How to Remove Suspicious Apps from a OnePlus Phone
If your OnePlus phone is acting strangely, a hidden or suspicious app may be the cause.
This guide explains how to find, remove, and verify unknown apps while protecting OxygenOS, your data, and your privacy.
What counts as a suspicious app on OnePlus?
A suspicious app is any application you did not intentionally install, no longer recognize, or do not trust.
On OnePlus phones running OxygenOS, these apps may disguise themselves with generic names, request unusual permissions, or keep running in the background after you stop using them.
Examples include apps that:
- Were installed recently without your knowledge
- Show up with blank, generic, or misleading names
- Ask for SMS, Accessibility, Device Admin, or notification access without a clear reason
- Drain battery, use mobile data, or heat the phone unusually
- Display pop-ups, ads, or redirects outside normal use
Signs your OnePlus phone may have a harmful app
Suspicious behavior does not always mean malware, but it is worth investigating.
Common warning signs include slower performance, random app crashes, unusual battery drain, and new apps appearing after a software update, sideload, or browser download.
Other signs include:
- Settings changed without your input
- Phone permissions enabled for apps you barely use
- Unknown device administrators or accessibility services
- Unexpected text messages, especially verification codes
- Browser home page or search engine changes
How to remove suspicious apps from a OnePlus phone
Use a methodical approach so you remove the problem app without deleting something important.
Start with the app list, then check special permissions and system-level controls that can prevent uninstalling.
1. Review installed apps
Open Settings and go to Apps or Apps & notifications, depending on your OxygenOS version.
Tap App management or See all apps to review everything installed on the device.
Look for apps you do not remember installing, especially those with vague names like “System Service,” “Updater,” or “Cleaner.” Tap each suspicious app to view its details, install source, permissions, battery use, and storage use.
2. Uninstall the app
If the app is user-installed, tap Uninstall.
If you are unsure whether it is safe, search the exact app name online before removing it.
Security researchers often document common adware, spyware, and fake utility apps in public threat reports.
For apps downloaded from the Google Play Store, also consider checking your Google account’s app installation history.
This can help you identify when the app arrived and whether it was installed from another device synced to your account.
3. Remove admin access if uninstall is blocked
Some malicious or unwanted apps protect themselves with Device Admin privileges.
If uninstalling fails, go to Settings > Security & privacy > More security settings > Device admin apps and disable the suspicious app first.
After removing admin rights, return to the app page and uninstall it again.
This step is especially important for fake antivirus, remote access tools, and scam apps that try to stay on the device.
4. Check Accessibility permissions
Accessibility access can let an app read the screen, tap buttons, and control interactions.
On OnePlus phones, go to Settings > Accessibility > Downloaded apps or a similar menu and disable any app you do not trust.
Apps abusing Accessibility often hide from the launcher, so reviewing this setting is essential when you are learning how to remove suspicious apps from a OnePlus phone.
5. Remove unknown app installers and browser downloads
Some risky apps are installed through APK files rather than the Play Store.
Open Files, Downloads, or your browser’s download manager and delete any APKs you do not recognize.
If a browser repeatedly offers suspicious downloads, clear its download history and review notification permissions.
6. Boot into Safe Mode if the app keeps reopening
Safe Mode temporarily disables third-party apps, making it easier to remove stubborn ones.
On many OnePlus devices, press and hold the power menu, then long-press Power off until Safe Mode appears.
Exact steps can vary by OxygenOS version.
Once in Safe Mode, uninstall the suspicious app, then reboot normally.
If the app disappears in Safe Mode but returns later, it may be linked to another app, a browser extension, or a backup restore.
How to check permissions after removal
After uninstalling the suspicious app, inspect permissions across the phone to limit damage.
Go to Settings > Privacy > Permission manager and review access to Camera, Microphone, Contacts, SMS, Location, Files, and Calendar.
Revoke permissions from apps that do not need them.
Also review:
- Notification access for apps that may send phishing alerts
- Install unknown apps for browsers, file managers, and messaging apps
- VPN or Always-on VPN settings
- Special app access such as display over other apps
Use Google Play Protect and OnePlus security tools
Google Play Protect scans installed apps for known harmful behavior.
Open the Play Store, tap your profile, then choose Play Protect and run a scan.
If a threat is found, follow the removal prompts.
OnePlus phones may also include built-in security features through OxygenOS and Google services.
Keep Google Play system updates current and install the latest OxygenOS security patches from Settings > About device > Software update.
What to do if the suspicious app is still there
Some apps resist normal removal because they are tied to a work profile, device administrator role, or another app on the phone.
If the app remains after Safe Mode removal, try these checks:
- Search for the app in Work profile or Secure Folder-style spaces if your setup uses them
- Review newly installed launchers, keyboards, VPNs, and file managers
- Clear the suspicious app’s cache and data before uninstalling
- Check whether parental controls, MDM profiles, or enterprise management tools are installed
If the phone belongs to an employer or school, contact the administrator before removing managed software.
Removing a required management app can break account access or policy compliance.
How to protect your OnePlus phone after cleanup
Once the suspicious app is gone, reduce the chance of reinfection by tightening app installation habits and permission controls.
Install apps only from trusted sources, especially Google Play, and avoid third-party APK sites unless you can verify the publisher.
Helpful prevention steps include:
- Turn off Install unknown apps for every app that does not need it
- Review app permissions monthly
- Keep Android, OxygenOS, Chrome, and Google Play services updated
- Use a screen lock, biometrics, and two-factor authentication
- Watch for phishing links in SMS, email, and messaging apps
When should you factory reset a OnePlus phone?
A factory reset is usually a last resort, but it can help if suspicious behavior continues after removal attempts.
Consider resetting if you still see unauthorized app installs, repeated pop-ups, account hijacking, or system settings being changed again.
Before resetting, back up photos, contacts, and important files, then remove accounts from the device and enable two-factor authentication on email, banking, and cloud services.
After the reset, reinstall only essential apps and avoid restoring unknown APKs or old app backups that could reintroduce the issue.
Quick checklist for removing suspicious apps on OnePlus
- Review installed apps and uninstall anything unfamiliar
- Remove Device Admin and Accessibility access from suspicious apps
- Delete unknown APK files from Downloads and Files
- Scan with Google Play Protect
- Check permissions, notification access, and unknown app installers
- Use Safe Mode if the app will not uninstall normally
- Update OxygenOS and Google Play system components