How can I remove a crypto mining virus from my Android phone?

You can usually remove a crypto mining virus from your Android phone by uninstalling the app causing it, removing any permissions that protect it, and checking your phone with Google Play Protect. If the mining only happens while a website is open, closing that page may be enough—heat and battery drain alone do not prove your phone has a virus.

First, stop the activity safely

If your phone is unusually hot, unplug it, stop using it, and let it cool somewhere shaded. Turn on airplane mode and switch off Wi-Fi to interrupt internet access while you investigate.

Think about when the problem started:

• Did you install an app from a website, message, or unofficial app store?
• Did you open a page promising free crypto or easy mining income?
• Does the phone stay hot and drain quickly even when you are not using it?

Browser mining uses code on a webpage to make your phone do calculations. Close the suspicious tab and force-stop your browser through Settings > Apps > your browser > Force stop. If the activity stops, you may not have an installed infection. Remove the site’s notification permission too, especially if it sends alarming “virus detected” messages.

Do not install a cleaner advertised by those warnings.

Find and remove suspicious apps

Android menus differ by phone brand and version. Use the search box in Settings if a menu name does not match.

Check Settings > Battery > Battery usage for apps consuming unusually large amounts of power. Also check app data usage. These are clues, not proof: games, video calls, updates, and weak mobile signals can cause similar symptoms.

Review Settings > Apps, especially recently installed apps. Uninstall anything unfamiliar or installed just before the trouble began. Be particularly cautious about downloaded “mining boosters,” cracked apps, and fake updates.

If Uninstall is blocked:

• Search Settings for Device admin apps. Turn off administrator access for the suspicious app. This permission can prevent removal.
• Check Accessibility for unfamiliar enabled services. Accessibility access helps apps assist you, but malicious apps can misuse it to control the screen.
• Try uninstalling again.

Do not disable unfamiliar system components at random. If the phone belongs to your employer, contact its IT team before changing management settings.

Use safe mode and check the phone

If an app keeps interrupting you, restart in safe mode, which temporarily disables downloaded apps. On many Android phones, you can open the power menu and press and hold Power off to see this option. If that does not work, follow your phone maker’s instructions.

Remove the suspicious app while in safe mode, then restart normally.

Next:

• Open Google Play Store > profile picture > Play Protect > Scan.
• Install Android security updates and app updates.
• Under Install unknown apps in Settings, disable permission for browsers or file managers that do not need it.

A clean scan is reassuring, but it cannot guarantee that every threat is gone.

Reset only if the problem persists

Back up photos, contacts, and documents, then consider a factory reset, which erases your phone’s apps, settings, and local data. Know your Google account password before resetting.

Set the phone up fresh rather than automatically restoring every app. Reinstall only trusted apps. If you suspect passwords were stolen, change them from another trusted device and review account sessions.

The bottom line

Start with the suspicious browser tab or recently installed app, then check permissions and run Play Protect. If problems survive a clean reset, ask your phone maker for help—an aging battery or another hardware problem may be responsible.