Digital Safety

Warning signs of spyware

• Battery drains faster than usual even when the phone is idle.
• Phone becomes warm without being in use.
• Unusual data usage — check Settings → Mobile Data to see which apps are using unusually high data.
• Phone takes longer than usual to shut down (spyware can delay shutdown while it uploads data).
• The abuser knows things about your conversations or movements that you haven't told them.
• Unknown apps installed — especially ones labelled "System Update," "Phone Manager," or "Parental Control."

What to do if you suspect spyware

• Do not delete apps immediately — this may alert the abuser that you found the spyware. Plan your exit first.
• Use a safe device (library, friend's phone) to seek help and make plans.
• Only remove spyware when you are in a safe location and the abuser cannot see your phone.
• A factory reset removes all spyware — but do this only when safe and after backing up your evidence.

Priority order for account security

1. Email first — everything else can be reset through email. Change your email password from a safe device using an email he doesn't know about as the recovery option.
2. WhatsApp — Settings → Account → Two-step verification → set a 6-digit PIN he doesn't know.
3. Banking apps — change your mobile banking PIN. If possible, change the registered mobile number to a new SIM.
4. Instagram, Facebook — change passwords, enable 2-factor authentication, review and remove linked devices.

Check for logged-in sessions

• Google: myaccount.google.com → Security → "Your devices" → remove any unknown device.
• WhatsApp: Settings → Linked Devices → remove all linked devices.
• Instagram: Profile → Settings → Security → Login Activity → log out unknown sessions.

Safe messaging apps

• Signal — most secure option. Messages are end-to-end encrypted and do not back up to the cloud by default. Enable "disappearing messages."
• WhatsApp — end-to-end encrypted, but backups to Google Drive can be read if someone has access to your Google account. Disable cloud backup if using for sensitive communication.
• Avoid communicating about your plans on a device the abuser has or had access to.

Safe browsing

• Use private/incognito mode on any browser — this does not save history on the device.
• Be aware that your Wi-Fi router may log websites visited — use mobile data (not home Wi-Fi) when researching sensitive topics.
• After visiting this site on a shared device, delete it from browser history: Chrome → ⋮ → History → Clear browsing data.

Location safety

• Disable "Live Location" sharing with the abuser on WhatsApp: Contact → View Live Location → Stop sharing.
• Remove the abuser from Google Maps location sharing.
• Check your phone for tracking apps: Settings → Location → App permissions — any app you don't recognise should be investigated.
• Photos taken on smartphones embed GPS coordinates (metadata) — send photos via apps that strip metadata, or turn off location for your camera app.

Aadhaar misuse

• An abuser who has your Aadhaar number can potentially access information about you or fraudulently create accounts in your name.
• Lock your Aadhaar biometrics: uidai.gov.in → myAadhaar → Lock/Unlock Biometrics. This prevents anyone from using your fingerprints to authenticate without your permission.
• Check your Aadhaar authentication history: uidai.gov.in → Aadhaar Authentication History.

SIM swap fraud

• An abuser with your ID can potentially request a duplicate SIM from your carrier, allowing them to receive your OTPs and 2FA codes.
• Set a SIM lock PIN on your phone. Contact your carrier to place extra verification requirements on your account.

Truecaller risks

• If the abuser or their family knows your name, they can look up your phone number on Truecaller — even a new number can be identified if linked to your name.
• Register on Truecaller's opt-out list: truecaller.com/unlisting