PRIVACY FIRSTPUTTING YOUR PRIVACY FIRST.
READY OFFLINE
FREE SPYWARE SCANNER · POWERED BY MVT
A free spyware scan for Android phones and iPhones. Connect an Android phone by USB, or open an iPhone backup, and run Amnesty International's Mobile Verification Toolkit (MVT) against published indicators for Pegasus, Predator, stalkerware and more. No installs, no accounts, no uploads.
Unofficial web port. WebMVT Scanner is PrivacyFirst's port of the open-source Mobile Verification Toolkit to the browser. It is not an official MVT or Amnesty International product, and is not affiliated with, endorsed by or supported by Amnesty International, its Security Lab or the MVT project.
This tool cannot confirm with 100% certainty whether your device is infected. It checks your device against thousands of known indicators of compromise (app names, file fingerprints, app signing certificates, domains and process names) from published investigations by Amnesty International, Citizen Lab and other researchers.
These are the checks of the Mobile Verification Toolkit (MVT), developed by Amnesty International's Security Lab and used by forensic investigators to detect mercenary spyware such as Pegasus and Predator, as well as commercial stalkerware. A clean result means none of these known traces were found; it cannot rule out new or unpublished spyware. Anything it finds should be confirmed by a forensic expert.
Everything runs locally in your browser. Your device's data, the scan and the report never leave this computer and are never sent to us or anyone else. There is no server behind this page. Once the page has loaded, you can switch off Wi-Fi and mobile data and run the whole scan offline.
Indicators last updated recently.
Published indicators for Pegasus (NSO Group), Predator (Intellexa), Candiru, Operation Triangulation, KingSpawn, NoviSpy and other government-grade spyware, from investigations by Amnesty International, Citizen Lab, Google, Kaspersky, Lookout and others.
Thousands of indicators for commercial monitoring apps sold to spy on partners and family, such as TheTruthSpy, from the Échap project's stalkerware list.
On Android: apps installed from outside the Play Store, Play Protect switched off, apps using accessibility services, rooting tools, files in suspicious places and unusual crashes.
Phone-cracking tools such as Cellebrite and Magnet Forensics' GrayKey copy data from a phone someone has taken, and rarely leave traces. The scan only catches published cases, such as the spyware Amnesty found installed after Cellebrite unlocks in Serbia. See the FAQ below.
Want the full background, including how to protect your phone? Read our guide: How to check your phone for spyware, and how to stop it getting on.
adb or Android Studio on this computer, close them first (adb kill-server), because only one program can talk to the phone at a time.Your browser will ask which device to use, then the phone will ask you to Allow USB debugging. There's no need to tick "Always allow": this page uses a new key on every visit.
Choose an AndroidQF acquisition zip (made by AndroidQF, or downloaded from this page). It is read in this browser only.
Don't close this tab.
These files are created in your browser. Store them somewhere safe: they contain information about the device.
Done with the phone? Turn USB debugging off again in Developer options.
Please wait a few minutes and do not leave this page.