To remove malware from an Android phone, disconnect from the internet, reboot in safe mode, uninstall suspicious apps, clear browser data, then run a reputable mobile antivirus scan and change your passwords afterward.

Quick Scoop

  • Signs you may have malware
    • Sudden pop‑ups, redirects, or full‑screen ads even when no browser is open.
* Phone feels unusually slow, overheats, or battery drains very fast.

* Unknown apps installed, strange charges (SMS, subscriptions, in‑app buys), or high data usage.
  • First things to do (fast actions)
    • Turn off Wi‑Fi and mobile data to limit communication with malicious servers.
* Power off and then reboot into **Safe mode** so third‑party apps (including many malware apps) don’t run.

* In safe mode, uninstall any app you don’t recognize, don’t remember installing, or that coincides with when problems started.

Step‑by‑step removal guide

1. Disconnect and go into Safe mode

  • Turn off Wi‑Fi and Mobile data from Quick Settings to block the malware from talking to remote servers or downloading more payloads.
  • Enter Safe mode (steps vary slightly by brand but are typically): hold the power button → long‑press “Power off” on screen → tap “Safe mode” to restart; this boots with only system apps active.

2. Uninstall suspicious apps

  • Go to Settings → Apps (or Apps & notifications) and look for: apps you don’t remember installing, with generic names, weird icons, or excessive permissions (e.g., SMS + accessibility + device admin).
  • Tap those apps → Uninstall ; if uninstall is greyed out, first remove device admin rights via Settings → Security → Device admin apps , then try again.

3. Clear browser malware (pop‑ups & redirects)

  • For Chrome or other browsers, clear bad data: Settings → Apps → [Browser] → Storage → Clear cache / Clear data to remove malicious redirects or notification spam sources.
  • Open the browser, go to Settings → Site settings → Notifications , and block or remove any shady sites that are allowed to send notifications.

4. Run a full antivirus scan

  • Install a trusted mobile security app (examples include Bitdefender, Norton, Malwarebytes, and other well‑known brands from Google Play with many downloads and good ratings).
  • Open the app and run a full device scan , then follow prompts to quarantine or remove any detected threats.

5. Reset and secure if problems persist

  • If issues remain after manual cleanup and scans, consider a factory reset : back up important photos and documents (not suspicious APKs), then go to Settings → System → Reset → Erase all data (factory reset).
  • After reset, reinstall apps only from Google Play, sign in, and immediately enable security features and a reputable antivirus again.

Extra protection & “latest” angle

  • Turn on Google Play Protect : in Google Play, tap your profile → Play Protect → enable app scanning and improved harmful app detection to catch sketchy installs, including some sideloaded ones.
  • Avoid risky behavior that’s often discussed in current security forums: avoid pirated APKs, “modded” apps, fake system boosters, and apps that request disabling security tools.
  • Harden your accounts : change Google and banking passwords after cleanup, and enable two‑factor authentication to reduce damage if passwords were stolen.

TL;DR:
Boot into safe mode, delete suspicious apps, clear browser data, run a trusted antivirus scan, and if the phone still acts infected, back up data and do a factory reset, then lock things down with Play Protect and 2FA.

Information gathered from public forums or data available on the internet and portrayed here.