Can iPhones get viruses? What is real, and what is a scam

Safety first. If you think someone you know put spyware or a profile on your iPhone to watch you, plan before you remove anything. The FTC warns that an abuser “may escalate their abuse if they suspect you’re cutting off their access to your phone.” Contact the National Domestic Violence Hotline from a device that person cannot reach: 1-800-799-7233 or thehotline.org. In an emergency, call 911.

Not in the way a computer can. iOS, the iPhone’s operating system, is built so that one app cannot freely reach another app or change the system. That makes a classic virus hard to spread. A virus is a program that copies itself from one place to another. But iPhones still have real problems: fake “your iPhone is infected” alerts, unwanted settings profiles, and spam calendar invites. Advanced spyware exists too, but Apple says “the vast majority of users will never be targeted” by it. And no, an iPhone does not need antivirus.

Why a virus has a hard time on an iPhone

Apple’s Platform Security guide (December 19, 2024) says all third-party apps are “sandboxed.” A sandbox is a walled-off area for each app. Apple says sandboxing “is designed to prevent apps from gathering or modifying information stored by other apps or from making changes to the device.” It adds that the system does not let apps raise their own privileges to modify other apps.

Apps also go through Apple’s App Review. The App Review Guidelines say apps “may not read or write data outside the designated container area.” They also say apps that “transmit viruses” will be rejected.

How well does review work? Apple says its App Review team evaluated more than 9.1 million submissions in 2025 and rejected over 2 million for breaking its guidelines (Apple Newsroom, May 20, 2026). Apple also says it removed nearly 59,000 apps that were approved as standard games or utilities and then changed after review to commit fraud. These are Apple’s own figures. They show that review catches a lot, and that bad apps do try to get through.

Does an iPhone need antivirus?

No. Because apps cannot look inside each other, a security app cannot scan your other apps. That is our reading of Apple’s design, not an Apple quote.

Apple’s rules point the same way. The App Review Guidelines name “iOS-based virus and malware scanners” as an example of a service an app might promise but “does not actually offer.” Marketing like that “is grounds for removal” from the App Store. So be careful with any app, ad or pop-up that says it will clean viruses from your iPhone.

What does protect you is plain and free. Apple’s threat notification page lists these steps for all users:

• Update your iPhone to the latest software.
• Protect it with a passcode, Touch ID, or Face ID.
• Use two-factor authentication and a strong password for your Apple Account.
• Install apps from the App Store.
• Do not open links or attachments from unknown senders.

To turn on automatic updates, go to Settings, General, Software Update, then Automatic Updates. Apple says keeping software up to date “is one of the most important things you can do” for security (page dated September 15, 2026). For passkeys, see Passkeys vs passwords. For a computer, see Do you need antivirus?

The three real problems, and how to fix each

1. A fake “your iPhone is infected” alert

This is a web page or ad made to look like a security warning. It usually tells you to call a number or tap a link. Apple says these pop-ups “are usually fraudulent advertisements” and tells you not to call the number or follow the links. The FTC says real security warnings “will never ask you to call a phone number.” It also says legitimate tech companies will not contact you by phone, email, or text about a problem.

1. Close the tab or window. Do not tap anything inside the alert.
2. If the page keeps coming back, go to Settings, Apps, Safari, then tap Clear History and Website Data. Choose a time range and tap Clear History.
3. If you already called, paid, or gave access, change your passwords. The FTC says to change a password you gave away right away, and anywhere you reused it. If a charge appears on your card or bank statement, report it and ask your card company or bank to reverse it.
4. Report the scam at ReportFraud.ftc.gov, as the FTC asks.

2. A configuration profile you did not want

A configuration profile is a file that can change settings on your iPhone. Schools and employers use them to manage devices. Apple warns about apps that ask you to install a profile “that can then control your device.” Apple’s Personal Safety guide says management tools “may allow access to data or location information on the device.”

1. Go to Settings, General, then VPN & Device Management.
2. If you see no profiles, none are installed.
3. If you see one you do not recognize, tap it, tap Delete Profile, and follow the steps. Then restart the iPhone.
4. On a work or school iPhone, ask your administrator first. Apple says deleting a profile deletes all of its settings and information.

3. Spam calendar invites and subscriptions

A calendar subscription is a feed that adds events to your calendar. Spam ones can fill it with unwanted events. Apple explains how to delete a calendar or unsubscribe from it, and how to report an event from an unknown sender as junk.

1. To remove one event, open it in Calendar and tap Delete Event. If the sender is unknown, tap Report Junk, then Delete and Report Junk.
2. To remove a whole calendar, tap Calendars, then the info button next to it. Tap Delete Calendar or Unsubscribe and confirm.
3. If a calendar cannot be deleted, you can hide it by clearing the checkmark next to it.

Rare but real: spyware aimed at a few people

Apple calls the most advanced kind “mercenary spyware.” It says these attacks use huge resources and target “a very small number of specific individuals.” Apple says it has notified users in over 150 countries since 2021 (page dated August 13, 2026). It also says the vast majority of users will never be targeted.

If Apple thinks you were targeted, it sends a threat notification. You may see an alert on the Lock Screen and in Settings, an email, and a banner on your Apple Account page. Apple says a real notification never asks you to click a link, open a file, install an app or profile, or share a password or code. To check one, sign in at account.apple.com. A genuine notification shows at the top of the page.

Apple recommends turning on Lockdown Mode if you get one. It also suggests help from the Digital Security Helpline run by the nonprofit Access Now, which is open 24 hours a day. Lockdown Mode is “optional, extreme protection,” Apple says, and “most people are never targeted by attacks of this nature.” It blocks most message attachments, and it blocks the installing of configuration profiles. Apple explains how to turn it on on its Lockdown Mode page.

Jailbreaking removes protections

Jailbreaking means changing iOS to get around Apple’s limits. Apple says this bypasses security features. It adds that, with that security removed, “hackers may steal your personal information, damage your device, attack your network, or introduce malware, spyware, or viruses.” The FTC says some stalkerware needs a rooted or jailbroken phone. If you did not jailbreak your iPhone, this does not apply to you.

Checking an iPhone for spyware

There is no scan button. Instead, check these things:

1. Update iOS, so the latest security fixes are installed.
2. Look for profiles in Settings, General, then VPN & Device Management.
3. Open Safety Check in Settings, Privacy & Security, to see who and what can see your data.
4. Look for apps you do not remember installing.
5. Read our guides on signs of a hacked phone and on phone tracking.

What can go wrong

• Deleting a profile on a work or school iPhone removes the settings your employer or school set up.
• If a pop-up scam already got your passwords, your iPhone may be fine but your accounts are at risk. Change those passwords right away, as the FTC advises. See Am I hacked?
• Clearing Safari history removes your browsing data for the time range you choose.
• Do not call a number from a pop-up. The scammer may ask for payment or remote access.

What to do now

1. Update your iPhone and turn on Automatic Updates.
2. Check Settings, General, VPN & Device Management for profiles you do not recognize.
3. If an “infected” alert appears, close the tab and do not call. Clear Safari data if it returns.
4. Unsubscribe from calendars you do not know, and report junk invites.
5. Turn on two-factor authentication for your Apple Account, and use a strong, unique password.