Stalkerware is commercial surveillance software that is secretly installed on another person’s phone or computer to monitor their messages, location, calls and activity without their knowledge.
How stalkerware works
Stalkerware is a form of spyware sold openly as “parental control” or “employee monitoring”, but marketed and used to spy on partners. Installation usually requires brief physical access to an unlocked device. On Android the abuser sideloads an app and grants it accessibility, device admin and notification permissions; on iPhones, monitoring often relies on stolen iCloud credentials or a jailbroken device. Once active, the app hides its icon and uploads data to a web dashboard:
- SMS, messenger chats and call logs;
- GPS location history;
- photos, browsing history and sometimes live microphone or camera access.
Why stalkerware matters
Stalkerware is closely linked to domestic abuse, harassment and coercive control. Security companies and advocacy groups founded the Coalition Against Stalkerware in 2019 to improve detection and support victims. Regulators have also acted: in 2021 the US Federal Trade Commission banned SpyFone and its chief executive from the surveillance business. Stalkerware vendors are themselves frequently breached, exposing the private data of both victims and customers.
How to detect and respond to stalkerware
- Watch for warning signs: the abuser knows things they should not, rapid battery drain, unknown apps with accessibility or device admin rights.
- Run a reputable mobile security app; many now flag stalkerware explicitly.
- Change your Apple ID or Google password and enable two-factor authentication from a safe device.
- Before removing the app, consider your safety: removal may alert the abuser. Domestic violence support organisations can help plan next steps and preserve evidence.
