—an advert seen on X openly promoted their software as a way to spy on your partner:

Fig 1. An advert for mSpy seen on X (formerly Twitter)

The mSpy app can be downloaded onto someone’s phone by an abusive partner or ex-partner to track their every move.

It has raised significant ethical and legal concerns, mainly when deployed without the explicit consent of the monitored individual. All someone would need is physical access to your phone for a few minutes.

This type of unauthorized surveillance can constitute a severe breach of privacy and is illegal in many jurisdictions.

Below, we’ll take a look at the features of mSpy.

mSpy For Android Features

mSpy is available for iPhone and Android for around $30 monthly. Here’s a list of the main features:

• Social media monitoring: Allows monitoring of activities on popular social media platforms like WhatsApp, Facebook Messenger, Instagram, Snapchat, Telegram, Tinder and more. This includes messages, calls, and media shared on these platforms.
• Keyword alerts: Users can set specific keywords in their Control Panel, and the app will notify them if any of those keywords appear in chats or searches on the monitored device.
• Call and SMS tracking: Tracks call logs, including the duration and contact details. It also monitors text messages and even deleted messages.
• GPS location tracking: mSpy provides real-time GPS tracking and geo-fencing capabilities, allowing a hacker to set virtual boundaries and receive alerts when their target device enters or exits these areas.
• Keylogging and screen recording: The app includes a keylogger that records all keystrokes made on the device. The screen recording feature captures screenshots of activities on specific apps, like messaging and social media apps.
• Monitor web browsing: This allows the hacker to track every website visited on the device, along with bookmarks, date/time visited, and duration spent on websites. It also allows the hacker to completely block access to any site they choose.
• Wi-Fi monitoring: mSpy also tracks Wi-Fi networks that the device connects to, providing details like SSID and location.
• Email and contact monitoring: mSpy can track emails, contacts and calendar events, giving a hacker a complete view of the device’s activities.
• View all media content: This feature allows the hacker to remotely view and download all media on the phone, such as pictures, videos, audio files, etc.

This software is powerful, considering the price a hacker would pay for access.

One thing worth noting is that unlike iPhones, an Android device does not need to be rooted for many of these features to work. This makes installation easier for the hacker when the victim has an Android phone or tablet.

There is also a free version of mSpy

In contrast to mSpy’s more comprehensive Android spyware, they also offer a free version of their app called mLite. This is a trimmed-down app primarily designed for location tracking. If installed on your device without your knowledge, someone could monitor your whereabouts in real time.

While less intrusive than mSpy’s full version, mLite’s accessibility—it is available on the Play Store like any other app—makes it a potential tool for unwanted surveillance.

mLite has been downloaded over 10 million times, showing just how much demand there is for monitoring tools.

Fig 2. The mLite Google Play page.

Use an anti-spyware app

The full version of mSpy is designed to be hidden from the user and it does this well.

An easy way to detect and remove mSpy is to use a reputable anti-spyware app. Certo AntiSpy is designed to help Android users detect and destroy privacy-invading spyware, including any version of mSpy and thousands of other spy apps.

In addition, Certo can also find and fix insecure system settings that put your phone at risk, prevent unauthorized access to your data, and help keep you protected online with a secure VPN. All of this will help reduce your risk of a potentially devastating privacy breach.

Fig 3. Detecting mSpy with Certo for Android.

Check if your Android device is rooted

Rooting is a process that grants administrator-level control over a device. This heightened control is required to unlock more advanced features of mSpy, such as keylogging or geofencing.

So it’s worth checking if your phone has been rooted. Here’s how:

1. Use a root checker app

This is the easiest and most common method:

1. Download a reliable root checker app from the Google Play Store (e.g., Root Checker).
2. Install and open the app.
3. It will scan your device and indicate whether it is rooted or not.

2. Check build information

This is a slightly more technical method:

1. Go to Settings > About phone.
2. Look for “Build number” and tap it repeatedly until you get a message saying you’re a developer.
3. Go back to the main settings menu, and you should now see a new Developer options entry.
4. Open it and look for an option related to root access (e.g., “Root access”). If you see it, your phone is rooted.

Look for the mSpy installer

When someone installs mSpy on your device, they need to download an APK installer file first. In many cases, they may forget to delete this file after installation—leaving behind evidence of the spyware.

The mSpy installer has specific file names you can look for:

• bt.apk
• bt-installer.apk

Here’s how to check your Downloads folder for these files:

1. Open your Files or My Files app (the name varies by device).
2. Tap on Downloads or Internal Storage > Download.
3. Look through the files for anything called bt.apk or bt-installer.apk.
4. If you find either file, someone has likely installed mSpy on your device. Delete the file immediately and follow the removal steps mentioned earlier in this post.

Final Thoughts

If you’ve found mSpy on your device, you’re not alone—and it’s not your fault. Spyware like this is unfortunately becoming more accessible, making it easier for controlling family members or anyone with brief access to your phone to invade your privacy.

What matters now is taking action. If mSpy is on your phone, removing it is just the first step. Consider changing your passwords, reviewing your app permissions, and talking to someone you trust about the situation—especially if you believe someone close to you installed it.

Your privacy is worth protecting. Tools like Certo AntiSpy can help you regain control and give you peace of mind knowing your device is secure. Take a few minutes to run a scan—it could make all the difference.

Frequently Asked Questions (FAQs)

How can I tell if mSpy is on my phone?

Both versions of mSpy for Android are apps installed directly on the device. However, these apps could be hidden, making them harder to spot.

First, look for apps on your phone called mLite or Update Service, and check app folders. If this search doesn’t identify mSpy, you may want to run a full scan with an anti-spyware app, such as Certo AntiSpy. This can find mSpy and many other spy apps, even if they have been made invisible.

How can I remove mSpy from an Android phone?

In most cases, mSpy can be removed like any other app as long as you can locate it. Just find the app on your home screen, long-press on it, and then tap Uninstall.

Certain versions of mSpy may have Device Admin permissions on your device, making it more difficult to uninstall.

In this case, you’ll need to head over to the Settings app and search for “device admin,” then tap on Device admin apps, find the app, and disable the permission. You can then uninstall the app as usual.

Alternatively, Certo’s free Android app can remove mSpy and other threats from your Android phone with a tap of a button. Just search ‘Certo’ in the Play Store.

What are spy apps disguised as on Android?

Spy apps often use misleading names to disguise themselves as legitimate apps on the victim’s phone. Here are the names that the top 4 Android spy apps use to go unnoticed:

• Update Service = mSpy
• Sync Service = Hoverwatch
• Phone Tool = SpyToMobile
• Sync Services = FlexiSpy