I may be overthinking this, but I want to make sure my iPhone is secure and hasn't been compromised. I haven't seen anything obviously suspicious, and I've already checked Settings → General → VPN & Device Management for unknown profiles or device-management entries. I also checked Hidden Apps, don't see any unfamiliar apps, and haven't knowingly installed anything outside the App Store. Are there other places I should check for unknown configuration profiles, certificates, unusual permissions, background activity, or signs that someone is remotely accessing the phone? Is there any kind of malware scan for iPhone, or is that generally unnecessary because of how iOS is designed? I'd appreciate a practical checklist for verifying that nothing malicious is installed or controlling the device.
3 Answers
There isn’t a normal antivirus-style scan that can inspect the whole iPhone, and apps from the App Store don’t have the access needed to perform one. Check Settings → General → VPN & Device Management, certificates and profiles, app permissions, forwarding or sign-in settings for your email and messaging accounts, and the list of devices signed in to your Apple Account. Change your Apple Account password and enable two-factor authentication if anything looks unfamiliar.
If the phone is up to date, not jailbroken, and you’re not seeing Apple’s security warnings, an actual malware infection is unlikely. iOS apps are sandboxed, so ordinary apps generally can’t inspect or control the rest of the system. Keep iOS updated, review installed apps and their permissions under Settings → Privacy & Security, check Battery for anything behaving unusually, and look through your Apple Account device list for devices you don’t recognize. Also review Safety Check if you’re concerned that another person has access to your accounts or shared data.
If you have a concrete reason to suspect tampering, the most reliable cleanup is to back up only the data you need, erase all content and settings, install the latest iOS, and set the phone up as new rather than restoring a full system backup. Before doing that, secure your Apple Account and other important accounts from a trusted device. Normal photos, contacts, and documents don’t carry an iPhone infection, but restoring unknown configuration profiles or reinstalling a suspicious app could bring the underlying problem back.
Would transferring my data to a new iPhone put the new phone at risk?

Unexpected battery drain, crashes, or heat are worth investigating, but they aren’t proof of malware by themselves. Updates, poor reception, and a misbehaving app can cause the same symptoms.